4721 matches found
Unsoundness in `intern` methods on `intaglio` symbol interners
Affected versions of this crate have a stacked borrows violation when creating references to interned contents. All interner types are affected. The flaw was corrected in version 1.9.0 by reordering move and borrowing operations and storing interned contents by raw pointer instead of as a Box...
GHSA-GCH5-HWQF-MXHP Unsoundness in `intern` methods on `intaglio` symbol interners
Affected versions of this crate have a stacked borrows violation when creating references to interned contents. All interner types are affected. The flaw was corrected in version 1.9.0 by reordering move and borrowing operations and storing interned contents by raw pointer instead of as a Box...
RUSTSEC-2023-0048 Unsoundness in `intern` methods on `intaglio` symbol interners
Affected versions of this crate have a stacked borrows violation when creating references to interned contents. All interner types are affected. The flaw was corrected in version 1.9.0 by reordering move and borrowing operations and storing interned contents by raw pointer instead of as a Box...
Unsoundness in `intern` methods on `intaglio` symbol interners
Affected versions of this crate have a stacked borrows violation when creating references to interned contents. All interner types are affected. The flaw was corrected in version 1.9.0 by reordering move and borrowing operations and storing interned contents by raw pointer instead of as a Box...
PT-2023-36777
Уязвимость функции gadget bind модуля drivers/usb/gadget/legacy/raw gadget.c драйвера гаджетов USB ядра операционной системы Linux связана с неправильным освобождением памяти. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...
PT-2025-43094
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel's USB gadget driver contains a memory leak in the raw gadget driver. Specifically, the raw dev-count is incremented before the raw queue event function is invoked. If ra...
Cross Site Scripting (XSS)
gitlab is vulnerable to Cross-site Scripting XSS. The vulnerability occurs when viewing a XML file in the repository in 'raw' mode which could be rendered as HTML in certain conditions, which allows an authenticated attacker to inject and execute malicious javascript on victim's browser...
DEBIAN-CVE-2022-28737
There's a possible overflow in handleimage when shim tries to load and execute crafted EFI executables; The handleimage function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code...
RAW image plugin Code Execution
The vulnerability of the plugin for viewing RAW images is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially created malicious file...
Microsoft Windows Raw Image Extensions RCE (July 2023)
The Windows 'Raw Image Extensions' app installed on the remote host is affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. Note that Nessus has not tested for these issues but has instead relied only...
CVE-2023-32051
Raw Image Extension Remote Code Execution Vulnerability...
CVE-2023-32051
Raw Image Extension Remote Code Execution Vulnerability...
Remote code execution
Raw Image Extension Remote Code Execution Vulnerability...
CVE-2023-32051 Raw Image Extension Remote Code Execution Vulnerability
...
CVE-2023-32051
CVE-2023-32051 describes a remote code execution vulnerability in Microsoft’s Windows Raw Image Extension. The CVE entry notes an RCE with a local attack vector (AV: Local) and user interaction required, affecting the Raw Image Extension component across several Windows builds. Public exploits ar...
CVE-2023-32051 Raw Image Extension Remote Code Execution Vulnerability
...
PT-2023-3535 · Unknown · Raw Image Extension
Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to insufficient input validation in the Raw Image Extension plugin. Exploitation of this issue may allow an attacker to execute arbitrary code by sending a...
CVE-2023-32051: Integer Overflow or Wraparound
Raw Image Extension Remote Code Execution Vulnerability...
Microsoft Raw Image Extension security vulnerability
Microsoft Raw Image Extension is a software application from Microsoft. It enables you to view thumbnails and metadata for supported raw file formats directly in Windows File Explorer or view images in the Photos application. A security vulnerability exists in Microsoft Raw Image Extension. An...