Browse CVEs

HIGH 7.5 CVE-2024-28231 eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.14.0, 2.13.4,… Fast Dds 2.6.8 / 2.10.4+ Fix from $1,9502024-03-20 MEDIUM 6.2 CVE-2024-28572 Buffer Overflow vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the FreeImage_… Freeimage No fix yet Fix from $1,6002024-03-20 MEDIUM 6.0 CVE-2024-22453 Dell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability. A local high privileged attacker could potentially exploit this vulne… Poweredge R730 Firmware 2.14.0 / 2.19.0+ Fix from $1,6002024-03-19 HIGH 7.8 CVE-2024-20755 Bridge versions 13.0.5, 14.0.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution i… Bridge 13.0.6 / 14.0.2+ Fix from $1,9502024-03-18 HIGH 7.8 CVE-2024-20745 Premiere Pro versions 24.1, 23.6.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code executi… Premiere Pro 23.6.4 / 24.2.1+ Fix from $1,9502024-03-18 HIGH 7.8 CVE-2024-26540 A heap-based buffer overflow in Clmg before 3.3.3 can occur via a crafted file to cimg_library::CImg<unsigned char>::_load_analyze. Cimg 3.3.3+ Fix from $1,9502024-03-15 HIGH 7.8 CVE-2024-26178 Windows Kernel Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20526 / 10.0.14393.6796+ Fix from $1,9502024-03-12 HIGH 8.8 CVE-2024-26161 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20596 / 10.0.14393.6897+ Fix from $1,9502024-03-12 HIGH 8.8 CVE-2024-26166 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20526 / 10.0.14393.6796+ Fix from $1,9502024-03-12 HIGH 8.8 CVE-2024-26159 Microsoft ODBC Driver Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20596 / 10.0.14393.6897+ Fix from $1,9502024-03-12 HIGH 7.8 CVE-2024-21330 Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability Azure Automation 1.8.1-0+ Fix from $1,9502024-03-12 HIGH 8.4 CVE-2024-27209 there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution … Android Mitigation only Fix from $1,9502024-03-11 HIGH 8.8 CVE-2023-46426 Heap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code and caus… Gpac No fix yet Fix from $1,9502024-03-09 CRITICAL 9.8 CVE-2024-22857 Heap based buffer flow in zlog v1.1.0 to v1.2.17 in zlog_rule_new().The size of record_name is MAXLEN_PATH(1024) + 1 but file_path may have data upto… Patch available Fix from $2,3002024-03-07 HIGH 8.8 CVE-2023-45591 A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a remote authenticated attacker t… Imx6 1.0.7-2+ Fix from $1,9502024-03-05 HIGH 7.8 CVE-2024-0156 Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability. A local low privileged attacker could potentially exploit … Digital Delivery 5.2.0.0+ Fix from $1,9502024-03-04 HIGH 7.8 CVE-2024-22100 MicroDicom DICOM Viewer versions 2023.3 (Build 9342) and prior are affected by a heap-based buffer overflow vulnerability, which could allow an attac… Dicom Viewer 2024.1+ Fix from $1,9502024-03-01 MEDIUM 5.5 CVE-2024-24246 Heap Buffer Overflow vulnerability in qpdf 11.9.0 allows attackers to crash the application via the std::__shared_count() function at /bits/shared_pt… Fedora No fix yet Fix from $1,6002024-02-29 HIGH 8.1 CVE-2024-25262 texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vulnerability allows attackers to … Mitigation only Fix from $1,9502024-02-29 MEDIUM 6.5 CVE-2024-22532 Buffer Overflow vulnerability in XNSoft NConvert 7.163 (for Windows x86) allows attackers to cause a denial of service via crafted xwd file. Nconvert No fix yet Fix from $1,6002024-02-28 HIGH 7.8 CVE-2024-1847 Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Va… Solidworks 2024+ Fix from $1,9502024-02-28 HIGH 7.8 CVE-2024-21885 A flaw was found in X.Org server. In the XISendDeviceHierarchyEvent function, it is possible to exceed the allocated array length when certain new de… Mitigation only Fix from $1,9502024-02-28 HIGH 7.8 CVE-2024-21886 A heap buffer overflow flaw was found in the DisableDevice function in the X.Org server. This issue may lead to an application crash or, in some circ… Mitigation only Fix from $1,9502024-02-28 CRITICAL 9.8 CVE-2024-21802 A heap-based buffer overflow vulnerability exists in the GGUF library info-&gt;ne functionality of llama.cpp Commit 18c2e17. A specially crafted .ggu… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26 HIGH 7.8 CVE-2024-23127 A maliciously crafted MODEL, SLDPRT, or SLDASM file, when parsed in ODXSW_DLL.dll and libodxdll.dll through Autodesk applications, can be used to cau… Autocad 2021.1.4 / 2022.1.4+ Fix from $1,9502024-02-22 HIGH 7.8 CVE-2023-42848 The issue was addressed with improved bounds checks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOS 16.7.2,… Ipad Os 10.1 / 13.6.1+ Fix from $1,9502024-02-21 CRITICAL 9.8 CVE-2024-21795 A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111… Fedora No fix yet Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2023-45318 A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004. A specially crafted… Gecko Software Development Kit No fix yet Fix from $2,3002024-02-20 MEDIUM 5.3 CVE-2024-26327 An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater… Qemu after 8.2.1 Fix from $1,6002024-02-19 HIGH 7.8 CVE-2024-0018 In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local… Android Patch available Fix from $1,9502024-02-16