Lucene search
K

2506 matches found

Prion
Prion
added 2023/12/05 1:15 a.m.22 views

Buffer overflow

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in...

7.5CVSS8.4AI score0.01185EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/12/05 12:25 a.m.43 views

CVE-2023-48697

CVE-2023-48697 concerns Azure RTOS USBX, a USB host/device stack. Vulnerabilities stem from memory buffer and pointer handling in RTOS v6.2.1 and earlier, affecting components such as pictbridge/host class and related PIMA, storage, CDC ACM, ECM, audio, and hub functionality. This can lead to rem...

9.8CVSS8AI score0.01185EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/05 12:25 a.m.19 views

CVE-2023-48697 Azure RTOS USBX Remote Code Execution Vulnerability

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in...

6.4CVSS8.1AI score0.01185EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/12/05 12:25 a.m.17 views

CVE-2023-48697 Azure RTOS USBX Remote Code Execution Vulnerability

Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in...

6.4CVSS10AI score0.01185EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/12/05 12:0 a.m.4 views

Azure RTOS USBX Security Vulnerability

Azure RTOS USBX is a USB host, device, and mobile OTG embedded stack for Azure RTOS open source. Fully integrated with Azure RTOS ThreadX, it is available for all processors that support Azure RTOS ThreadX. A security vulnerability exists in Azure RTOS USBX versions prior to 6.3.0 that stems from...

9.8CVSS9.6AI score0.01185EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/12/05 12:0 a.m.5 views

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that arises from an improperly restricted operation within a memory buffer range in the BT Controller...

7.8CVSS7AI score0.00157EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/12/05 12:0 a.m.5 views

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an improperly restricted operation within a memory buffer range in MPP Performance...

7.8CVSS7AI score0.00118EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/12/05 12:0 a.m.4 views

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets due to a memory corruption in the camera when installing fd for a specific DMA buffer...

7.8CVSS7.6AI score0.0014EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/12/05 12:0 a.m.8 views

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from an improperly restricted operation within a memory buffer range in TZ Secure OS...

6.5CVSS7AI score0.00136EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/04 12:0 a.m.4 views

The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms, as well as the software products such as BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link Controller, BIG-IP Local Traffic Manager, BIG-IP Policy Enforcement Manager, BIG-IP Orchestrator, allows a perpetrator to trigger a service failure.

The vulnerabilities of the BIG-IP Access Policy Manager, as well as the BIG-IP Advanced Firewall Manager, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Hybrid Defender, BIG-IP Domain Name System, BIG-IP Fraud Protection Service, BIG-IP Link...

7.8CVSS7.4AI score0.00626EPSS
Exploits0References3Affected Software12
BDU FSTEC
BDU FSTEC
added 2023/12/01 12:0 a.m.5 views

The vulnerability of Adobe Dimension’s 3D design software, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious file...

5.5CVSS5.7AI score0.00367EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/01 12:0 a.m.4 views

The vulnerability of the professional video editing software Adobe Premiere Pro, related to recording beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the recording beyond buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS7.8AI score0.0032EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/01 12:0 a.m.2 views

The vulnerability of the Adobe Media Encoder application, related to reading beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Media Encoder application relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.8AI score0.00364EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/12/01 12:0 a.m.3 views

The vulnerability of the Adobe Media Encoder application, related to reading beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the Adobe Media Encoder application relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user...

7.8CVSS7.8AI score0.00364EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.5 views

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, related to reading data beyond the buffer in memory, allow attackers to gain access to confidential information.

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud involve reading data beyond the buffer in memory. Exploiting these vulnerabilities can allow attackers to access confidential information...

3.3CVSS5.8AI score0.02035EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.4 views

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in its ability to read data beyond the buffer in memory. This allows attackers to execute arbitrary code.

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 relates to reading data beyond the buffer in memory. Exploiting this vulnerability could all...

7.8CVSS7.7AI score0.02044EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.4 views

The vulnerability of the AcroForm Value Handler component in programs for viewing and editing PDF files of Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 allows a perpetrator to disclose protected information.

The vulnerability of the AcroForm Value Handler component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 relates to reading data beyond the buffer in memory. Exploiting this vulnerabilit...

5.5CVSS5.7AI score0.02035EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.3 views

The vulnerability of Adobe InDesign’s computer layout automation tool, related to reading data outside the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS6AI score0.00339EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.5 views

The vulnerability of Adobe Audition’s audio editor, related to recording beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Audition is related to recording beyond the buffer limits in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially created file...

7.8CVSS7.2AI score0.00318EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:0 a.m.5 views

The vulnerability of the Adobe Photoshop graphic editor, related to reading beyond the buffer in memory, allows a hacker to bypass the ASLR protection mechanism.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection mechanism...

5.5CVSS6.1AI score0.00328EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder