Apache Hadoop Buffer Overflow Vulnerability (CNVD-2022-51057)

Apache Hadoop is an open source distributed system infrastructure from the Apache Foundation. The product is capable of distributed processing of large amounts of data and is highly reliable, scalable, and fault-tolerant.Apache Hadoop suffers from a buffer overflow vulnerability that stems from...

Adobe Illustrator 缓冲区错误漏洞

Adobe Illustrator is a suite of vector-based image creation software from the American company Audobee Adobe. Adobe Illustrator suffers from a buffer error vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries,...

USN-5167-1: FFmpeg vulnerabilities

It was discovered that FFmpeg did not properly verify certain input when processing video and audio files. An attacker could possibly use this to send specially crafted input to the application, force a division by zero, and cause a denial of service application crash. CVE-2020-20445,...

USN-5282-1: PDFResurrect vulnerabilities

It was discovered that PDFResurrect was incorrectly handling corrupted PDF files. An attacker could possibly use this issue to cause a buffer overflow, resulting in a denial of service, or arbitrary code execution. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. CVE-2019-14267 It...

USN-5454-1: CUPS vulnerabilities

Joshua Mason discovered that CUPS incorrectly handled the secret key used to access the administrative web interface. A remote attacker could possibly use this issue to open a session as an administrator and execute arbitrary code. CVE-2022-26691 It was discovered that CUPS incorrectly handled...

CVE-2022-30785

A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

Design/Logic Flaw

A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-30785

A file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

CVE-2022-28348

Arm Mali GPU Kernel Driver Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0 allows improper GPU memory operations to reach a use-after-free situation...

CVE-2022-28348

Arm Mali GPU Kernel Driver Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0 allows improper GPU memory operations to reach a use-after-free situation...

Design/Logic Flaw

Arm Mali GPU Kernel Driver Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0 allows improper GPU memory operations to reach a use-after-free situation...

Arm Mali GPU Kernel Driver 资源管理错误漏洞

Arm Mali GPU Kernel Driver is a driver for a graphics processor unit from Arm UK. A security vulnerability exists in the Arm Mali GPU Kernel Driver, which can be exploited by an attacker to perform incorrect CPU memory operations that could lead to reuse after release. The following products and...

Adobe InDesign Code Execution Vulnerability

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A code execution vulnerability exists in Adobe InDesign. The vulnerability arises from a networked system or product that does not properly validate data boundaries when performing operations in...

Adobe InCopy out-of-bounds write vulnerability (CNVD-2022-76627)

Adobe InCopy is a text editing software for authoring from Adobe U.S. An out-of-bounds write vulnerability exists in Adobe InCopy, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory and can be exploited by an attacke...

Adobe InCopy out-of-bounds write vulnerability (CNVD-2022-45913)

A security vulnerability exists in Adobe InCopy, a text editing software for authoring from Adobe. The vulnerability stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, and can be exploited by attackers to cause arbitrary...

Adobe InDesign Code Execution Vulnerability (CNVD-2022-76625)

A security vulnerability exists in Adobe InDesign, a set of typesetting and editing applications from Adobe. The vulnerability stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, and can be exploited by an attacker to...

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy is a text editing software for authoring from Adobe U.S. An out-of-bounds write vulnerability exists in Adobe InCopy, which stems from a networked system or product that does not properly validate data boundaries when performing operations on memory and can be exploited by an attacke...

Tenda AC9 Stack Overflow Vulnerability (CNVD-2022-38540)

Tenda AC9 is a wireless router from Tenda, a Chinese company. Tenda AC9 is vulnerable to a stack overflow vulnerability, which originates from the goform/fastsettingwifiset function in the httpd service that does not properly validate data boundaries when performing operations on memory, and can ...

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2022-82652)

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for reading and writing NTFS partitions.Tuxera NTFS-3G suffers from a buffer overflow vulnerability that originates when a networked system or product does not properly validate data boundaries when performing...

vim buffer overflow vulnerability (CNVD-2022-55222)

vim is a UNIX-based editor. vim versions prior to 8.2.4763 contain a buffer overflow vulnerability that stems from a failure to properly validate data boundaries when performing operations on memory in the software skiprange. An attacker could exploit this vulnerability to cause a software crash,...