Latest CVE Feed
-
5.5
MEDIUMCVE-2024-49888
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a sdiv overflow issue Zac Ecob reported a problem where a bpf program may cause kernel crash due to the following error: Oops: divide error: 0000 [#1] PREEMPT SMP KASAN PTI ... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Nov. 13, 2024
-
5.5
MEDIUMCVE-2024-49541
Illustrator versions 29.0.0, 28.7.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this i... Read more
- Published: Dec. 10, 2024
- Modified: Aug. 15, 2025
-
5.5
MEDIUMCVE-2017-7079
An issue was discovered in certain Apple products. iTunes before 12.7 is affected. The issue involves the "Data Sync" component. It allows attackers to access iOS backups (written by iTunes) via a crafted app.... Read more
Affected Products : itunes- Published: Oct. 23, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2017-7113
An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "UIKit" component. It allows attackers to bypass intended read restrictions for secure text fields via vectors involving a focus-change event.... Read more
Affected Products : iphone_os- Published: Nov. 13, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2024-49881
In the Linux kernel, the following vulnerability has been resolved: ext4: update orig_path in ext4_find_extent() In ext4_find_extent(), if the path is not big enough, we free it and set *orig_path to NULL. But after reallocating and successfully initial... Read more
Affected Products : linux_kernel- Published: Oct. 21, 2024
- Modified: Nov. 08, 2024
-
5.5
MEDIUMCVE-2017-7028
An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is affected. watchOS before 3.2.3 is affected. The issue involves the "Kernel" component. It allows attackers to bypass ... Read more
- Published: Jul. 20, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2022-3213
A heap buffer overflow issue was found in ImageMagick. When an application processes a malformed TIFF file, it could lead to undefined behavior or a crash causing a denial of service.... Read more
- Published: Sep. 19, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-49546
InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of... Read more
- Published: Dec. 10, 2024
- Modified: Dec. 18, 2024
-
5.5
MEDIUMCVE-2022-3078
An issue was discovered in the Linux kernel through 5.16-rc6. There is a lack of check after calling vzalloc() and lack of free after allocation in drivers/media/test-drivers/vidtv/vidtv_s302m.c.... Read more
Affected Products : linux_kernel- Published: Sep. 01, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-49548
InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of... Read more
- Published: Dec. 10, 2024
- Modified: Dec. 18, 2024
-
5.5
MEDIUMCVE-2024-49536
Audition versions 23.6.9, 24.4.6 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issu... Read more
- Published: Nov. 15, 2024
- Modified: Nov. 19, 2024
-
5.5
MEDIUMCVE-2017-6990
An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "HFS" component. It allows attackers to bypass intended memory-read restrictions via a crafted app.... Read more
- Published: May. 22, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2024-49554
Media Encoder versions 25.0, 24.6.3 and earlier are affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial of s... Read more
- Published: Dec. 10, 2024
- Modified: Dec. 18, 2024
-
5.5
MEDIUMCVE-2017-6987
An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. tvOS before 10.2.1 is affected. watchOS before 3.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass ... Read more
- Published: May. 22, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2024-49549
InDesign Desktop versions ID19.5, ID18.5.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of... Read more
- Published: Dec. 10, 2024
- Modified: Dec. 18, 2024
-
5.5
MEDIUMCVE-2022-29963
The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. TELNET on port 18550 provides access to a root shell via hardcoded credentials. This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: t... Read more
Affected Products : se4801t0x_redundant_wireless_i\/o_card_firmware deltav_distributed_control_system_sq_controller_firmware deltav_distributed_control_system_sx_controller_firmware se4002s1t2b6_high_side_40-pin_mass_i\/o_terminal_block_firmware se4003s2b4_16-pin_mass_i\/o_terminal_block_firmware se4003s2b524-pin_mass_i\/o_terminal_block_firmware se4017p0_h1_i\/o_interface_card_and_terminl_block_firmware se4017p1_h1_i\/o_card_with_integrated_power_firmware se4019p0_simplex_h1_4-port_plus_fieldbus_i\/o_interface_with_terminalblock_firmware se4026_virtual_i\/o_module_2_firmware +39 more products- Published: Jul. 26, 2022
- Modified: Nov. 21, 2024
-
5.5
MEDIUMCVE-2024-49527
Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue... Read more
- Published: Nov. 12, 2024
- Modified: Nov. 18, 2024
-
5.5
MEDIUMCVE-2017-6961
An issue was discovered in apng2gif 1.7. There is improper sanitization of user input causing huge memory allocations, resulting in a crash. This is related to the read_chunk function using the pChunk->size value (within the PNG file) to determine the amo... Read more
Affected Products : apng2gif- Published: Mar. 17, 2017
- Modified: Apr. 20, 2025
-
5.5
MEDIUMCVE-2022-31650
In SoX 14.4.2, there is a floating-point exception in lsx_aiffstartwrite in aiff.c in libsox.a.... Read more
- Published: May. 25, 2022
- Modified: Jun. 27, 2025
-
5.5
MEDIUMCVE-2024-49532
Acrobat Reader versions 24.005.20307, 24.001.30213, 24.001.30193, 20.005.30730, 20.005.30710 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability t... Read more
- Published: Dec. 10, 2024
- Modified: Feb. 06, 2025