Adobe Releases Multiple Security Updates

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessa...

Adobe XMP Toolkit SDK Heap Buffer Overflow Vulnerability (CNVD-2021-63256)

Adobe XMP Toolkit SDK is a tagging technology from Adobe that allows you to embed data about a file called metadata into the file itself.Adobe XMP Toolkit SDK 2020.1 and earlier versions are vulnerable to a heap buffer overflow. An attacker could exploit this vulnerability to cause a denial of...

Siemens JT2Go < 13.2.0.2 Multiple Vulnerabilities (SSA-938030)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 13.2.0.2. It is, therefore, affected by multiple vulnerabilities, including the following: - An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Open Design Alliance...

Adobe XMP Toolkit SDK Post-release Reuse Vulnerability (CNVD-2021-63254)

Adobe XMP Toolkit SDK is a tagging technology from Adobe that allows you to embed data about a file called metadata into the file itself. a post-release reuse vulnerability exists in Adobe XMP Toolkit SDK 2020.1 and earlier versions. An attacker could exploit this vulnerability to cause a denial ...

Adobe XMP Toolkit SDK Arbitrary Write Vulnerability

Adobe XMP Toolkit SDK is a tagging technology from Adobe that allows you to embed data about a file called metadata into the file itself.Adobe XMP Toolkit SDK 2020.1 and earlier versions are vulnerable to arbitrary writes. An attacker could exploit this vulnerability to execute arbitrary code...

Mandiant Discloses Critical Vulnerability Affecting Millions of IoT Devices

Today, Mandiant disclosed a critical risk vulnerability in coordination with the Cybersecurity and Infrastructure Security Agency “CISA” that affects millions of IoT devices that use the ThroughTek “Kalay” network. This vulnerability, discovered by researchers on Mandiant’s Red Team in late 2020,...

Multiple Flaws Affecting Realtek Wi-Fi SDKs Impact Nearly a Million IoT Devices

Taiwanese chip designer Realtek is warning of four security vulnerabilities in three software development kits SDKs accompanying its WiFi modules, which are used in almost 200 IoT devices made by at least 65 vendors. The flaws, which affect Realtek SDK v2.x, Realtek "Jungle" SDK...

PT-2021-4731 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a buffer overflow in dynamic memory, potentially allowing an attacker to access protected information or cause a denial of service. Exploitation requires user...

The vulnerability in the web interface for managing Realtek SDK devices allows a hacker to execute arbitrary code.

The vulnerability in the Realtek SDK’s web interface for controlling development tools is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2021-4667 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2021-4760 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such a...

PT-2021-4670 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a buffer overflow vulnerability in the XMP Toolkit SDK, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires...

Adobe XMP Toolkit SDK 缓冲区错误漏洞

Adobe XMP Toolkit SDK is a tagging technology from Adobe that allows you to embed data about a file called metadata into the file itself.Adobe XMP Toolkit SDK 2020.1 and earlier versions are vulnerable to a heap buffer overflow. An attacker could exploit this vulnerability to cause a denial of...

PT-2021-4735 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to insufficient input validation in the Adobe XMP-Toolkit-SDK, which can lead to arbitrary code execution in the context of the current user. This can be achieved b...

PT-2021-4888 · Adobe +2 · Xmp Toolkit Sdk +2

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a write-what-where condition vulnerability caused during the application's memory allocation process. This may cause the memory management functions to become...

ThroughTek Kalay P2P SDK

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: ThroughTek Equipment: Kalay P2P SDK Vulnerability: Improper Access Control 2. RISK EVALUATION Successful exploitation of this vulnerability could permit remote code execution and unauthorized access to...

PT-2021-4669 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a buffer overflow vulnerability in the XMP Toolkit SDK, potentially allowing arbitrary code execution in the context of the current user. Exploitation requires...

PT-2021-4761 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to a buffer overflow vulnerability in the XMP Toolkit SDK, which can potentially result in arbitrary code execution in the context of the current user. Exploitation...

PT-2021-4643 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to an Improper Input Validation vulnerability, which could potentially result in arbitrary code execution in the context of the current user. Exploitation of this...

PT-2021-4666 · Adobe +4 · Xmp Toolkit Sdk +4

Name of the Vulnerable Software and Affected Versions: XMP Toolkit SDK versions 2020.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of arbitrary memory. An attacker could leverage this vulnerability to bypass mitigations such a...