CVE-2023-45662 Multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image

stbimage is a single file MIT licensed library for processing images. When stbisetflipverticallyonload is set to TRUE and reqcomp is set to a number that doesn’t match the real number of components per pixel, the library attempts to flip the image vertically. A crafted image file can trigger memc...

D-Link DAP-1325 Buffer Overflow

The vulnerability of the microprogrammed software of the D-Link DAP-1325 wireless signal amplifier lies in reading data outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Advisory ROSA-SA-2023-2241

Software: kernel 3.10.0 OS: rosa-server79 packageevrstring: kernel-3.10.0-1160.83.1.el7 CVE-ID: CVE-2023-3397 BDU-ID: 2023-03779 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the JFS file system of the Linux operating system kernel is related to the reuse of previously freed memory due to...

Linux kernel memory misreference vulnerability (CNVD-2024-08092)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a memory misreference vulnerability that originates from a confusion in the instructions responsible for freeing memory in the netfilter: nftables...

MediaTek vdec Privilege Escalation

The vulnerability of the vdec component of MediaTek’s microprogramming software lies in the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

ARM Mali GPU Kernel Driver < r44p1 Improper Memory Access (CVE-2023-33200)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r44p1 or r45p0 running on Bifrost, Valhall or 5th Gen architecture. It is, therefore affected by a improper memory access vulnerability. A local non-privileged user can make improper GPU processing operations to...

GPAC multimedia platform Heap Buffer Overflow DoS

The vulnerability of the gfbifsFlushCommandList function on the GPAC multimedia platform is related to the improper use of dynamic memory during program execution. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2023-5173

CVE-2023-5173 affects Firefox in non-standard configurations where the non-HTTPS Alternate Services preference is enabled (network.http.altsvc.oe). The issue is an integer overflow that can cause an out-of-bounds write into privileged process memory, with impact described as high and specific to ...

Kofax Power PDF Advanced Heap Overflow

The vulnerability of the Kofax Power PDF Advanced software for creating, converting, editing, and publishing PDF files stems from the execution of operations beyond the buffer in memory during PDF file processing. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Tecnomatix Plant Simulation Buffer Overflow

The vulnerability of the software environment for the simulation modeling of systems and processes in Tecnomatix Plant Simulation relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created SPP...

PDF-XChange Editor Code Execution

The vulnerability of the mailForm method in the PDF document viewing and editing software PDF-XChange Editor is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

Tecnomatix Plant Simulation Buffer Overflow

The vulnerability of the software environment for the simulation modeling of systems and processes in Tecnomatix Plant Simulation relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created SPP...

Tecnomatix Plant Simulation Heap Buffer Overflow

The vulnerability of the software environment for simulation modeling of systems and processes in Tecnomatix Plant Simulation lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created SPP file...

Parasolid 3D geometric modeling tool Teamcenter Visualization Code Execution

The vulnerability of Parasolid’s 3D geometric modeling tool and the Teamcenter Visualization product lifecycle management system lies in the reading of data outside the buffer in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Autodesk FBX SDK Use-After-Free

The vulnerability of the tools and libraries used for creating, importing, and exporting 3D models in the Autodesk FBX SDK is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created FBX file...

GNU Binutils Heap Buffer Overflow DoS

The vulnerability of the GNU Binutils development tool relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

GNU Binutils Buffer Overflow

The vulnerability of the bfdpefparsefunctionstubs function in the GNU Binutils development toolset, located in the bfd/pef.c file, is caused by a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to trigger a stack overflow...

3D Builder Heap Buffer Overflow

The vulnerability of the 3D Builder software for designing and preparing objects for 3D printing is related to the execution of operations beyond the buffer boundaries in memory when processing GLB files. Exploiting this vulnerability allows an attacker to execute arbitrary code by loading a...

Vim bt_quickfix Code Execution

The vulnerability of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2022-34238 Adobe Acrobat Reader DC Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Acrobat Reader versions 22.001.20142 and earlier, 20.005.30334 and earlier and 20.005.30334 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...