Important: redis

Issue Overview: Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4. CVE-2023-41056...

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers allows a hacker to execute arbitrary code.

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the App Store application store for operating systems macOS, iOS, and iPadOS allows a hacker to disclose protected information.

The vulnerability of the App Store application store for operating systems macOS, iOS, and iPadOS stems from the operation of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the UploadCustomModule() function (/cgi-bin/cstecgi.cgi) in the Totolink LR1200GB router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the UploadCustomModule function /cgi-bin/cstecgi.cgi of the Totolink LR1200GB router software lies in the escape of operations from memory buffers. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

PYSEC-2024-103

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. The concat built-in can write over the bounds of the memory buffer that was allocated for it and thus overwrite existing valid data. The root cause is that the buildIR for concat doesn't properly adhere to the API of co...

PT-2024-19409 · Vyper · Vyper

Name of the Vulnerable Software and Affected Versions: Vyper versions 0.3.0 through 0.3.9 Description: The concat built-in can write over the bounds of the memory buffer that was allocated for it and thus overwrite existing valid data. The root cause is that the build IR for concat doesn't proper...

Vyper Buffer Error Vulnerability

Vyper is a Pythonic smart contract language for EVM open sourced by vyperlang. A buffer error vulnerability exists in Vyper 0.3.10 and earlier versions, which stems from allowing concat to write to memory buffer boundaries built-in, thereby overwriting existing valid data...

The vulnerability of the J2K-file processor in the Kofax PowerPDF software, used for creating, converting, editing, and publishing PDF files. This allows a perpetrator to execute arbitrary code.

The vulnerability of the J2K-file processor in the software for creating, converting, editing, and publishing PDF files from Kofax PowerPDF lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using ...

ALPINE-CVE-2023-41056

Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4...

UBUNTU-CVE-2023-41056

Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4...

SUSE CVE-2023-41056

Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can result in integer overflow that leads to heap overflow and potential remote code execution. This issue has been patched in version 7.0.15 and 7.2.4...

CVE-2023-37297 heap memory overflow

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause a heap memory corruption via an adjacent network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

The vulnerability of the smc_encode_stream function in the libavcodec/smcenc.c component of the FFmpeg multimedia library allows a perpetrator to gain access to confidential data and also trigger a service denial.

The vulnerability of the smcencodestream function in the libavcodec/smcenc.c component of the FFmpeg multimedia library relates to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain access to confidential dat...

The vulnerability of the WebGL DrawElementsInstanced method in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the DrawElementsInstanced method in Mozilla Firefox, Firefox ESR, and the Thunderbird email client is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Fedora 39 : vim (2023-3fbd936b15)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-3fbd936b15 advisory. The newest upstream commit Security fixes for CVE-2023-48706, CVE-2023-46246 Tenable has extracted the preceding description block directly from the...

GHSA-99JG-R3F4-RPXJ memory overflow vulnerability in OpenEXR-viewer

Just open this exr file through openexr-viewer. poc send by email This is windbg log file. POC 2 8660.7e44: Access violation - code c0000005 !!! second chance !!! openexrviewer+0x27be4: 00007ff713ff7be4 c744880c0000803f mov dword ptr rax+rcx4+0Ch,3F800000h ds:0000020a3ac8000c=???????? Attempt to...

memory overflow vulnerability in OpenEXR-viewer

Just open this exr file through openexr-viewer. poc send by email This is windbg log file. POC 2 8660.7e44: Access violation - code c0000005 !!! second chance !!! openexrviewer+0x27be4: 00007ff713ff7be4 c744880c0000803f mov dword ptr rax+rcx4+0Ch,3F800000h ds:0000020a3ac8000c=???????? Attempt to...

CVE-2023-50245

OpenEXR-viewer is a viewer for OpenEXR files with detailed metadata probing. Versions prior to 0.6.1 have a memory overflow vulnerability. This issue is fixed in version 0.6.1...

Design/Logic Flaw

OpenEXR-viewer is a viewer for OpenEXR files with detailed metadata probing. Versions prior to 0.6.1 have a memory overflow vulnerability. This issue is fixed in version 0.6.1...

CVE-2023-50245 OpenEXR-viewer memory overflow vulnerability

OpenEXR-viewer is a viewer for OpenEXR files with detailed metadata probing. Versions prior to 0.6.1 have a memory overflow vulnerability. This issue is fixed in version 0.6.1...