PT-2024-37886 · Irfan Skiljan · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this, where the target must visit a malicious...

The vulnerability of the Toolgate component in Parallels Desktop hypervisor allows a hacker to elevate their privileges and execute arbitrary code.

The vulnerability of the Toolgate component in Parallels Desktop Hypervisor Suite involves an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in the ability to write code beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a hacker to remotely execute arbitrary code using a specially crafted file...

The vulnerability of the AsInsHelp64.sys driver, part of the DeviceIoControl utility in ASUS’ ASUS Fan Xpert computer and laptop fan control software, allows a hacker to execute arbitrary code, increase their privileges, or disclose sensitive information.

The vulnerability of the AsInsHelp64.sys driver, which is part of the DeviceIoControl utility in the ASUS ASUS Fan Xpert speed control software, relates to operations that go beyond the buffer limits in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code, gain...

The vulnerability of the WSQ Plugin for IrfanView, a program for viewing and playing graphic, video, and audio files, arises from the operation of the function that allows data to be written beyond the buffer in memory. This vulnerability allows an attacker to execute arbitrary code.

The vulnerability of the WSQ Plugin for IrfanView, a program for viewing and playing graphic, video, and audio files, is related to the occurrence of operations outside the buffer in memory during the processing of WSQ format files. Exploiting this vulnerability can allow an attacker to execute...

tpm2-tss: Buffer Overlow in TSS2_RC_Decode

A flaw was found in tpm2-tss, which is an open source software implementation of the Trusted Computing Group TCG Trusted Platform Module TPM 2 Software Stack TSS2. In affected versions, Tss2RCSetHandler and Tss2RCDecode index into the layerhandler with an 8-bit layer number, but the array only ha...

The vulnerability of the microprogramming software for AutomationDirect P3-550E lies in the possibility of writing beyond the buffer boundaries in memory, allowing a intruder to cause malfunctions during maintenance.

The vulnerability of the microprogrammed software in AutomationDirect P3-550E controllers is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause malfunctions in the system remotely...

The vulnerability of the User Mode Driver for DirectX 11 in AMD Radeon microcomputer graphics software allows a hacker to execute arbitrary code.

The vulnerability of the User Mode Driver for DirectX 11 in AMD Radeon graphics processors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the pre-processing processor Simcenter Femap, related to writing beyond buffer boundaries, allows a hacker to execute arbitrary code.

The vulnerability of the pre-processing processor Simcenter Femap is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a attacker to execute arbitrary code using a specially created IGS format malicious file...

The vulnerability of the JT Open Toolkit (JTTK) and PLM XML SDK development tools arises from the possibility of an operation exceeding the buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of the JT Open Toolkit JTTK and PLM XML SDK development tools is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious XML file...

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems allows a perpetrator to trigger a service failure.

The vulnerability of the Remote Desktop Licensing Service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the ImageIO component in operating systems iPadOS, iOS, and macOS allows a hacker to execute arbitrary code.

The vulnerability of the ImageIO component in operating systems such as iPadOS, iOS, macOS, and visionOS is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2024-40970

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

CVE-2024-40970 Avoid hw_desc array overrun in dw-axi-dmac

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

CVE-2024-40970 Avoid hw_desc array overrun in dw-axi-dmac

In the Linux kernel, the following vulnerability has been resolved: Avoid hwdesc array overrun in dw-axi-dmac I have a use case where nrbuffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descsallocated to be 9. Since axidescput handles the hwdesc...

CVE-2024-40970

The CVE-2024-40970 entry concerns a Linux kernel vulnerability in the dw-axi-dmac component that can cause a kernel panic due to an overrun of the hw_desc array when a descriptor chain expands (example: nr_buffers=3 with 3 segments per descriptor, totaling 9). The proposed fix, as described in mu...

OESA-2024-1817 xorg-x11-server-xwayland security update

Xwayland is an X server for running X clients under Wayland. %package devel Summary: Development package Requires: pkgconfig %description devel The development package provides the developmental files which are necessary for developing Wayland compositors using Xwayland. %prep %autosetup -n...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to circumvent existing security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems lies in the fact that operations may go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory. This allows an attacker to execute arbitrary code or cause a service failure.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service interruptions using the tag...

Vulnerability of QTS and QuTS operating systems, as well as QNAP network devices, related to the operation of operations beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of QTS and QuTS operating systems, as well as QNAP network devices, is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...