Heap overflow

Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77...

Null pointer dereference

Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074...

CVE-2019-12897

CVE-2019-12897 affects Edraw Max 7.9.3. The vulnerability is described as a Read Access Violation at the Instruction Pointer triggered after a call from ObjectModule!Paint::Clear+0x... (address provided). Connected sources corroborate this description across multiple feeds; no additional technica...

CVE-2019-12897

Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074...

CVE-2019-12896

Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77...

CVE-2019-12896

Summary: CVE-2019-12896 affects Edraw Max 7.9.3 and involves a heap corruption vulnerability. The specific trigger is described as corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x1a77. Several connected sources (Red Hat, CNVD, NVD entry) confirm the software and version, with the issue iden...

CVE-2018-16618

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

CVE-2018-16618

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

Command injection

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

CVE-2018-16618

VTech Storio Max devices running before 56.D3JM6 are affected by CVE-2018-16618. An exposed storeintenttranslate.x service on localhost:1668 accepts requests that combine random characters with an Android activity name; the activity name is inserted into a shell command. By injecting shell metach...

CVE-2018-16618

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

PT-2019-13006

Name of the Vulnerable Software and Affected Versions Edraw Max version 7.9.3 Description The issue is related to Heap Corruption, specifically starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77. Recommendations For Edraw Max version 7.9.3, at the moment, there is no information about a...

PT-2019-13007

Name of the Vulnerable Software and Affected Versions Edraw Max version 7.9.3 Description The issue is related to a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074. This suggests a problem with memory access in the Paint::Clear...

CVE-2019-12896: Out-of-bounds Write

Edraw Max 7.9.3 has Heap Corruption starting at ntdll!RtlpNtMakeTemporaryKey+0x0000000000001a77...

CVE-2019-12897: Out-of-bounds Read

Edraw Max 7.9.3 has a Read Access Violation at the Instruction Pointer after a call from ObjectModule!Paint::Clear+0x0000000000000074...

CVE-2018-16618: Improper Neutralization of Special Elements used in an OS Command

VTech Storio Max before 56.D3JM6 allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668 listening for requests on localhost. Requests submitted to this service are checked for a string of random characters...

PT-2019-9357

Name of the Vulnerable Software and Affected Versions VTech Storio Max version before 56.D3JM6 Description The issue allows remote command execution via shell metacharacters in an Android activity name. It exposes the storeintenttranslate.x service on port 1668, listening for requests on localhos...

June 18, 2019—KB4501371 (OS Build 17763.592)

None None...

CVE-2019-0164: Undefined Security Weakness

Improper permissions in the installer for IntelR Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® Turbo Boost Max Technology 3.0 Advisory

Summary: A potential security vulnerability in the Intel® Turbo Boost Max Technology 3.0 driver may allow escalation of privilege. Intel is not releasing updates to mitigate this potential vulnerability and has issued a Product Discontinuation notice for the Intel® Turbo Boost Max Technology 3.0...