CVE-2025-27158

CVE-2025-27158 affects Adobe Acrobat Reader DC/Classic: Uninitialized Pointer (CWE-824) leading to arbitrary code execution in the context of the current user. Affected versions include 24.001.30225, 20.005.30748, 25.001.20428 and earlier. Exploitation requires user interaction (opening a malicio...

CVE-2025-27162 Acrobat Reader | Access of Uninitialized Pointer (CWE-824)

Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus...

CVE-2025-27162 Acrobat Reader | Access of Uninitialized Pointer (CWE-824)

Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim mus...

CVE-2025-27162

CVE-2025-27162 affects Adobe Acrobat Reader versions 24.001.30225, 20.005.30748, 25.001.20428 and earlier. The issue is an Access of Uninitialized Pointer (CWE-824) that could lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim must ...

CVE-2025-2173

A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbistrndupiconvucs2 of the file src/conv.c. The manipulation of the argument srclength leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has...

UBUNTU-CVE-2025-2173

A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbistrndupiconvucs2 of the file src/conv.c. The manipulation of the argument srclength leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has...

CVE-2025-2173 libzvbi conv.c vbi_strndup_iconv_ucs2 uninitialized pointer

A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbistrndupiconvucs2 of the file src/conv.c. The manipulation of the argument srclength leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has...

CVE-2025-2173 libzvbi conv.c vbi_strndup_iconv_ucs2 uninitialized pointer

A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbistrndupiconvucs2 of the file src/conv.c. The manipulation of the argument srclength leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has...

CVE-2025-2173 libzvbi conv.c vbi_strndup_iconv_ucs2 uninitialized pointer

A vulnerability was found in libzvbi up to 0.2.43. It has been classified as problematic. Affected is the function vbistrndupiconvucs2 of the file src/conv.c. The manipulation of the argument srclength leads to uninitialized pointer. It is possible to launch the attack remotely. The exploit has...

CVE-2025-2173

CVE-2025-2173 affects libzvbi up to 0.2.43, specifically the function _vbi_strndup_iconv_ucs2 in src/conv.c. The issue is an uninitialized pointer caused by improper handling of src_length, enabling a remote attack and, per sources, an exploit has been disclosed publicly. Multiple advisories conf...

Adobe Acrobat < 20.005.30763 / 24.001.30235 / 25.001.20432 Multiple Vulnerabilities (APSB25-14) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 20.005.30763, 24.001.30235, or 25.001.20432. It is, therefore, affected by multiple vulnerabilities. - Access of Uninitialized Pointer CWE-824 potentially leading to Arbitrary code execution CVE-2025-27158,...

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A buffer overflow vulnerability exists in Adobe Acrobat Reader 24.001.30225, 20.005.30748, 25.001.20428 and earlier versions, which stems from uninitialized pointer...

Adobe Reader < 20.005.30763 / 25.001.20432 Multiple Vulnerabilities (APSB25-14)

The version of Adobe Reader installed on the remote Windows host is a version prior to 20.005.30763 or 25.001.20432. It is, therefore, affected by multiple vulnerabilities. - Access of Uninitialized Pointer CWE-824 potentially leading to Arbitrary code execution CVE-2025-27158, CVE-2025-27162 - U...

CBL Mariner 2.0 Security Update: xorg-x11-server / xorg-x11-server-Xwayland (CVE-2025-26599)

The version of xorg-x11-server / xorg-x11-server-Xwayland installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-26599 advisory. - An access to an uninitialized pointer flaw was found in X.Org and...

PT-2025-10700 · Libzvbi +5 · Libzvbi +5

Name of the Vulnerable Software and Affected Versions: libzvbi versions 0.2.43 and earlier Description: A problem has been found in the function vbi strndup iconv ucs2 of the file src/conv.c. The manipulation of the argument src length leads to an uninitialized pointer. It is possible to launch t...

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A buffer overflow vulnerability exists in Adobe Acrobat Reader 24.001.30225, 20.005.30748, 25.001.20428 and prior versions, which stems from uninitialized pointer...

Adobe Reader < 20.005.30763 / 25.001.20432 Multiple Vulnerabilities (APSB25-14) (macOS)

The version of Adobe Reader installed on the remote macOS host is a version prior to 20.005.30763 or 25.001.20432. It is, therefore, affected by multiple vulnerabilities. - Access of Uninitialized Pointer CWE-824 potentially leading to Arbitrary code execution CVE-2025-27158, CVE-2025-27162 - Use...

Oracle Linux 8 : tigervnc (ELSA-2025-2502)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2502 advisory. - Fix CVE-2025-26594 xorg-x11-server Use-after-free of the root cursor Resolves: RHEL-79397 - Fix CVE-2025-26595 xorg-x11-server Buffer overflow in...

xorg: xwayland: Use of uninitialized pointer in compRedirectWindow()

An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow will return a BadAlloc error without validating the window tree marked just before, which leaves the...

xorg: xwayland: Use of uninitialized pointer in compRedirectWindow()

An access to an uninitialized pointer flaw was found in X.Org and Xwayland. The function compCheckRedirect may fail if it cannot allocate the backing pixmap. In that case, compRedirectWindow will return a BadAlloc error without validating the window tree marked just before, which leaves the...