Kai Lu

A heap-based buffer overflow exists in Windows Media that could allow an unauthorized attacker to execute code locally. Remote attackers may be able to execute arbitrary code and affect the system.

The NVIDIA CUDA Toolkit contains an issue in the nvdisasm binary. A user can trigger an out-of-bounds read by providing a specially crafted ELF file to nvdisasm. Exploitation of this issue may result in a partial denial of service.

Name of the Vulnerable Software and Affected Versions: Windows Media (affected versions not specified) Description: A heap-based buffer overflow exists in Windows Media, potentially allowing an unauthorized attacker to execute code over a network. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to an out-of-bounds read in the cuobjdump binary. This can be triggered by passing a malformed ELF file to cuobjdump, potentially leading to a partial denial of service.

The issue is related to an out-of-bounds read in the cuobjdump binary of the NVIDIA CUDA toolkit. This can be triggered by passing a malformed ELF file to cuobjdump, potentially leading to a partial denial of service.

The issue is related to the cuobjdump binary in the NVIDIA CUDA toolkit for Windows, where passing a malformed ELF file could cause an out-of-bounds read. This might lead to a partial denial of service.

The issue is related to an out-of-bounds read in the cuobjdump binary of the NVIDIA CUDA toolkit. This can be triggered by passing a malformed ELF file to cuobjdump, potentially leading to a partial denial of service.

The issue is related to the nvdisasm binary in the NVIDIA CUDA toolkit, where passing a malformed ELF file could cause an out-of-bounds read. This might lead to a partial denial of service.

A vulnerability has been identified in the NVIDIA CUDA Toolkit. The issue was disclosed on 2024-10-03, and a patch is expected in February 2025.

The issue is related to the nvdisasm binary in the NVIDIA CUDA toolkit, where passing a malformed ELF file could cause an out-of-bounds read, potentially leading to a partial denial of service.

The issue is related to a memory buffer overflow in Microsoft Office, which can allow an attacker to execute arbitrary code. There is no information about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue is related to insufficient input validation in Microsoft Office packages. Exploitation of this issue may allow an attacker to execute arbitrary code using a specially crafted file.

The issue is related to insufficient input validation in Microsoft Office, which can be exploited to execute arbitrary code.

An out-of-bounds write issue was addressed with improved bounds checking. Processing a maliciously crafted Postscript file may result in unexpected app termination or disclosure of process memory.

The issue arises from multiple memory corruption problems that have been resolved through enhanced input validation. Processing malicious data may cause unexpected application termination.

The issue is related to the ih264d decoder in the mediaserver of Android, which mishandles slice numbers. This allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file.

The issue is caused by a buffer overflow, allowing a remote attacker to execute arbitrary code or cause a denial of service (memory corruption) through unknown vectors. A memory corruption vulnerability in Adobe Acrobat and Reader enables attackers to execute code.

The issue is caused by a buffer overflow in the QuickTime multimedia package. This allows a remote attacker to execute arbitrary code or cause a denial of service, such as memory corruption and application crash, via a crafted file.

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, and CVE-2015-3667.

QT Media Foundation in Apple QuickTime before 7.7.7, as used in OS X before 10.10.4 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, a different vulnerability than CVE-2015-3661, CVE-2015-3662, CVE-2015-3663, CVE-2015-3666, and CVE-2015-3668.