Liang Zhu

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** The application crashes when opening a PDF containing an abnormal color space. This occurs because the attributes reference a valid but semantically malformed function whose output is not validated. When the output is read, it generates an illegal pointer that accesses an out-of-bounds region, leading to an out-of-bounds read (OOB Read), which is a condition where the software reads data past the end of the intended buffer. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** During the PRC parsing stage, a lack of boundary verification for the PRC entity index allows an out-of-bounds read of the entity array, causing the application to crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Foxit PDF Editor/Reader (affected versions not specified) **Description** An issue occurs when the application opens a PDF file containing an abnormal Unity 3D object. During the parsing process, the application incorrectly resolves a portion of the object as a pointer and uses it as a valid address, leading to a type confusion or invalid pointer dereference that causes the application to crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** PAN-OS versions 12.1 PAN-OS versions 11.2 PAN-OS versions 11.1 PAN-OS versions 10.2 Prisma Access (affected versions not specified) **Description** Multiple buffer overflow vulnerabilities exist in the User-ID Terminal Server Agent (TSA) component. An unauthenticated attacker with network access can send specially crafted network traffic to cause a denial of service (DoS) condition or potentially execute arbitrary code. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hold, potentially overwriting adjacent memory locations. **Recommendations** Restrict User-ID Terminal Server Agent connectivity to trusted internal IP addresses to minimize security risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.