PT-2022-19134 · Bentley · Microstation Connect

Name of the Vulnerable Software and Affected Versions: Bentley MicroStation CONNECT version 10.16.02.34 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicio...

Ruby -- Buffer overrun in String-to-Float conversion

piao reports: Due to a bug in an internal function that converts a String to a Float, some convertion methods like KernelFloat and Stringtof could cause buffer over-read. A typical consequence is a process termination due to segmentation fault, but in a limited circumstances, it may be exploitabl...

Buffer overrun in String-to-Float conversion

A buffer-overrun vulnerability is discovered in a conversion algorithm from a String to a Float. This vulnerability has been assigned the CVE identifier CVE-2022-28739. We strongly recommend upgrading Ruby. Due to a bug in an internal function that converts a String to a Float, some convertion...

The vulnerability of the netCDF component of the GDAL library for geospatial data allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the netCDF component of the GDAL transformation library for geospatial data is related to writing beyond buffer boundaries. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the de265_image::available_zscan function in the h.265 Libde265 implementation allows a attacker to cause a service failure.

The vulnerability of the de265image::availablezscan function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created file...

The vulnerability of the invertImage() function in the tiffcrop component of the LibTIFF library, related to writing beyond buffer boundaries, allows a malicious actor to trigger a service failure.

The vulnerability of the invertImage function in the tiffcrop component of the LibTIFF library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the put_qpel_fallback function in the h.265 Libde265 implementation allows a perpetrator to trigger a service failure.

The vulnerability of the putqpelfallback function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created file...

The vulnerability of the function DL_Dxf::handleLWPolylineData in the DXF file parsing library Dxflib allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the function DLDxf::handleLWPolylineData in the DXF file parsing library Dxflib is related to writing outside the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures usin...

The vulnerability of the `put_weighted_pred_avg_16_fallback` function in the h.265 Libde265 implementation allows a perpetrator to cause a service failure.

The vulnerability of the putweightedpredavg16fallback function in the h.265 Libde265 implementation is related to writing outside the buffer boundaries. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created file...

The vulnerability of the put_qpel_0_0_fallback_16 function in the h.265 Libde265 implementation allows a attacker to trigger a service failure.

The vulnerability of the putqpel00fallback16 function in the h.265 Libde265 implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

The vulnerability of the dither_func_fs function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ditherfuncfs function in the tosixel.c component of the SIXEL Libsixel encoder/decoder implementation is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...

The vulnerability of the apply_sao_internal function in the h.265 Libde265 implementation allows a attacker to cause a service failure.

The vulnerability of the applysaointernal function in the h.265 Libde265 implementation is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to cause a service failure using a specially created file...

The vulnerability of the mc_luma function in the h.265 Libde265 video codec implementation, which allows a hacker to cause a service failure.

The vulnerability of the mcluma function in the h.265 Libde265 video codec implementation is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

The vulnerability of the OD_ReadUTF8String function in the odf_code.c component of the multimedia platform GPAC allows a perpetrator to cause a service failure.

The vulnerability of the ODReadUTF8String function in the odfcode.c component of the multimedia platform GPAC is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to cause service interruptions using a specially created media file...

The vulnerability of the genpstrx_text() component of the .fig Fig2dev file conversion utility allows a attacker to cause a service failure.

The vulnerability of the genpstrxtext component of the .fig Fig2dev file conversion utility is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure by converting an xfig file into a pstricks format...

The vulnerability of the gf_fprintf function in the os_file.c component of the GPAC multimedia platform allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the gffprintf function in the osfile.c component of the GPAC multimedia platform is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the TIFFVGetField function in the libtiff/tif_dir.c component of the LibTIFF library allows a attacker to cause a service failure.

The vulnerability of the TIFFVGetField function in the libtiff/tifdir.c component of the LibTIFF library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to cause a service failure remotely...

The vulnerability of the TableLookUp::setTable function in the RawSpeed library of the Darktable application allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the TableLookUp::setTable function in the RawSpeed library of the Darktable application relates to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

expat: Large number of prefixed XML attributes on a single tag can crash libexpat

expat libexpat is susceptible to a software flaw that causes process interruption. When processing a large number of prefixed XML attributes on a single tag can libexpat can terminate unexpectedly due to buffer overrun. The highest threat from this vulnerability is to availability...

The vulnerability of the Windows Event Tracing service in the Microsoft operating system allows a perpetrator to execute arbitrary code.

The vulnerability of the Windows Event Tracing service is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...