Out-of-Bounds Write

liblouis.so is vulnerable to out of bounds write. The vulnerability exists due to a lack of sanitization in compileRule function of compileTranslationTable.c which allows an attacker to write to invalid memory...

HUAWEI HarmonyOS 缓冲区错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from a memory out-of-bounds read/write issue in the video framework. An attacker exploited...

Vim Append Command Code Execution

The vulnerability of the Vim text editor’s append command relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code by loading a specially created file...

Google Chrome ANGLE Component Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the ANGLE component of Google Chrome versions prior to 102.0.5005.61, which stems from a confusion in the instructions responsible for freeing memory in the ANGLE component program. An...

Google Chrome UI Foundations Component Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 102.0.5005.61, which stems from a confusion in the UI Foundations component regarding the instruction the program is responsible for freeing memory. An...

Linux tty subsystem Information Disclosure

The vulnerability of the tty subsystem in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

Adobe Framemaker Heap Buffer Overflow Code Execution

The vulnerability of the desktop publishing system Adobe Framemaker relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the context of the current user, using a specially created file...

Adobe InCopy Buffer Overflow RCE

The vulnerability of the Adobe InCopy text creation and editing software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

Adobe InDesign Buffer Overflow RCE

The vulnerability of Adobe InDesign’s computer layout automation tool is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

Adobe Framemaker Buffer Overflow Info Disclosure

The vulnerability of the Adobe Framemaker desktop publishing system relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...

USN-5425-1 pcre3 vulnerabilities

Yunho Kim discovered that PCRE incorrectly handled memory when handling certain regular expressions. An attacker could possibly use this issue to cause applications using PCRE to expose sensitive information. This issue only affects Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 21.10 and Ubuntu 22.0...

Linux kernel drm_lease_held Buffer Overflow DoS

The vulnerability of the drmleaseheld function drivers/gpu/drm/drmlease.c in the Linux operating system’s kernel is related to the use of memory after it has been freed. Exploiting this vulnerability could allow an attacker to cause a service failure or disclose protected information using a...

Lenovo PCManager Buffer Overflow DoS

The vulnerability of the Lenovo PCManager application for controlling and configuring computers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2022-28830 Adobe FrameMaker Font Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

Adobe Framemaker versions 2029u8 and earlier and 2020u4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object...

Google Chrome Microsoft Edge Screen Sharing RCE

The vulnerability of the screen-sharing function in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

Siemens Industrial Devices using libcurl

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: Industrial devices using libcurl Vulnerabilities: Use After Free 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-22-132-13 Siemens Industrial Devices using...

Bookmarks Control Disclosure

The vulnerability of the “Bookmarks” control element in Microsoft Edge and Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

Windows Scripting Engine Buffer Overflow

The vulnerability of the Scripting Engine component in Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

多款Qualcomm产品资源管理错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc., and from time to time manufactured on the surface of semiconductor wafers. A security vulnerability exists in a number of Qualcomm products,...