CVE-2023-38091

CVE-2023-38091 concerns Kofax Power PDF. A type confusion in the implementation of the app.response method allows remote code execution and requires user interaction (target must open a malicious page/file). The root cause is improper validation of user-supplied data, enabling code execution in t...

CVE-2023-38089

CVE-2023-38089 concerns Kofax Power PDF with an Out-of-Bounds Write in the handling of app objects. The flaw arises from insufficient validation of user-supplied data, causing a write past the end of an allocated buffer and enabling Remote Code Execution in the context of the current process. Exp...

CVE-2023-38086

Kofax Power PDF is affected by a PDF parsing out-of-bounds read vulnerability. The flaw stems from insufficient validation during PDF file parsing, allowing reads past the end of an allocated object. This information-disclosure issue can be triggered by user interaction (visiting a malicious page...

CVE-2023-38083

CVE-2023-38083 concerns Kofax Power PDF and involves an JP2 file parsing out-of-bounds write leading to remote code execution. The flaw arises from inadequate validation of user-supplied data during JP2 parsing, which can cause a write past the end of an allocated object and allow code execution ...

CVE-2023-38079

Kofax Power PDF JP2 File Parsing Out-of-Bounds Write (CVE-2023-38079) is triggered by unsafe JP2 file parsing that can write past the end of an allocated object, allowing remote code execution. Exploitation requires user interaction (target opens a malicious file or visits a malicious page). Tech...

CVE-2023-38078

CVE-2023-38078 – Kofax Power PDF U3D File Parsing Use-After-Free Information Disclosure . Affects Kofax Power PDF; the flaw lies in U3D parsing where the software does not validate an object’s existence before operating on it, enabling information disclosure and, in combination with other issues,...

CVE-2023-37353

CVE-2023-37353 - Kofax Power PDF JPG parsing OOB read : The issue is in the JPG file parsing of Kofax Power PDF, caused by insufficient validation that allows a read past the end of an allocated object. This leads to information disclosure and, per the description, could be leveraged with other v...

CVE-2023-37352

CVE-2023-37352 affects Kofax Power PDF. The root cause is an out-of-bounds read in JPG file parsing due to insufficient validation, enabling information disclosure and potential arbitrary code execution in conjunction with other flaws. Exploitation requires user interaction (open a malicious file...

CVE-2023-37349

Kofax Power PDF contains a PDF file parsing vulnerability (CVE-2023-37349) caused by improper validation that can write past the end of an allocated buffer, enabling remote code execution. The issue affects Power PDF and requires user interaction (open a malicious file/page). The CVSSv3.0 base sc...

CVE-2023-37348

Kofax Power PDF contains an out-of-bounds write in the U3D file parser that can lead to remote code execution. The vulnerability stems from insufficient validation of user-supplied data during U3D parsing, allowing writes past the end of an allocated buffer and enabling code execution in the proc...

CVE-2023-37346

CVE-2023-37346 affects Kofax Power PDF. The vulnerability is in the TIF file parsing code, where insufficient validation allows an out-of-bounds write, enabling an attacker to execute code with the victim’s privileges. Exploitation requires user interaction (visiting a malicious page or opening a...

CVE-2023-37344

CVE-2023-37344 is a buffer overflow in Kofax Power PDF’s BMP file parsing. The flaw arises from insufficient validation of the length of user-supplied data before copying into a fixed‑size heap buffer, enabling remote code execution when a user opens a malicious BMP-bearing page/file. Impact is d...

CVE-2023-37342

CVE-2023-37342 affects Kofax Power PDF. The flaw is a heap-based buffer overflow in PNG file parsing due to insufficient validation of user-supplied data length, enabling remote code execution when a user opens a malicious PNG or visits a crafted page. The issue impacts parsing logic in Power PDF...

CVE-2023-37343

CVE-2023-37343 affects Kofax Power PDF: JP2 file parsing flaw allows out-of-bounds write, enabling remote code execution. Root cause: insufficient validation of JP2 data leading to write past the end of an allocated object during parsing. Impact is high (code execution in target process) with loc...

CVE-2023-37338

Kofax Power PDF GIF file parsing vulnerability (CVE-2023-37338) allows local or remote code execution via an out-of-bounds write during GIF parsing. The flaw stems from insufficient validation of GIF data, enabling a write past the end of an allocated object and arbitrary code execution in the pr...

CVE-2023-37335

CVE-2023-37335 affects Kofax Power PDF BMP file parsing. The flaw is a heap-based buffer overflow caused by insufficient validation of the length of user-supplied data before copying it into a fixed-length heap buffer. This can allow an attacker to execute arbitrary code in the context of the cur...

CVE-2023-37333

Kofax Power PDF is affected by a memory corruption vulnerability in the PCX file parsing path that can lead to remote code execution. The flaw arises from insufficient validation of user-supplied PCX data, allowing an attacker to execute code in the context of the vulnerable process. Exploitation...

CVE-2023-37329

CVE-2023-37329 concerns a heap-based buffer overflow in GStreamer’s SRT subtitle file parsing. The flaw stems from insufficient validation of the length of user-supplied data before copying to a heap buffer, enabling remote code execution in the affected process. This is tied to ZDI-CAN-20968. Co...

CVE-2023-37328

GStreamer PGS subtitle parsing flaw (CVE-2023-37328) causes a heap-based buffer overflow that can enable remote code execution. It affects gstreamer1-plugins-base and related GStreamer components; the issue arises from inadequate validation of user-supplied data length during PGS subtitle parsing...

CVE-2023-37326

CVE-2023-37326 affects D-Link DAP-2622 routers due to a stack-based buffer overflow in the DDP Set Wireless Info Password pathway. The flaw arises from improper validation of user-supplied data length before copying into a fixed-length stack buffer, enabling remote code execution with root privil...