CVE-2024-25451

Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4DataBuffer::ReallocateBuffer function...

Design/Logic Flaw

Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4DataBuffer::ReallocateBuffer function...

Design/Logic Flaw

Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4UrlAtom::AP4UrlAtom function...

CVE-2024-25452

CVE-2024-25452 affects Bento4 v1.6.0-640, with an out-of-memory bug in AP4_UrlAtom::AP4_UrlAtom(). Public document set confirms the vulnerable component and impact (OOM; Availability), but exploitation details are not provided. Red Hat notes the issue; PT-2024-20954 suggests disabling AP4 UrlAtom...

CVE-2024-25451

CVE-2024-25451 concerns Bento4 v1.6.0-640, which contains an out-of-memory bug in the AP4_DataBuffer::ReallocateBuffer() function. Multiple sources confirm the issue and tie it to Bento4’s MP4 reading/writing library, with the vulnerability enabling an OOM condition that can impact system availab...

UBUNTU-CVE-2024-0755

Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 122, Firefox ESR...

The vulnerability of the DOC-file processor in Hancom Office software allows a hacker to execute arbitrary code.

The vulnerability of Hancom Office’s DOC-file processing tool is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created DOC file...

PT-2023-7269

Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2121 Description The issue is related to a heap-use-after-free vulnerability. When executing a :s command for the first time and using a sub-replace-special atom inside the substitution part, it is possible that the...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory usage after it is freed, allowing attackers to execute arbitrary code within the context of the current process.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute...

The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Site Isolation component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Site Isolation component relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTML page...

The vulnerability of Google Chrome’s autonomous mode for Android allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s autonomous browser mode for Android relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

QEMU 资源管理错误漏洞

QEMU is a suite of analog processor software from the French individual developer Fabrice Bellard. The software is fast and cross-platform. QEMU suffers from a memory misreference vulnerability that stems from a confusion in the instructions responsible for freeing memory in the e1000e NIC...

SUSE CVE-2023-26965

loadImage in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image...

Important: kernel-livepatch-6.1.19-30.43

Issue Overview: In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs. CVE-2022-48425 An out-of-bounds memory access flaw was found in the Linux kernel's XFS file system in how a user restores an XFS image after failu...

CVE-2023-29575

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component...

Design/Logic Flaw

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component...

CVE-2023-29575

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component...

CVE-2023-29575

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42aac component...

Design/Logic Flaw

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp4info component...