Wanderingglitch

O problema é causado por uma falha na validação do número de amostras de linha de varredura de um arquivo OpenEXR que contém dados de linha de varredura profunda, levando a um estouro de buffer baseado na pilha. Isso permite que um invasor remoto leia ou grave dados arbitrários. A vulnerabilidade foi corrigida nas versões v3.2.2 e v3.1.12 da biblioteca afetada.

The issue is related to a divide by zero error in the CP2179 component of Wireshark, which can be exploited by a remote attacker to cause a denial of service. This occurs due to a failure in validating the length provided by an attacker-crafted CP2179 packet.

The issue arises from a failure to validate the length of a provided MQTT CMD PUBLISH parsed message with a variable length header, leading to a heap-based buffer overflow vulnerability in the default configuration.

The issue is related to a failure in validating the length provided by an attacker-crafted PPD PostScript document, making CUPS and libppd susceptible to a heap-based buffer overflow and possibly code execution. This can be exploited by an attacker to potentially elevate privileges and execute arbitrary code.

The issue arises from a failure to validate the length of an attacker-crafted MSMMS packet, leading to a heap-based buffer overflow. This could result in code execution within the context of the process running the affected software. The issue is particularly relevant in unusual configurations.

The issue arises from a failure to validate the length provided by an attacker-crafted IEEE-C37.118 packet, making Wireshark susceptible to a heap-based buffer overflow, and possibly code execution in the context of the process running Wireshark.

The issue is related to the Accessibility Framework component and involves insufficient access restrictions. Exploitation of this issue may allow an attacker to execute arbitrary code with system privileges or disclose protected information using a specially crafted application.

The issue involves the WebKit component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

The issue involves the WebKit component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

The issue involves the WebKit component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

The issue involves the WebKit component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

The issue involves the WebKit component and allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash, via a crafted web site.

The issue is caused by a buffer boundary violation in the RegExp class for specific search strategies in the Flash Player platform. This can allow a remote attacker to execute arbitrary code.

The issue is caused by a buffer boundary error in the RegExp class of the Flash Player platform, related to the backtrack search functionality. This can allow a remote attacker to execute arbitrary code by disrupting the search functionality.

The issue is related to the implementation of the `apply` function in Adobe PDF editing and viewing software, which is connected to insufficient access restrictions to certain features. This can allow a remote attacker to bypass JavaScript execution restrictions.

The issue is related to the implementation of function calls in Adobe PDF editing and viewing software, specifically concerning insufficient access restrictions to certain features. This can be exploited by a remote attacker to bypass JavaScript execution restrictions.

The issue is related to the implementation of the Function bind in Adobe PDF editing and viewing software, which is associated with insufficient access restrictions to certain features. This can allow a remote attacker to bypass JavaScript execution restrictions.

The issue is related to the win32k.sys driver in the Windows operating system, which lacks protection for internal data. This allows a local attacker to obtain sensitive information from uninitialized kernel memory using a specially crafted application. The vulnerability can lead to the disclosure of memory addresses or other sensitive kernel information, potentially facilitating further system exploitation.

The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This can be achieved via a crafted ICC profile in a PDF document.

The issue is related to a use-after-free remote code execution problem. No information is provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.