Lucene search
+L

10728 matches found

osv_cve
osv_cve
•added 2024/11/25 1:08 p.m.•27 views

CVE-2024-11498 Resource exhaustion via Stack overflow in libjxl

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

6.9CVSS6.9AI score
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/11/25 1:08 p.m.•34 views

CVE-2024-11498 Resource exhaustion via Stack overflow in libjxl

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

6.9CVSS7.3AI score0.00603EPSS
SaveExploits0References1
Mend
Mend
•added 2024/11/25 1:08 p.m.•8 views

CVE-2024-11498

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

7.5CVSS0.00603EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/25 12:00 a.m.•4 views

CVE-2024-11498: Uncontrolled Resource Consumption

There exists a stack buffer overflow in libjxl. A specifically-crafted file can cause the JPEG XL decoder to use large amounts of stack space up to 256mb is possible, maybe 512mb, potentially exhausting the stack. An attacker can craft a file that will cause excessive memory usage. We recommend...

7.5CVSS6.8AI score0.00603EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/22 12:00 a.m.•16 views

IrfanView 安全漏洞

IrfanView is an image viewer. It supports image browsing, image editing, image format conversion and so on. A buffer overflow remote code execution vulnerability exists in the IrfanView WBZ plugin WB1 Stack File Parsing, which is caused by failing to properly validate the length of user-supplied...

7.8CVSS8.4AI score0.00352EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/22 12:00 a.m.•23 views

Trimble SketchUp 安全漏洞

Trimble SketchUp is a suite of 3D modeling programs for architects, urban planners, producers, game developers, and related professionals from Trimble USA. Trimble SketchUp suffers from a security vulnerability that stems from a stack-based buffer overflow issue contained in SKP file parsing. An...

7.8CVSS8.1AI score0.00339EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/22 12:00 a.m.•17 views

Luxion KeyShot 安全漏洞

Luxion KeyShot is a software for designing photos of 3D scenes from Luxion, USA. The software allows real-time 3D rendering workflows to display results immediately and reduce the time required to create photorealistic product photos. A security vulnerability exists in Luxion KeyShot that stems...

7.8CVSS7.8AI score0.00363EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•21 views

Adobe InDesign Buffer Overflow

The vulnerability of Adobe InDesign’s computer layout automation tool is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.2AI score0.00361EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/22 12:00 a.m.•20 views

NETGEAR R7000P Router L2TP DoS

The vulnerability of the l2tp.cgi script in the NETGEAR R7000P router’s microprogramming system is related to buffer overflows in the stack when processing the l2tpusernetmask parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sending a specially crafted...

5.7CVSS5.8AI score0.00305EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/11/21 12:00 a.m.•20 views

PT-2024-17040 · Irfan Skiljan · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this issue, where the target must visit a...

7.8CVSS7.2AI score0.00352EPSS
SaveExploits0References4
CNVD
CNVD
•added 2024/11/21 12:00 a.m.•77 views

Siemens Tecnomatix Plant Simulation Stack Buffer Overflow Vulnerability (CNVD-2024-45987)

Siemens Tecnomatix Plant Simulation is an industrial control device from Siemens, Germany. Using the function of discrete event simulation for production volume analysis and optimization, and thus improve the manufacturing system performance. A stack buffer overflow vulnerability exists in Siemen...

7.8CVSS7.6AI score0.00235EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/11/18 12:00 a.m.•25 views

opennurbs.dll ODXSW_DLL.dll Code Execution

The vulnerability of the opennurbs.dll and ODXSWDLL.dll libraries, which are software for modeling, design, and drafting in AutoCAD, is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, execute...

10CVSS7.8AI score0.00345EPSS
SaveExploits0References6Affected Software9
CNNVD
CNNVD
•added 2024/11/15 12:00 a.m.•16 views

SourceCodester Student Record Management System 安全漏洞

SourceCodester Student Record Management System is an open source student record management system from SourceCodester. A security vulnerability exists in SourceCodester Student Record Management System version 1.0. An attacker exploiting this vulnerability could cause a stack-based buffer overfl...

7.8CVSS5.8AI score0.00412EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2024/11/15 12:00 a.m.•23 views

Windows Kernel Privilege Escalation

The vulnerability of the Windows Kernel component of the Microsoft operating system is related to buffer overflows in the stack. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS5.7AI score0.03784EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/11/14 12:00 a.m.•10 views

PT-2025-23037

Name of the Vulnerable Software and Affected Versions icu affected versions not specified Debian Linux affected versions not specified Description A stack buffer overflow issue was discovered in the International Components for Unicode ICU. The issue occurs when running the genrb binary, causing...

9.8CVSS7.3AI score0.00425EPSS
SaveExploits0References109
Fortinet
Fortinet
•added 2024/11/12 12:00 a.m.•11 views

Stack buffer overflow in CLI command

...

6.7CVSS6.8AI score0.00228EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/11/11 12:00 a.m.•15 views

PT-2024-32883 · Ivanti · Ivanti Connect Secure

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.3 Description: A stack-based buffer overflow in IPsec allows a remote unauthenticated attacker to cause a denial of service. Recommendations: For versions prior to 22.7R2.3, update to version...

7.8CVSS7.8AI score0.01558EPSS
SaveExploits0References5
CNVD
CNVD
•added 2024/11/11 12:00 a.m.•25 views

Delta Electronics DIAScreen DPA File Parsing Stack Buffer Overflow Vulnerability (CNVD-2025-01799)

Delta Electronics DIAScreen is an intelligent desktop builder from Delta Electronics in Taiwan, China. A stack buffer overflow vulnerability exists in the Delta Electronics DIAScreen DPA file parsing, which can be exploited by an attacker to execute arbitrary code...

8.4CVSS7.9AI score0.02906EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/11/11 12:00 a.m.•97 views

Delta Electronics DIAScreen DPA File Parsing Stack Buffer Overflow Vulnerability

Delta Electronics DIAScreen is an intelligent desktop builder from Delta Electronics in Taiwan, China. A stack buffer overflow vulnerability exists in the Delta Electronics DIAScreen DPA file parsing, which can be exploited by an attacker to execute arbitrary code...

8.4CVSS7.9AI score0.00301EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/11 12:00 a.m.•15 views

Delta Electronics DIAScreen 安全漏洞

Delta Electronics DIAScreen is an intelligent desktop builder from Delta Electronics in Taiwan, China. A stack buffer overflow vulnerability exists in the Delta Electronics DIAScreen DPA file parsing, which can be exploited by an attacker to execute arbitrary code...

8.4CVSS7.8AI score0.00301EPSS
SaveExploits0References1
Rows per page
Query Builder