All CVEs — page 1080 of 1220
The complete archive, 25 per page, newest first. 30483 records. Search instead.
NanoSVG's rasterizer has a numeric conversion flaw that can cause integer overflow when processing large SVG coordinates, leading to undefined behavior and potential process termination. This vulnerability allows attackers to trigger denial of service by crafting malicious SVG files with oversized geometry values.
The flaw is an integer overflow vulnerability in the mp3dec_skip_id3v1() function when parsing the APEv2 tag-size field, which can lead to arbitrary code execution. This matters because attackers can exploit it to execute malicious code, leading to severe system compromise.
MuJS contains a numeric conversion vulnerability in jsR_isindex() that can cause out-of-range floating-point values to be converted to integers without proper validation, leading to undefined behavior and process termination. This allows an attacker to trigger a denial of service condition by crafting specially formatted JavaScript input with excessively large numeric array indices.
SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries, which can lead to heap corruption and potential arbitrary code execution. This affects users who open PDF files with malformed PageLabels data.
The flaw is a memory access issue in nDPI's DNS dissector that occurs when processing specially crafted network input, potentially leading to process termination and denial of service. This vulnerability affects systems using nDPI 5.1.0 with strict alignment requirements or UBSan instrumentation.
BentoPDF 2.8.6 and earlier versions are vulnerable to a cross-origin resource sharing (CORS) proxy issue that allows attackers to forge the browser-oriented Origin header and potentially access internal or reserved destinations.
The Norwegian Cruise Line's door access control system only validates NFC credentials based on a static 7-byte UID from NTAG212 chips, treating identification as authentication without challenge-response capability. This allows attackers to copy valid credentials and gain unauthorized access.
Logto's Account API allowed users with only openid scope access tokens to retrieve stored social or enterprise SSO provider access tokens, bypassing intended consent boundaries. This creates a privilege escalation where low-trust applications can access upstream APIs using these disclosed tokens.
The flaw allows an unauthenticated attacker to bypass two-factor authentication by submitting a valid TOTP code without first authenticating with the account password, leading to potential account takeover, including administrator accounts.