CVE-2022-41169: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens manipulated CATIA5 Part .catpart, CatiaTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

CVE-2022-41166: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens manipulated Wavefront Object .obj, ObjTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the user until...

CVE-2022-39807: Improper Restriction of Operations within the Bounds of a Memory Buffer

Due to lack of proper memory management, when a victim opens manipulated SolidWorks Drawing .sldasm, CoreCadTranslator.exe file received from untrusted sources in SAP 3D Visual Enterprise Author - version 9, it is possible for the application to crash and becomes temporarily unavailable to the us...

swtpm TPM emulator Buffer Overflow DoS

The vulnerability of the swtpm TPM emulator is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Thunderbird Heap Buffer Overflow Info Disclosure

The vulnerability of the Thunderbird email client relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially crafted email message...

WECON LeviStudioU Code Execution

The vulnerability of the WECON LeviStudioU software for human-machine interface programming arises due to an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-37302: Improper Restriction of Operations within the Bounds of a Memory Buffer

A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a crash of the Control Expert software when an incorrect project file is opened. Affected Products: EcoStruxure Control ExpertV15.1 HF001 and prior...

Microsoft Edge Heap Buffer Overflow RCE

The vulnerability of Microsoft Edge relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system by having the user open a specially created malicious web page...

libIEC61850 Buffer Overflow

The vulnerability of the libIEC61850 library relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service failures...

PDF-XChange Buffer Overflow Code Execution

The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious PDF file...

PDF-XChange Buffer Overflow Code Execution

The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious PDF file...

HDF5 ReadGifHeader Code Execution

The vulnerability of the ReadGifHeader function in the HDF5 library libhdf5 is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code on the target system by having the user open a specially created maliciou...

PT-2022-4371

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.0240 Description The issue is related to a NULL Pointer Dereference in the Vim text editor. It involves the sug filltree function and is associated with reading data beyond the buffer boundaries in memory. Exploitatio...

APDFL Library Code Execution

The vulnerability of the APDFL viewer tool for 3D JT and JT2Go, as well as the Teamcenter Visualization lifecycle management system, relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow attackers to execute arbitrary code or cause service...

nftable filter Privilege Escalation

The vulnerability of the nftable filter and classification subsystem in the Linux operating system is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

Rsyslog TCP Code Execution

The vulnerability of TCP modules in the Rsyslog log-processing software lies in the writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

cifs-utils mount.cifs Privilege Escalation

The vulnerability of the mount.cifs component in the Linux CIFS file system mounting utility package, cifs-utils, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2022-20238: Improper Restriction of Operations within the Bounds of a Memory Buffer

'remappfnrange' here may map out of size kernel memory for example, may map the kernel area, and because the 'vma-vmpageprot' can also be controlled by userspace, so userspace may map the kernel area to be writable, which is easy to be exploitedProduct: AndroidVersions: Android SoCAndroid ID:...

Adobe Reader PDF Viewer Buffer Overflow

The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

Adobe InCopy Buffer Overflow RCE

The vulnerability of the Adobe InCopy text creation and editing software relates to reading data outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created data in the font...