gf_media_change_pl Heap Buffer Overflow DoS

The vulnerability of the gfmediachangepl function on the GPAC multimedia platform is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

Firefox ESR Memory Use After Free DoS

The vulnerability in web browsers Firefox ESR, Firefox, and the email client Thunderbird is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

Design/Logic Flaw

A local non-privileged user can make GPU processing operations that expose sensitive data from previously freed memory...

CVE-2023-40661

Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards. To take advantage of these flaws, an attacker must have physical access to the computer system and employ a...

Siemens Solid Edge Buffer Overflow

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code using specially created DWG files...

Adobe Dimension Buffer Overflow

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...

Adobe Dimension Buffer Overflow

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...

Adobe Dimension Buffer Overflow

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...

Adobe Illustrator Heap Buffer Overflow Info Disclosure

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

Adobe Photoshop Buffer Overflow RCE

The vulnerability of the Adobe Photoshop graphic editor is related to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

Safari WebKit Code Execution

The vulnerability of the Web page rendering modules in WebKit of Safari browsers for iOS, watchOS, tvOS, and iPadOS systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

CVE-2023-45897

exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in readfiledentryset...

PDF viewing and editing Code Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execut...

SolarWinds Access Rights Manager Code Execution

The vulnerability of the application software interface of the SolarWinds Access Rights Manager lies in the recovery of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through the TCP port 443 remotely...

Substance 3D Stager Heap Buffer Overflow

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Substance 3D Stager Buffer Overflow Info Disclosure

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created file...

Substance 3D Stager Heap Buffer Overflow

The vulnerability of the Substance 3D Stager software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Siemens Tecnomatix Plant Simulation Buffer Overflow Code Execution

The vulnerability of the software environment of Siemens Tecnomatix Plant Simulation relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2023-45676 Multi-byte write heap buffer overflow in start_decoder in stb_vorbis

stbvorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger out of bounds write in f-vendori = get8packetf;. The root cause is an integer overflow in setupmalloc. A sufficiently large value in the variable sz overflows with sz+7 in and the negative...

CVE-2023-45664 Double-free in stbi__load_gif_main_outofmem in stb_image

stbimage is a single file MIT licensed library for processing images. A crafted image file can trigger stbiloadgifmainoutofmem attempt to double-free the out variable. This happens in stbiloadgifmain because when the layers stride value is zero the behavior is implementation defined, but common...