Microsoft SQL Server Privilege Escalation

The vulnerability of the Microsoft SQL Server database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

rdesktop buffer error vulnerability

rdesktop versions 1.9.0 and earlier have a buffer error vulnerability. This vulnerability stems from the processbmpcache2 function in orders.c, which allows for out-of-buffer read access to the heap. Attackers can exploit this by sending uncompressed orders with excessively large width or height,...

Red Hat Enterprise Linux buffer error vulnerability

Red Hat Enterprise Linux 9 and 10 versions have a buffer error vulnerability. This vulnerability occurs when GIMP opens specially crafted XCF files that contain text layers with parasitic data, leading to out-of-buffer reads. This can result in adjacent heap data being leaked into the text of the...

Schism Tracker buffer error vulnerability

Schism Tracker 20260524 and earlier versions have a buffer error vulnerability. This vulnerability stems from the fmtultloadsong function in fmt/ult.c, which does not limit the number of single-byte samples to MAXSAMPLES. This may lead to out-of-buffer writing, allowing attackers to provide a...

R. S. Doiel antiword buffer error vulnerability

R. S. Doiel’s Antiword versions 0.37 and earlier have a buffer error vulnerability. This vulnerability stems from the reverse boundary checking of the count of PlcfLst records in the vGet8LstInfo function in prop8.c. This leads to out-of-buffer reads, allowing attackers to provide a specially...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: USB: serial: ioedgeport: cap received transmit credits The interrupt-status packet reports the transmit credits returned by the device. The edgeinterruptcallback function adds the 16-bit value to txCredits without checking...

Dave Nardella Snap7 OFFICIAL Buffer Error Vulnerability

Dave Nardella Snap7 OFFICIAL versions 1.4.3 and earlier contain a buffer error vulnerability. This vulnerability stems from the lack of checking of the DataLength field in TSnap7 OFFICIAL MicroClient::opReadArea. This allows out-of-buffer writing, enabling malicious S7 peers to overflow the clien...

Konstanty Bialkowski libmodplug buffer error vulnerability

Konstanty Bialkowski’s libmodplug versions 0.8.9.1 and earlier have a buffer error vulnerability. This vulnerability stems from the fact that the nPat parameter in the CSoundFile::ReadDSM function is not validated against MAXPATTERNS. Attackers can exploit this vulnerability by providing a...

UADE buffer error vulnerability

Versions of UADE 3.05 and earlier contain a buffer error vulnerability. This vulnerability stems from the unsigned buffersize subtraction operation in the amifilemagic.c file’s UADEfilemagic function, which can cause a wrap when dealing with short inputs. This leads to out-of-buffer reading,...

DHCP DoS

The vulnerability of DHCP servers for Windows operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

DHCP DoS

The vulnerability of DHCP servers for Windows operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Work Folders Service Privilege Escalation

The vulnerability of the Work Folders service in Windows operating systems is related to the operation of data out of the buffer into memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Hello Privilege Escalation

The vulnerability of the biometric authentication function in Windows Hello on Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges...

Resilient File System Privilege Escalation

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows biometric service Privilege Escalation

The vulnerability of the biometric service in Windows operating systems lies in the fact that the operation occurs outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...