CVE-2026-48422

Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48417

Substance3D - Sampler is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-59984

OpenEXR (the reference implementation for the EXR image format, widely used in the motion picture industry) is vulnerable to an out-of-bounds write on ILP32 builds in the B44-compressed scanline decode path. A crafted B44-compressed scanline EXR file causes the logical scratch size to truncate be...

CVE-2021-3156

CVE-2021-3156 In diesem Dokument finden Sie alle notwendigen Kenntnisse, um den Code in diesem Repository und seine Funktionsweise zu verstehen. Die gesamte Erklärung basiert auf dem Bericht von QUALYS. Dort werden weitere Ausnutzungsformen erklärt. Voraussetzungen Die anfälligen Versionen von su...

nodejs:22 security update

An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

sqlite security update

An update is available for sqlite. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list SQLite is a C library that implements an SQL database engine. A large subset o...

CVE-2026-59983

OpenEXR (the reference implementation for the EXR image format used in the motion picture industry) is affected by an out-of-bounds read on ILP32 builds when decoding a crafted uncompressed deep-tile EXR file. The root cause is an integer wrap in the sample-count table size calculation in OpenEXR...

cve-2023-5217-poc

CVE-2023-5217: PoC dell'heap overflow nella codifica VP8 di libvpx CVE-2023-5217 è una vulnerabilità di libvpx sfruttata in the wild che è stata trovata da Clément Lecigne del Threat Analysis Group di Google mentre prendeva di mira Chrome. Questo repository mostra come innescare CVE-2023-5217 nel...

CVE-2026-59982

OpenEXR , the reference implementation for the EXR image format used in the motion picture industry, is affected by an out-of-bounds pointer flaw in TypedDeepImageChannel::row() . A crafted deep EXR file with a nonzero dataWindow origin triggers the issue because the API incorrectly combines zero...

CVE-2026-59982 OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepImageChannel::row when a crafted deep EX...

CVE-2026-59982 OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. OpenEXR versions before 3.2.11, 3.3.0 through 3.3.12, and 3.4.0 through 3.4.13 can return an out-of-bounds pointer from TypedDeepImageChannel::row when a crafted deep EX...

libmsm_acdb_exploit

Il codice originale è scritto da @gorohkun https://www.codeaurora.org/projects/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597...

CVE-2026-75750 Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-65688

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75767 Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75767

Substance3D – Painter (Adobe) is affected by a heap-based buffer overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The CVSS v3.1 score is 7.8 (HIGH) with a local attack vec...

CVE-2026-75750

Adobe Substance3D Painter is affected by a heap-based buffer overflow (CWE-122) that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction : a victim must open a malicious file. The CVSS v3.1 score is 7.8 (HIGH) , with a local attack vecto...

EUVD-2026-65689

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

EUVD-2026-65686

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-75769 Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

Substance3D - Painter is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...