CVE-2021-31507

OpenText Brava! Desktop 16.6.3.84 is affected by a stack-based buffer overflow in CGM file parsing. The issue stems from insufficient validation of the length of user-supplied data before copying it to a stack-based buffer, allowing remote code execution. Exploitation requires user interaction (v...

CVE-2021-31513

OpenText Brava! Desktop (Build 16.6.4.55) is affected by CVE-2021-31513 due to an out-of-bounds write in BMP file parsing. The vulnerability allows remote code execution and requires user interaction (visiting a malicious page or opening a malicious BMP). Root cause: insufficient validation of us...

CVE-2021-31500

CVE-2021-31500 affects OpenText Brava! Desktop 16.6.3.84. The vulnerability lies in the DWF file parsing code, where insufficient validation of a user-supplied value leads to an untrusted pointer dereference. This can allow remote code execution in the context of the current process when a user o...

CVE-2021-31488

OpenText Brava! Desktop 16.6.3.84 is affected by a DWF file parsing vulnerability. The issue is an out-of-bounds write caused by improper validation of user-supplied data, allowing remote code execution when a user visits a malicious page or opens a malicious file. The vulnerability’s impact is e...

CVE-2021-31494

OpenText Brava! Desktop 16.6.3.84 is affected by a DXF file parsing vulnerability that allows remote code execution via an out-of-bounds write. The flaw arises from insufficient validation of user-supplied data, with exploitation requiring user interaction (visiting a malicious page or opening a ...

CVE-2021-31497

OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31497 through a DWG file parsing flaw. The vulnerability arises from failure to validate the existence of an object before operations, enabling arbitrary code execution in the process context. User interaction is required (visiting a malic...

CVE-2021-31486

OpenText Brava! Desktop 16.6.3.84 is affected by an out-of-bounds write in DWF file parsing that can lead to remote code execution. The flaw arises from insufficient validation of user-supplied data, enabling a write past the end of an allocated buffer. Exploitation requires user interaction (vis...

CVE-2021-31504

OpenText Brava! Desktop is affected by CVE-2021-31504 due to an unvalidated pointer dereference in PDF parsing, allowing a user-interaction-initiated remote code execution. Affected: OpenText Brava! Desktop Build 16.6.3.84 (package 16.6.3.134). Exploitation requires the user to visit a malicious ...

CVE-2021-31481

OpenText Brava! Desktop 16.6.3.84 is affected by a vulnerability in parsing SLDPRT files that leads to an untrusted pointer dereference and remote code execution. The issue stems from insufficient validation of a user-supplied value before dereferencing it as a pointer. Exploitation requires user...

CVE-2021-31484

OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31484. The issue is an out-of-bounds write in the DWF file parsing code caused by insufficient validation of user-supplied data, enabling remote code execution when a user visits a malicious page or opens a malicious DWF-containing file. E...

CVE-2021-31509

CVE-2021-31509 affects OpenText Brava! Desktop 16.6.3.84. The vulnerability stems from the parsing of DXF files, where insufficient validation of user-supplied data allows a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. Exploitati...

CVE-2021-31490

CVE-2021-31490 affects OpenText Brava! Desktop 16.6.3.84. The issue is an out-of-bounds write during parsing of DWF files, caused by insufficient validation of user-supplied data, allowing a remote attacker to execute code in the context of the current process after user interaction (e.g., visiti...

CVE-2021-31512

CVE-2021-31512 affects OpenText Brava! Desktop 16.6.4.55. The flaw is in TIF file parsing, caused by lack of proper validation of user-supplied data, leading to an out-of-bounds read and potentially code execution in the context of the current process. Exploitation requires user interaction (visi...

CVE-2021-31483

OpenText Brava! Desktop 16.6.3.84 is affected by a heap-based buffer overflow in the DWF file parsing routine due to insufficient validation of user-supplied data length before copying to a fixed-length buffer. This enables remote code execution with the current process context when a user visits...

CVE-2021-31491

OpenText Brava! Desktop 16.6.3.84 is affected by an out-of-bounds write in the DWF file parser that can lead to remote code execution. The issue arises from insufficient validation of user-supplied data, allowing a write past the end of an allocated buffer. Exploitation requires user interaction ...

CVE-2021-31503

OpenText Brava! Desktop (version 16.6.3.84 / package 16.6.3.134) is affected by CVE-2021-31503 due to a parsing flaw in IGS files caused by an uninitialized pointer. This leads to arbitrary code execution with the current process context when a user visits a malicious page or opens a malicious fi...

CVE-2021-31508

OpenText Brava! Desktop 16.6.3.84 is affected by a DXF file parsing vulnerability that allows remote code execution due to a write past the end of an allocated buffer caused by insufficient input validation. Exploitation requires user interaction (visiting a malicious page or opening a malicious ...

CVE-2021-31487

OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31487 due to an out-of-bounds write in DWF file parsing. The flaw arises from insufficient validation of user-supplied data, allowing remote code execution when a user visits a malicious page or opens a malicious file, with the attacker ga...

CVE-2021-31496

OpenText Brava! Desktop 16.6.3.84 is affected by a DXF file parsing vulnerability that allows remote code execution. The issue stems from improper validation during DXF parsing, causing a write past the end of an allocated buffer (out-of-bounds write). Exploitation requires user interaction (visi...

CVE-2021-31499

OpenText Brava! Desktop 16.6.3.84 is affected by an out-of-bounds write in DWF file parsing. The root cause is missing validation of user-supplied data during DWF parsing, which can cause a write past the end of an allocated buffer and allow remote code execution in the context of the current pro...

CVE-2021-31485

OpenText Brava! Desktop 16.6.3.84 is affected by a DWF file parsing heap-based buffer overflow. The root cause is insufficient validation of the length of user-supplied data before copying it into a fixed-length heap buffer, enabling remote code execution via user interaction (visiting a maliciou...

CVE-2021-31502

OpenText Brava! Desktop (Build 16.6.4.55) is affected by a PDF file parsing use-after-free/invalid object validation vulnerability. The issue arises from not validating the existence of an object before performing operations during PDF parsing, enabling arbitrary code execution when a user visits...

CVE-2021-31479

OpenText Brava! Desktop 16.6.3.84 is affected by a PDF parsing vulnerability caused by an uninitialized pointer, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file) and would run with the current process’s privileges. Repo...

CVE-2021-31506

CVE-2021-31506 concerns OpenText Brava! Desktop (Build 16.6.4.55). The issue is a PDF parsing flaw where insufficient validation allows a read past the end of an allocated data structure, enabling information disclosure. The vulnerability requires user interaction (target must visit a malicious p...

CVE-2021-31478

OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31478. The flaw resides in PDF parsing and causes a heap-based buffer overflow due to improper validation, enabling remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). The ...

CVE-2021-31493

CVE-2021-31493 affects OpenText Brava! Desktop 16.6.3.84. The vulnerability is a memory corruption issue in the parsing of DXF files caused by insufficient validation of user-supplied data. It allows remote code execution in the context of the current process and requires user interaction (the ta...

CVE-2021-31498

OpenText Brava! Desktop 16.6.3.84 is affected by a DWF file parsing flaw that allows information disclosure via an out-of-bounds read, caused by inadequate validation of user-supplied data and capable of being triggered when a user opens a malicious DWF-containing page/file. The issue can lead to...

CVE-2021-31510

OpenText Brava! Desktop 16.6.4.55 is affected by a TIF file parsing out-of-bounds read that allows remote code execution with user interaction. The root cause is inadequate validation while parsing TIF data, leading to a read past end of allocated memory and code execution in the current process....

CVE-2021-31511

OpenText Brava! Desktop (Build 16.6.4.55) is affected. The vulnerability lies in PDF parsing where insufficient validation allows a write past the end of an allocated buffer, enabling remote code execution. Exploitation requires user interaction (visit a malicious page or open a malicious file). ...

CVE-2021-31482

OpenText Brava! Desktop 16.6.3.84 is affected by an out-of-bounds write in the DWF file parsing code, allowing remote code execution after the user opens a malicious DWF/file or visits a crafted page. The root cause is lack of validation of user-supplied data, causing a write past the end of an a...

CVE-2021-31495

OpenText Brava! Desktop 16.6.3.84 is affected by a memory corruption flaw in DXF file parsing that allows code execution after user interaction (malicious page or file). The root cause is improper validation of user-supplied data in the DXF parser. Exploitation requires user interaction; no patch...

CVE-2021-31492

OpenText Brava! Desktop 16.6.3.84 is affected. The vulnerability stems from parsing DWF files and a lack of proper validation of user-supplied data, leading to an out-of-bounds write (write past the end of an allocated buffer) in the vulnerable component. This enables remote code execution in the...

CVE-2021-31501

OpenText Brava! Desktop 16.6.3.84 is affected by a DWG file parsing vulnerability caused by missing validation, leading to an out-of-bounds read that can disclose sensitive data. It requires user interaction (malicious page/file); in combination with other vulnerabilities, it could enable arbitra...

CVE-2021-31489

OpenText Brava! Desktop 16.6.3.84 is affected by CVE-2021-31489. The issue arises in DWF file parsing due to improper validation, causing an out-of-bounds write that can enable remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file). N...

CVE-2021-31514

OpenText Brava! Desktop 16.6.4.55 is affected by CVE-2021-31514 due to a CGM file parsing flaw that allows a write past the end of an allocated buffer, enabling remote code execution in the context of the current process. The issue requires user interaction (visiting a malicious page or opening a...