The vulnerability of Adobe Illustrator’s graphic editor lies in the ability to read data beyond the buffer in memory, allowing attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

The vulnerability of the Adobe Photoshop graphic editor, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Photoshop graphic editor is related to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

CVE-2023-45897

exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in readfiledentryset...

The vulnerability of the web page rendering modules in Safari’s WebKit browser for iOS, watchOS, tvOS, iPadOS operating systems allows attackers to execute arbitrary code.

The vulnerability of the Web page rendering modules in WebKit of Safari browsers for iOS, watchOS, tvOS, and iPadOS systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory management issues after memory is freed, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execut...

The vulnerability of the application software interface of the SolarWinds Access Rights Manager allows a violator to execute arbitrary code.

The vulnerability of the application software interface of the SolarWinds Access Rights Manager lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through the TCP port 443 remotely...

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Substance 3D Stager software lies in the possibility of an operation going beyond the buffer boundaries in memory, allowing a hacker to exploit this to disclose protected information.

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation, related to reading data beyond the buffer in memory, allows a perpetrator to execute arbitrary code.

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2023-45676 Multi-byte write heap buffer overflow in start_decoder in stb_vorbis

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in f-vendori = get8packetf;. The root cause is an integer overflow in setupmalloc. A sufficiently large value in the variable sz overflows with sz+7 in and the negative...

CVE-2023-45664 Double-free in stbi__load_gif_main_outofmem in stb_image

stbimage is a single file MIT licensed library for processing images. A crafted image file can trigger stbiloadgifmainoutofmem attempt to double-free the out variable. This happens in stbiloadgifmain because when the layers stride value is zero the behavior is implementation defined, but common...

CVE-2023-45662 Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image

stbimage is a single file MIT licensed library for processing images. When stbisetflipverticallyonload is set to TRUE and reqcomp is set to a number that doesn’t match the real number of components per pixel, the library attempts to flip the image vertically. A crafted image file can trigger memc...

The vulnerability of the microprogramming software of the D-Link DAP-1325 wireless signal amplifier arises from reading data beyond the buffer in memory. This allows a hacker to execute arbitrary code.

The vulnerability of the microprogrammed software of the D-Link DAP-1325 wireless signal amplifier lies in reading data outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Advisory ROSA-SA-2023-2241

Software: kernel 3.10.0 OS: rosa-server79 packageevrstring: kernel-3.10.0-1160.83.1.el7 CVE-ID: CVE-2023-3397 BDU-ID: 2023-03779 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the JFS file system of the Linux operating system kernel is related to the reuse of previously freed memory due to...

Linux kernel memory misreference vulnerability (CNVD-2024-08092)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a memory misreference vulnerability that originates from a confusion in the instructions responsible for freeing memory in the netfilter: nftables...

The vulnerability of the vdec component of MediaTek’s microprogramming software chips allows attackers to enhance their privileges.

The vulnerability of the vdec component of MediaTek’s microprogramming software lies in the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the gf_bifsFlushCommandList() function on the GPAC multimedia platform allows a hacker to trigger a service failure.

The vulnerability of the gfbifsFlushCommandList function on the GPAC multimedia platform is related to the improper use of dynamic memory during program execution. Exploiting this vulnerability can allow an attacker to cause a service failure...

ARM Mali GPU Kernel Driver < r44p1 Improper Memory Access (CVE-2023-33200)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r44p1 or r45p0 running on Bifrost, Valhall or 5th Gen architecture. It is, therefore affected by a improper memory access vulnerability. A local non-privileged user can make improper GPU processing operations to...

CVE-2023-5173

CVE-2023-5173 affects Firefox in non-standard configurations where the non-HTTPS Alternate Services preference is enabled (network.http.altsvc.oe). The issue is an integer overflow that can cause an out-of-bounds write into privileged process memory, with impact described as high and specific to ...