CVE Vulnerability Catalog

This vulnerability allows a remote attacker to execute arbitrary code in GIMP when parsing TIF files. The issue is due to lack of proper validation of the length of user-supplied data before copying it to a stack-based buffer, leading to a stack-based buffer overflow. User interaction is required, such as opening a malicious file.

This vulnerability allows a remote attacker to execute arbitrary code in GIMP when parsing TIF files. The issue is due to lack of proper validation of the length of user-supplied data before copying it to a heap-based buffer, leading to a heap-based buffer overflow. User interaction is required, such as opening a malicious file.

This vulnerability allows a remote attacker to execute arbitrary code in GIMP when parsing PSD files. The issue is due to lack of proper validation of user-supplied data, leading to an integer overflow before buffer allocation. User interaction is required, such as opening a malicious file.

This vulnerability allows a remote attacker to execute arbitrary code in GIMP when parsing HDR files. The issue is due to lack of proper validation of user-supplied data, leading to an integer overflow before buffer allocation. User interaction is required, such as opening a malicious file.

Use-After-Free vulnerability in GStreamer rtpsbcdepay allows remote code execution. Lack of validating object existence before operations leads to use-after-free. An attacker can leverage this to execute code in the context of the current process.

Heap-based buffer overflow in GStreamer PNG file parsing allows remote code execution. Lack of proper length validation before copying data to heap buffer leads to overflow. User interaction is required, such as visiting a malicious page or opening a malicious file.

Stack-based buffer overflow in GStreamer OGG file parsing allows remote code execution. Lack of proper length validation before copying data to stack buffer leads to overflow. User interaction is required, such as visiting a malicious page or opening a malicious file.

Heap-based buffer overflow in GStreamer MRF file parsing allows remote code execution. Lack of proper length validation before copying data to heap buffer leads to overflow. User interaction is required, such as visiting a malicious page or opening a malicious file.

Out-of-bounds write in GStreamer MRF file parsing allows remote code execution. Lack of proper validation of user-supplied data leads to write past the end of an allocated buffer. User interaction is required, such as visiting a malicious page or opening a malicious file.

Memory corruption vulnerability in OriginLab Origin Viewer OGW file parsing allows remote code execution. Lack of proper validation of user-supplied data leads to memory corruption. User interaction is required, such as visiting a malicious page or opening a malicious file.

Out-of-bounds write in OriginLab Origin Viewer OPJ file parsing allows remote code execution. Lack of proper validation of user-supplied data leads to write past the end of an allocated data structure. User interaction is required, such as visiting a malicious page or opening a malicious file.

Memory corruption vulnerability in OriginLab OriginPro OGG file parsing allows remote code execution. Lack of proper validation of user-supplied data leads to memory corruption. User interaction is required, such as visiting a malicious page or opening a malicious file.

Memory corruption vulnerability in OriginLab OriginPro OGW file parsing allows remote code execution. Lack of proper validation of user-supplied data leads to memory corruption. User interaction is required, such as visiting a malicious page or opening a malicious file.

Out-of-bounds write in OriginLab OriginPro OGG file parsing allows remote code execution. Lack of proper validation of user-supplied data leads to write past the end of an allocated data structure. User interaction is required, such as visiting a malicious page or opening a malicious file.

Vulnerability in OriginLab OriginPro during parsing of OPJ files allows remote code execution. Lack of user data validation leads to a write past the end of an allocated data structure. User interaction is required, such as opening a malicious file.

Vulnerability in OriginLab OriginPro during parsing of OPJU files allows remote code execution. Lack of user data validation leads to a write past the end of an allocated data structure. User interaction is required, such as opening a malicious file.

Vulnerability in the aeon library in the load_time_series_segmentation_benchmark method allows remote code execution via Python code injection. Lack of string validation before using it to execute code. User interaction is required.

Vulnerability in the aeon library in the load_human_activity_segmentation_datasets method allows remote code execution via Python code injection. Lack of string validation before using it to execute code. User interaction is required.

Vulnerability in the Aeon library in the load_rehab_pile_dataset method allows remote code execution via deserialization of untrusted data. Lack of user data validation leads to deserialization of untrusted objects. User interaction is required.

Vulnerability in Sony XAV-9500ES device in crash dump handling allows local privilege escalation via command injection. Lack of string validation before using it in a system call. Requires low-privileged access to the system.