Piotr Bania

توجد مشكلة كتابة خارج الحدود في وظيفة محلل XML. يمكن لملف `.fadein` تم إنشاؤه خصيصًا لهذا الغرض أن يؤدي إلى حدوث هذه المشكلة، مما قد يسمح لمهاجم بتقديم ملف ضار والتسبب في حدوث كتابة خارج الحدود.

توجد مشكلة «استخدام بعد التحرير» (use-after-free) في وظيفة محلل XML. قد يؤدي تقديم ملف .xml مصمم خصيصًا لهذا الغرض إلى تلف الذاكرة في منطقة الـ«هياب» (heap). يمكن للمهاجم استغلال هذه الثغرة عن طريق تقديم ملف ضار.

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows (affected versions not specified) Description: The issue is related to an out-of-bounds read in the user mode layer of the NVIDIA GPU Display Driver for Windows. This could allow an unprivileged user to cause the system to read data outside the intended buffer boundaries. A successful exploitation might result in code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows (affected versions not specified) Description: The issue is related to an out-of-bounds read in the user mode layer of the NVIDIA GPU Display Driver for Windows. This can be exploited by an unprivileged regular user. A successful exploit might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to an out-of-bounds read in the user mode layer of the NVIDIA GPU Display Driver for Windows. This could allow an unprivileged user to cause the system to read memory outside the intended boundaries, potentially leading to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

The issue is related to an out-of-bounds read in the user mode layer of the NVIDIA GPU Display Driver for Windows. This could allow an unprivileged user to cause the system to read memory outside the intended boundaries. A successful exploitation might result in code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

The issue is related to an out-of-bounds read in the user mode layer of the NVIDIA GPU Display Driver for Windows. This could allow an unprivileged user to cause the system to read memory outside the intended boundaries, potentially leading to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows (affected versions not specified) Description: The issue is related to an out-of-bounds read in the user mode layer of the NVIDIA GPU Display Driver for Windows. This could allow an unprivileged regular user to cause the vulnerability, potentially leading to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: AMD Radeon user mode driver for DirectX 11 (affected versions not specified) Description: The issue is related to an out of bounds write vulnerability in the AMD Radeon user mode driver for DirectX 11, which could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: AMD Radeon user mode driver for DirectX 11 (affected versions not specified) Description: An out of bounds write vulnerability in the AMD Radeon user mode driver for DirectX 11 could allow an attacker with access to a malformed shader to potentially achieve arbitrary code execution. The vulnerability is related to a buffer overflow in memory, which can be exploited by an attacker to execute arbitrary code. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to an out-of-bounds write in the user mode layer of the NVIDIA GPU Display Driver for Windows, which can be caused by an unprivileged regular user. A successful exploit of this issue may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

The issue is related to a use after free vulnerability in the Media component of Google Chrome, which can lead to heap corruption. This can potentially allow a remote attacker to execute arbitrary code via a crafted HTML page.

A memory corruption issue exists in the VHD File Format parsing CXSPARSE record functionality. This can be triggered by a specially-crafted file, leading to an out-of-bounds write. A victim needs to open a malicious file to activate this issue. The problem arises because the 'number of blocks' value from the CXSPARSE record is not properly checked, allowing an attacker to control the loop counter and leading to arbitrary memory writing.

The issue is related to an out-of-bounds write in the user-mode layer of the driver, which can be triggered by an unprivileged user. This may result in code execution, information disclosure, and denial of service.

The issue is related to a use after free in WebGPU, which can potentially allow a remote attacker to exploit heap corruption via a crafted HTML page. This could enable the attacker to bypass existing security restrictions.

The issue is related to the DirectX11 user mode driver, where an unauthorized attacker on the network can cause an out-of-bounds write through a specially crafted shader. This may lead to code execution, resulting in denial of service, escalation of privileges, information disclosure, and data tampering. The impact may extend to other components.

The NVIDIA GPU Display Driver contains a vulnerability in the kernel mode layer, where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader. This may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. The scope of the impact may extend to other components.

A memory corruption issue exists in the ISO Parsing functionality. This can be triggered by a specially crafted malformed file, leading to an out-of-bounds write. An attacker can exploit this by providing a malicious file.

A memory corruption issue exists in the DMG File Format Handler functionality. This can be triggered by a specially crafted DMG file, leading to an out-of-bounds write. An attacker can exploit this by providing a malicious file.

The issue is related to a use after free in the ANGLE library of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to a denial of service or the execution of arbitrary code.