Ubuntu: Security Advisory (USN-7782-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NewStart CGSL MAIN 6.06 : kernel Multiple Vulnerabilities (NS-SA-2025-0206)

The remote NewStart CGSL host, running version MAIN 6.06, has kernel packages installed that are affected by multiple vulnerabilities: - A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of...

CVE-2025-9903

Out-of-bounds write vulnerabilities in print processing of Generic Plus PCL6 Printer Driver / Generic Plus UFR II Printer Driver / Generic Plus LIPS4 Printer Driver / Generic Plus LIPSLX Printer Driver / Generic Plus PS Printer Driver / UFRII LT Printer Driver / CARPS2 Printer Driver / Generic FA...

macOS 15.x < 15.7.1 (125329)

The remote host is running a version of macOS / Mac OS X that is 15.x prior to 15.7.1. It is, therefore, affected by a vulnerability: - An out-of-bounds write issue was addressed with improved bounds checking. CVE-2025-43400 Note that Nessus has not tested for this issue but has instead relied on...

CVE-2024-48014

Dell BSAFE Micro Edition Suite, versions prior to 5.0.2.3 contain an Out-of-bounds Write vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-48014

Dell BSAFE Micro Edition Suite, versions prior to 5.0.2.3 contain an Out-of-bounds Write vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service...

CVE-2025-7996 Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt AR File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-7990

CVE-2025-7990 affects Ashlar-Vellum Cobalt VC6. The issue is an Out-of-Bounds Write during parsing of VC6 files caused by insufficient validation of user-supplied data, which can enable arbitrary code execution in the context of the compromised process. Exploitation requires user interaction (vis...

PT-2025-38156

Name of the Vulnerable Software and Affected Versions: NVIDIA Triton Inference Server for Windows and Linux affected versions not specified Description: NVIDIA Triton Inference Server for Windows and Linux contains an issue where an attacker could cause an out-of-bounds write through a specially...

Ashlar-Vellum Cobalt 缓冲区错误漏洞

Ashlar-Vellum Cobalt is a 3D modeling software developed by Ashlar Vellum, which supports Windows and Mac systems, and is mainly used for 3D modeling and CAD drawing in industrial product design, architectural design and other fields. Ashlar-Vellum Cobalt suffers from an out-of-bounds write...

CVE-2025-8893

CVE-2025-8893 describes an Out-of-Bounds Write in Autodesk products triggered by parsing a malicious PDF. The issue affects Autodesk software that processes PDFs; root cause is a vulnerability in PDF parsing potentially allowing a local attacker to crash, corrupt data, or execute arbitrary code i...

CVE-2025-54245

Summary : CVE-2025-54245 affects Adobe Substance3D Viewer up to version 0.25.1, with an out-of-bounds write vulnerability that could allow arbitrary code execution in the current user’s context. The issue is triggered by opening a malicious file, requiring user interaction. Affected product/detai...

PT-2025-36975

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.25.1 and earlier Description: Substance3D - Viewer is affected by an out-of-bounds write issue that may lead to arbitrary code execution with the privileges of the current user. A user must open a specially...

PT-2025-36973

Name of the Vulnerable Software and Affected Versions: Substance3D - Viewer versions 0.25.1 and earlier Description: Substance3D - Viewer is affected by an out-of-bounds write issue that may lead to arbitrary code execution with current user privileges. Successful exploitation requires a user to...

Adobe Substance3D Viewer 缓冲区错误漏洞

Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. Adobe Substance3D Viewer suffers from an out-of-bounds write vulnerability that can be exploited by an attacker to execute arbitrary code in the current user's environment...

CVE-2025-7709

An integer overflow exists in the FTS5 https://sqlite.org/fts5.html extension. It occurs when the size of an array of tombstone pointers is calculated and truncated into a 32-bit integer. A pointer to partially controlled data can then be written out of bounds...

CVE-2025-36900

In lwistestregisterio of lwisdevicetest.c, there is a possible OOB Write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-32316

CVE-2025-32316 affects the Android graphics allocator: in gralloc4, a missing bounds check allows an out-of-bounds write, leading to local information disclosure without requiring user interaction or extra privileges. The NVD/Red Hat CNVD entries confirm the same issue; the Android 16 bulletin in...

CVE-2025-57778

There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid source address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a...

CVE-2025-36903

In lwisiobufferwrite, there is a possible OOB read/write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...