CGI Gem Buffer Overflow

The vulnerability of the CGI Gem software arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code on the target system...

Google Chrome Audio Buffer Overflow Information Disclosure

The vulnerability of the Audio component in the Google Chrome browser relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Pulse Connect Secure Code Execution

The vulnerability of the Pulse Connect Secure corporate network VPN server lies in the fact that the outgoing operations go beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome WebVR API XSS

The vulnerability of the API for accessing WebVR devices in Google Chrome browsers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions through a specially created HTML page...

Siemens Capital VSTAR

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely / Low attack complexity Vendor: Siemens Equipment: Capital VSTAR Vulnerabilities: Access of Resource Using Incompatible Type, Improper Validation of Specified Quantity in Input, Out-of-Bounds Read, Improper Restriction of Operations...

Qualcomm Heap Buffer Overflow DoS

The vulnerability of embedded Qualcomm software is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failure remotely...

Adobe Bridge Buffer Overflow Code Execution

The vulnerability of the Adobe Bridge file manager is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

shadow account management tool Information Disclosure

The vulnerability of the newusers tool in the shadow account management utility is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

Adobe Audition Heap Buffer Overflow DoS

The vulnerability of Adobe Audition’s audio editing software for Windows and macOS is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Gerbv RS-274X format aperture macro variables out-of-bounds write vulnerability

Summary An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit 71493260. A specially-crafted gerber file can lead to code execution. An attacker can provide a maliciou...

Adobe Bridge Heap Buffer Overflow RCE

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user...

Adobe Bridge Buffer Overflow Info Disclosure

The vulnerability of the Adobe Bridge file manager is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information from a remote location...

Android kernel binderTransaction Privilege Escalation

The vulnerability in the implementation of the binderTransaction function in Android operating system kernels relates to the execution of write operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

Adobe InDesign Automation Buffer Overflow RCE

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially crafted file...

Adobe Premiere Pro Buffer Overflow RCE

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the recording of data beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Anker Eufy Homebase 2 home_security CMD_DEVICE_GET_SERVER_LIST_REQUEST out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2021-1378 Anker Eufy Homebase 2 homesecurity CMDDEVICEGETSERVERLISTREQUEST out-of-bounds write vulnerability November 29, 2021 CVE Number CVE-2021-21950,CVE-2021-21951 SUMMARY An out-of-bounds write vulnerability exists in the CMDDEVICEGETSERVERLISTREQUEST...

Adobe Audition Heap Buffer Overflow

The vulnerability of Adobe Audition for Windows and macOS relates to operations that occur beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to cause memory corruption and execute arbitrary code on the target system...

Adobe After Effects Heap Buffer Overflow

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system using a specially created file...

Adobe InDesign Buffer Overflow RCE

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user, using a specially crafted file...

Adobe Premiere Pro Buffer Overflow RCE

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the recording of data beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...