CVE-2023-28292 Raw Image Extension Remote Code Execution Vulnerability

...

CVE-2023-28292

CVE-2023-28292 is a Windows Raw Image Extension Remote Code Execution vulnerability. The issues affect the Windows Raw Image Extensions component (Windows 10/11 families and related builds) and are described in multiple sources (NVD/MSRC/NCSC). Root cause and affected specifics are tied to the Ra...

CVE-2023-28291 Raw Image Extension Remote Code Execution Vulnerability

...

CVE-2023-28291

CVE-2023-28291 affects Microsoft Windows Raw Image Extension (the Raw Image Extensions component). The vulnerability is a remote/code execution vulnerability in the Raw Image Extension that arises from insufficient input validation, enabling arbitrary code execution when processing crafted files....

CVE-2023-28291 Raw Image Extension Remote Code Execution Vulnerability

...

Raw Image Extension Remote Code Execution Vulnerability

...

Raw Image Extension Remote Code Execution Vulnerability

...

Microsoft Windows Raw Image Extension 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Raw Image Extension. The following products and versions are affected:Raw Image Extension for Windows 10 Version...

PT-2023-2406 · Unknown · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to insufficient input validation in the Raw Image Extension plugin, which can be exploited to execute arbitrary code. Recommendations: At the moment, there ...

Microsoft Windows Raw Image Extension 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Raw Image Extension. The following products and versions are affected:Raw Image Extension for Windows 10 Version...

PT-2023-2411 · Unknown · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to insufficient input validation in the Raw Image Extension plugin, which can be exploited to execute arbitrary code. Recommendations: At the moment, there ...

Microsoft Windows Raw Image Extensions Library Multiple Vulnerabilities (April 2023)

The Windows 'Raw Image Extensions' app installed on the remote host is affected by multiple code execution vulnerabilities: - A remote code execution vulnerability exists in the Microsoft Windows Codecs Library Raw Image. An attacker who successfully exploited the vulnerability could execute...

CVE-2022-33259

CVE-2022-33259 relates to memory corruption caused by a buffer copy without input size validation in a modem when decoding raw SMS. The vulnerability is described across multiple sources as affecting Qualcomm chipsets/modems, with a CVSS v3.1 base score of 9.8 (NETWORK, LOW complexity, no privile...

PT-2023-13270 · Qualcomm · Snapdragon +12

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned, use: affected versions not specified Description: The issue is related to memory corruption caused by a buffer copy without checking the size of the input in a modem. This occurs while decoding raw...

`rmp-serde` `Raw` and `RawRef` may crash when receiving invalid UTF-8

It was found that Raw::fromutf8 expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash...

GHSA-255R-3PRX-MF99 `rmp-serde` `Raw` and `RawRef` may crash when receiving invalid UTF-8

It was found that Raw::fromutf8 expects valid UTF-8. If invalid UTF-8 is received it can cause the process to crash...

PT-2023-36111 · Drbd · Drbd

Name of the Vulnerable Software and Affected Versions: drbd affected versions not specified Description: The issue concerns a rebuild of the package with a new secure boot key. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

[SECURITY] Fedora 38 Update: chromaprint-1.5.1-8.fc38

Chromaprint library is the core component of the AcoustID project. It's a client-side library that implements a custom algorithm for extracting fingerprints from raw audio sources. The library exposes a simple C API. The documentation for the C API can be found in the main header file. License fo...

CVE-2023-0629

Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation ECI restrictions by setting the Docker host to docker.raw.sock, or npipe:////.pipe/dockerenginelinux on Windows, via the -H --host CLI flag or the DOCKERHOST environment variable and launch containers...

CVE-2023-0629 Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation restrictions via the raw Docker socket and launch privileged containers

Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation ECI restrictions by setting the Docker host to docker.raw.sock, or npipe:////.pipe/dockerenginelinux on Windows, via the -H --host CLI flag or the DOCKERHOST environment variable and launch containers...