CVE-2020-36511

CVE-2020-36511 affects the Rust bite crate (through 2020-12-31). The issue is in read::BiteReadExpandedExt::read_framed_max, which may read from uninitialized memory, causing undefined behavior/memory corruption. Multiple connected sources (NVD/NVD-derived entries, RustSec advisories, OSV entries...

CVE-2021-45685

An issue was discovered in the columnar crate through 2021-01-07 for Rust. ColumnarReadExt::readtypedvec may read from uninitialized memory locations...

CVE-2021-45685

CVE-2021-45685 affects the Rust columnar crate (pre-2021-01-07) where ColumnarReadExt::read_typed_vec may read from uninitialized memory. This can cause memory exposure and undefined behavior when a crate passes an uninitialized buffer to a user-provided Read implementation. Multiple connected ad...

CVE-2021-45688

The CVE-2021-45688 issue affects the Rust ash crate prior to version 0.33.1. The root cause is util::read_spv reading from uninitialized memory locations, which can lead to memory exposure/undefined behavior. Several sources (e.g., OSV/GHSA and CNVD notes) confirm this vulnerability and reference...

CVE-2021-45703

The CVE-2021-45703 entry concerns the Rust crate tectonic_xdv (pre-0.1.12). The issue is that XdvParser::::process may read from uninitialized memory locations, which can lead to undefined behavior. Affected versions are before 0.1.12; the fixed version is 0.1.12. No exploit details are provided ...

The vulnerability of the professional video editing software Adobe Premiere Pro, related to recording beyond buffer boundaries in memory, allows a hacker to execute arbitrary code within the context of the current user.

The vulnerability of the professional video editing software Adobe Premiere Pro lies in the recording of data beyond the buffer limits in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the current user...

CVE-2021-45267

An invalid memory address dereference vulnerability exists in gpac 1.1.0 via the svgnodestart function, which causes a segmentation fault and application crash...

CVE-2021-44920

An invalid memory address dereference vulnerability exists in gpac 1.1.0 in the dumpodtosaf.isra function, which causes a segmentation fault and application crash...

The vulnerability of the “Bookmarks” control element in the Microsoft Edge browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the “Bookmarks” control element in the Microsoft Edge browser is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of information...

The vulnerability of the ImageIO component in operating systems such as tvOS, iOS, iPadOS, and watchOS allows a hacker to execute arbitrary code.

The vulnerability of the ImageIO component in operating systems such as tvOS, iOS, iPadOS, and watchOS relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious WEBP file...

CVE-2021-0961

In quotaprocwrite of xtquota2.c, there is a possible way to read kernel memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows an attacker to exploit the protected information.

The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the Adobe Bridge file manager, related to reading beyond the buffer in memory, allows an attacker to exploit the protected information.

The vulnerability of the Adobe Bridge file manager is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the Adobe Media Encoder application, related to the execution of operations beyond buffer boundaries in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Media Encoder application relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system remotely...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in the ability to write code beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a hacker to execute arbitrary code in the context of the current user, using a specially crafted .gif...

The vulnerability of the Adobe Bridge file manager relates to the issue of writing operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in the possibility of an operation going beyond the buffer in memory, allowing a hacker to execute arbitrary code.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to the execution of operations beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code on the target system...

The vulnerability of Adobe Audition for Windows and macOS, related to the operation of operations beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Audition for Windows and macOS relates to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow attackers to execute arbitrary co...

The vulnerability of the Adobe Bridge file manager, related to the reallocation of memory, allows an attacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to the reclamation of memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...