231585 matches found
CVE-2024-35397
Affected product: TOTOLINK CP900L, version 4.1.5cu.798_B20221228. Vulnerability: Command injection in the NTPSyncWithHost function triggered by the hostTime parameter. Impact: Arbitrary command execution by an attacker via a crafted request (high impact, per CVSS 3.1 metrics). Root cause: Inadequ...
CVE-2024-2451
CVE-2024-2451 concerns improper fingerprint validation in the TeamViewer Client (Full & Host) before version 15.54 on Windows and macOS. The root cause is faulty fingerprint validation, which could allow a local attacker with administrative rights to elevate privileges via executable sideloading....
CVE-2024-29072
A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege...
CVE-2024-23951
Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the...
CVE-2024-24584
Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.This vulnerabilitty concerns thereadMSH function while processin...
CVE-2024-23948
Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the...
CVE-2023-49600
An out-of-bounds write vulnerability exists in the PlyFile plycastascii functionality of libigl v2.5.0. A specially crafted .ply file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-22181
An out-of-bounds write vulnerability exists in the readNODE functionality of libigl v2.5.0. A specially crafted .node file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2023-35950
CVE-2023-35950 affects libigl v2.4.0, specifically the readOFF.cpp component that parses the OFF file header. The issue is described as multiple stack-based buffer overflows triggered by specially crafted .off files, potentially enabling arbitrary code execution. Exploitation is indicated to be l...
CVE-2023-35951
The CVE-2023-35951 entry concerns libigl v2.4.0. Affected component: readOFF.cpp responsible for parsing OFF files. Issue: multiple stack-based buffer overflow vulnerabilities when processing specially crafted .off files, potentially enabling arbitrary code execution. Documented impact aligns wit...
CVE-2023-35949
CVE-2023-35949 affects libigl v2.4.0. The vulnerability lies in the readOFF.cpp code path that parses OFF files; a specially crafted .off file can trigger a stack-based buffer overflow. This can lead to arbitrary code execution within the vulnerable process. Connected sources corroborate the same...
CVE-2023-35952
CVE-2023-35952 affects libigl v2.4.0. The vulnerability is a set of stack-based buffer overflows in the readOFF.cpp functionality, specifically in the code that parses comments within the geometric faces section of an OFF file. A specially crafted .off file can trigger a buffer overflow, potentia...
CVE-2023-35953
CVE-2023-35953 refers to multiple stack-based buffer overflow vulnerabilities in the libigl 2.4.0 readOFF.cpp parser for OFF files. A specially crafted .off file can trigger a buffer overflow in the code path that parses comments within the geometric vertices section, with the description indicat...
CVE-2023-49600
CVE-2023-49600 affects libigl (v2.5.0) with an out-of-bounds write in PlyFile::ply_cast_ascii, which can trigger a heap buffer overflow when processing a crafted .ply file. Cisco Talos reports vulnerability in libigl and references TALOS-2023-1879, indicating a related heap/buffer issue; Nessus a...
CVE-2024-23950
The CVE-2024-23950 entry applies to libigl v2.5.0, where the readMSH functionality is affected. Specifically, the vulnerability lies in igl::MshLoader::parse_element_field while processing a binary .msh file, leading to an out-of-bounds write due to improper array index validation. The issue is t...
CVE-2024-23951
CVE-2024-23951 affects libigl v2.5.0. The vulnerability lies in the readMSH functionality, specifically igl::MshLoader::parse_element_field when processing an ascii.msh file, where improper array index validation can trigger an out-of-bounds write. Attackers can supply a malformed .msh file to ex...
CVE-2024-23948
CVE-2024-23948 affects libigl v2.5.0 in readMSH (igl::MshLoader::parse_nodes) when processing ascii.msh files. A specially crafted .msh can cause an out-of-bounds write, per multiple sources. Attacker-controlled input is required to trigger the issue; no exploitation specifics or patch/version re...
CVE-2024-23949
CVE-2024-23949 affects libigl v2.5.0, specifically the readMSH/file parsing path: igl::MshLoader::parse_node_field when handling an ascii/.msh file. The root cause is improper array index validation, leading to an out-of-bounds write with a specially crafted .msh file. No explicit remediation or ...
CVE-2024-23947
The CVE-2024-23947 issue affects libigl v2.5.0, specifically the igl::MshLoader::parse_nodes function when handling binary .msh files. The vulnerability arises from improper array index validation, leading to an out-of-bounds write. The available sources describe the affected component and failur...
CVE-2024-24584
CVE-2024-24584 : The connected documents confirm multiple out-of-bounds read vulnerabilities in libigl v2.5.0, specifically in the readMSH functionality when processing MshLoader::ELEMENT_TET. A specially crafted .msh file can trigger this read past array bounds. Exploit details, vulnerable versi...