Ezinne Kalu

In Progress® Telerik® Document Processing SpreadProcessing library, versions prior to 2026.3.1006, an infinite loop vulnerability exists when importing an XLS file with a specifically-targted corruption, the import timeout is ignored resulting in an unresponsive CPU thread and denial of service.

Missing authentication in the local .NET backend (Fiddler.WebUi) allows a local unauthenticated attacker to mint OAuth tokens and read the machine-in-the-middle root certificate. This is achieved through an unauthenticated localhost HTTP and SignalR RPC channel. SignalR is a library that simplifies adding real-time web functionality to applications.

Exposure of privileged Inter-Process Communication (IPC) functionality allows a local, low-privileged attacker to replace the application UI or settings with attacker-controlled content. This is possible if the attacker can modify application launch parameters and persuade a user to start the application. Successful exploitation may lead to the disclosure of OAuth authentication tokens, the execution of locally accessible programs, or the unauthorized modification of application-generated configuration files.

An integer overflow or wraparound issue exists where attackers with write access to the bytecode-cache directory can trigger a heap-based buffer overflow. This is achieved by using a crafted cache file, which can lead to a denial of service. A heap-based buffer overflow occurs when a program writes more data to a heap memory buffer than it can hold, potentially corrupting memory.

An integer overflow occurs during the source-bounds check within the `Memory::init()` function (located in src/runtime/Memory.cpp). A remote attacker can exploit this by providing a crafted WebAssembly module where a 32-bit unsigned addition wraps around, bypassing the bounds check. This leads to an out-of-bounds heap read—a condition where the system reads data beyond the allocated memory buffer—resulting in a denial of service.

An out-of-bounds write and improper validation of array index in Samsung Open Source TizenFX allows for buffer overflows. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hold, potentially overwriting adjacent memory locations.

When the system is configured to use file system storage via the `enable.attachment.store.to.file.system` config key, an attacker can manipulate the filename during upload. This allows for arbitrary file path traversal, a technique used to access files and directories that are stored outside the intended folder.