Titan Team

An improper restriction of operations within the bounds of a memory buffer exists in linkingvision rapidvms. This issue could potentially allow for unauthorized access or manipulation of data due to insufficient boundary checks when handling memory operations.

An improper restriction of operations within the bounds of a memory buffer exists in linkingvision rapidvms. This issue could potentially allow for unintended consequences due to insufficient memory boundary checks.

A NULL pointer dereference issue exists in taurusxin ncmdump within the `src/utils` modules, specifically related to the cJSON.Cpp program files. This can lead to unexpected behavior or program crashes.

An improper control of code generation issue, specifically a code injection flaw, exists in the ldo.C module within perf-ninja’s labs/misc/pgo/lua components. This allows for the injection of Lua bytecode, potentially leading to remote code execution (RCE) accessible over a network.

An issue exists in linkingvision rapidvms related to an improper restriction of operations within the bounds of a memory buffer. This condition could potentially allow for unauthorized access or manipulation of data.

An out-of-bounds write issue exists in the inflate.C file within the base/poco/Foundation/src modules of proton. This flaw is a heap smash, potentially leading to remote code execution. The issue is network-reachable and does not require authentication, potentially allowing for full system compromise.

A Use After Free issue exists in No-Chicken Echo-Mate within the rmap.C program files, specifically in the mm modules of the SDK/rv1106-sdk/sysdrv/source/kernel directory. This condition occurs due to improper memory management, potentially allowing for unexpected behavior or code execution.

An integer overflow or wraparound condition exists in the Expat parser within the ITK software. This issue is network-reachable and allows for automatable exploitation. The vulnerability is located in the `expat` modules under the `Modules/ThirdParty/Expat/src` directory.

A flaw exists in OSGeo gdal related to improper restriction of operations within the bounds of a memory buffer. This issue is located in the `frmts/zlib/contrib/infback9` modules, specifically within the `inftree9.c` file. The problem stems from incorrect pointer arithmetic in the bundled zlib library, potentially allowing attackers to corrupt heap memory through malformed compressed data, which could lead to remote code execution.

An out-of-bounds read issue exists in the rizonesoft Notepad3 application, specifically within the `scintilla`, `oniguruma`, and `src` modules. The issue is related to the `regcomp.C` program file. This is a parser vulnerability where malicious regular expressions can lead to remote code execution.

An inconsistent interpretation of HTTP requests ('HTTP Request/Response Smuggling') exists in visualfc liteide within the `http parser.C` program files and the `liteidex/src/3rdparty/qjsonrpc/src/http-parser` modules. This issue could allow for the smuggling of HTTP requests and responses.

A security issue exists in albfan Miraclecast. The nature of the issue is unspecified.

A flaw exists in JoyConDroid related to improper limitation of a pathname to a restricted directory, also known as a path traversal. This issue is found in the `UnzipUtil.Java` file within the `app/src/main/java/com/rdapps/gamepad/util` modules.

A memory buffer issue exists within the modizer software, specifically in the libcurl IMAP handler. This issue allows for operations outside the intended memory boundaries. The vulnerability is network-exploitable and has a high severity. The affected files include imap.C.

An improper handling of values issue exists in No-Chicken Echo-Mate within the netfilter modules (files `nf tables.H`, `nft byteorder.C`, and `nft meta.C`).

An unreliable data deserialization issue exists in DTStack chunjun, specifically within the `chunjun-core/src/main/java/com/dtstack/chunjun/util` modules. The problem is linked to the `GsonUtil.Java` program files.

An integer overflow or wraparound issue exists in the ART raw image editor’s `rtengine` modules, specifically related to the dcraw.C program file. This can potentially lead to unexpected behavior or crashes.

An out-of-bounds read issue exists in the furnace software within the extern/libsndfile-modified/src modules when processing flac.C program files.

A flaw exists that can lead to the exposure of sensitive information to an unauthorized actor. The issue affects ixray-team ixray-1.6-stcop.

An out-of-bounds write issue exists in WujekFoliarz DualSenseY-v2. This allows for potential unauthorized access or modification of data.