CVE-2021-3696

CVE-2021-3696 = heap out-of-bounds write during Huffman table handling in grub2’s PNG reader, causing potential heap corruption. Affected: grub2 before patch grub-2.12; implications listed as Low/Low/Low in some sources, with potential for data corruption and, in theory, arbitrary code execution ...

CVE-2021-3696

A heap out-of-bounds write may heppen during the handling of Huffman tables in the PNG reader. This may lead to data corruption in the heap space. Confidentiality, Integrity and Availablity impact may be considered Low as it's very complex to an attacker control the encoding and positioning of...

The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially create...

The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using a specially create...

The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the Flash Player software is related to the execution of operations beyond the buffer in memory when processing SWF content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure using a specially created malware file...

libsolv: heap-overflows in resolve_dependencies function

A buffer over-read flaw was found in the test case reader in libsolv that created multiple out-of-bounds read symptoms. Depending on how client applications use libsolv, this flaw leads to a denial of service of the application if an attacker can supply crafted input to the test case reader...

The vulnerabilities of Adobe Acrobat PDF editing programs and Adobe Reader PDF viewing programs, related to resource management errors, allow attackers to cause service failures.

The vulnerabilities of Adobe Acrobat PDF editing programs and Adobe Reader PDF viewing programs are related to resource management errors. Exploiting these vulnerabilities can allow a malicious actor to cause service interruptions remotely...

The vulnerability of Adobe Reader and Adobe Acrobat PDF viewer/editor programs, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs like Adobe Reader and Adobe Acrobat lies in the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created PDF file...

CVE-2021-46822

A heap-based buffer overflow vulnerability was found in libjpeg-turbo in the getwordrgbrow function in rdppm.c. The flaw occurs when the PPM reader in libjpeg-turbo mishandles use of the tjLoadImage function for loading a 16-bit binary PPM file into a grayscale uncompressed image buffer and then...

The vulnerability of the U3D components of PDF viewing and editing programs such as Adobe Reader and Adobe Acrobat allows a perpetrator to execute arbitrary code.

The vulnerability of the U3D components in PDF viewing and editing programs such as Adobe Reader and Adobe Acrobat is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Adobe Reader text viewer, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Reader text viewer relates to the reading of data beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Vulnerabilities of the Adobe Flash Player player, Adobe Reader and Adobe Acrobat PDF viewing and editing programs, as well as the Adobe AIR software platform—which allows for operations beyond the buffer limit in memory—enable attackers to execute arbitrary code.

The vulnerability of the Adobe Flash Player, the Adobe Reader and Adobe Acrobat PDF viewing and editing programs, as well as the Adobe AIR software platform, is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to execute...

The vulnerability of the Doc.media.newPlayer method allows attackers to execute arbitrary code through Adobe Reader and Adobe Acrobat programs used for viewing and editing PDF files.

The vulnerability of the Doc.media.newPlayer method in PDF file viewing and editing software like Adobe Reader and Adobe Acrobat is related to resource management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

MAL-2022-2645 Malicious code in ea-reference-data-reader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b1df94f349ca2de08769e8ca17d6fb5dc0392f05cddfc38645de666a34b1b94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ea-reference-data-reader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2b1df94f349ca2de08769e8ca17d6fb5dc0392f05cddfc38645de666a34b1b94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-46822

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the getwordrgbrow function in rdppm.c...

CVE-2021-46822

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the getwordrgbrow function in rdppm.c...

Heap overflow

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the getwordrgbrow function in rdppm.c...

CVE-2021-46822

The PPM reader in libjpeg-turbo through 2.0.90 mishandles use of tjLoadImage for loading a 16-bit binary PPM file into a grayscale buffer and loading a 16-bit binary PGM file into an RGB buffer. This is related to a heap-based buffer overflow in the getwordrgbrow function in rdppm.c...

CVE-2021-46822

The CVE-2021-46822 entry affects libjpeg-turbo up to version 2.0.90. Root cause: heap-based buffer overflow in get_word_rgb_row (rdppm.c) when loading 16-bit binary PPM/PGM data via tjLoadImage. Impact: remote crash/denial of service as described; no exploit details provided in the documents. Aff...