Vulnerability of the `sdcardfs_create` and `sdcardfs_mkdir` functions in the Android operating system’s kernel, allowing attackers to escalate their privileges

The vulnerabilities of the sdcardfscreate and sdcardfsmkdir functions in inode.c of the Android operating system stem from operations that go beyond the buffer boundaries in memory. Exploiting these vulnerabilities can allow attackers to gain increased privileges...

The vulnerability of the Windows operating system’s kernel allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of Windows operating system cores arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

Safe'N'Sec SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure and SoftControl/SafenSoft Enterprise Unauthorized Operation Vulnerabilities

Safe'N'Sec SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSoft Enterprise are Russian Safe'N'Sec's proactive malware defense applications. A vulnerability exists in the snscore.sys file in Safe'N'Sec SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft...

The vulnerability of Microsoft Excel’s spreadsheet editor involves an operation where data is written beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted file, from a remote location...

The vulnerability of Microsoft Edge browser and the ChakraCore JavaScript engine handler, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge browser and the JavaScript scenario handler ChakraCore arises due to an operation going beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted web page...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, caused by an operation that goes beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Sentinel LDK RTE platform for software protection and licensing arises from an operation that goes beyond buffer boundaries in memory, allowing a malicious actor to trigger a service failure.

The vulnerability of the Sentinel LDK RTE platform for software protection and licensing stems from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure remotely...

The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

The vulnerability of the syntax analysis procedure for X509 certificates in the MatrixSSL cryptographic library allows a perpetrator to execute arbitrary code.

The vulnerability of the syntax analysis procedure for X509 certificates in the MatrixSSL cryptographic library arises from the execution of an operation outside the buffer boundaries in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a...

The vulnerability of the SDP server for Bluetooth protocol implementations allows a hacker to disclose sensitive system information.

The vulnerability of the SDP-server of the BlueZ software package, which implements a Bluetooth protocol stack, stems from the possibility of reading data beyond the memory buffer boundaries. Exploiting this vulnerability allows a malicious actor to read memory bits by using a specially crafted...

The vulnerability of the audio driver function of the mobile application MSM for the Android operating system allows a hacker to trigger buffer overflows.

The vulnerability of the audio driver function in the Android mobile application MSM is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to trigger a full memory overflow, followed by a buffer overflow, if large values of certain variables are set ...

A vulnerability exists in the ioctl handler of the Android-based mobile application, allowing an attacker to gain access beyond the memory boundaries.

The vulnerability in the ioctl handler of the Android mobile application for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access beyond the memory boundaries due to the lack of...

Adobe Acrobat and Reader Heap Overflow (APSB17-24: CVE-2017-11220)

A heap overflow vulnerability exists in Adobe Acrobat and Reader. The vulnerability is due to the way Adobe processes memory bounds checks. A remote attacker may exploit this vulnerability by enticing a target user to open a specially crafted PDF file...

The vulnerability of the intr function (sound/oss/msnd_pinnacle.c) in the Linux operating system, which allows a hacker to trigger a service failure or exert other effects.

The vulnerability of the intr function sound/oss/msndpinnacle.c in the Linux operating system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a local attacker to cause service failures or other adverse effects...

The vulnerability of the FFmpeg multimedia library, which allows a hacker to perform recording beyond the memory limit

The vulnerability of the FFmpeg multimedia library arises from an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a malicious actor to perform write operations beyond the memory boundaries, related to the function ffh264SliceContextInit in libavcodec/h264dec.c...

The vulnerability of the `packet_set_ring` function in the Linux operating system allows a hacker to trigger a service failure or cause other adverse effects.

The vulnerability of the packetsetring function in the Linux operating system arises from the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a local attacker to cause service failures or other adverse effects through a specially crafted...

The vulnerability in the Chakra JavaScript engine of the Microsoft Edge browser allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability in the Chakra JavaScript engine of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure memory corruption by using a specially crafted...

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the ReadJNGImage function in the ImageMagick console graphics editor’s png.c file arises from the execution of an operation outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure loss ...

The vulnerabilities of programs for viewing and editing PDF files such as Adobe Reader, Adobe Acrobat Document Cloud, Adobe Reader Document Cloud, and Adobe Acrobat allow attackers to execute arbitrary code.

The vulnerability of programs for viewing and editing PDF files arises from the execution of an operation outside the buffer in memory, as a result of parsing TIFF files. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption,...