Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interacti…

CVE-2024-45306MEDIUMCVSS 4.5EG 4.5

2024-09-02

Vim is an open source, command line text editor. Patch v9.1.0038 optimized how the cursor position is calculated and removed a loop, that verified that the cursor position always points inside a line and does not become invalid by pointing…

CVE-2024-45421HIGHCVSS 8.5EG 8.5

2025-02-25

Buffer overflow in some Zoom Apps may allow an authenticated user to conduct an escalation of privilege via network access.

CVE-2024-4559MEDIUMCVSS 6.5EG 7.5

2024-05-07

Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2024-45679HIGHCVSS 8.4EG 8.4

2024-09-18

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product.

CVE-2024-45872MEDIUMCVSS 6.3EG 6.3

2024-10-03

Bandisoft BandiView 7.05 is vulnerable to Buffer Overflow via sub_0x410d1d. The vulnerability occurs due to insufficient validation of PSD files.

CVE-2024-45993MEDIUMCVSS 6.5EG 6.5

2024-09-30

Giflib Project v5.2.2 is vulnerable to a heap buffer overflow via gif2rgb.

CVE-2024-46264HIGHCVSS 7.8EG 7.8

2024-10-01

cute_png v1.05 was discovered to contain a heap buffer overflow via the cp_find() function at cute_png.h.

CVE-2024-46461HIGHCVSS 8.0EG 8.0

2024-09-25

VLC media player 3.0.20 and earlier is vulnerable to denial of service through an integer overflow which could be triggered with a maliciously crafted mms stream (heap based overflow). If successful, a malicious third party could trigger e…

CVE-2024-46488MEDIUMCVSS 5.5EG 5.5

2024-09-25

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npy_token_next function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

CVE-2024-46632MEDIUMCVSS 4.3EG 4.3

2024-09-26

Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function.

CVE-2024-46993MEDIUMCVSS 4.4EG 0.0

2025-07-01

Electron is an open source framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions prior to 28.3.2, 29.3.3, and 30.0.3, the nativeImage.createFromPath() and nativeImage.createFromBuffer() funct…

CVE-2024-47417HIGHCVSS 7.8EG 7.8

2024-10-09

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction i…

CVE-2024-47431HIGHCVSS 7.8EG 7.8

2024-11-12

Substance3D - Painter versions 10.1.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interac…

CVE-2024-47450HIGHCVSS 7.8EG 7.8

2024-11-12

Illustrator versions 28.7.1 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in th…

CVE-2024-47964HIGHCVSS 7.8EG 7.8

2024-10-10

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can manipulate users to visit a malicious page or file to leverage this vulnerabi…

CVE-2024-48075MEDIUMCVSS 5.3EG 5.3

2024-11-12

A Heap buffer overflow in the server-site handshake implementation in Real Time Logic SharkSSL from 09/09/24 and earlier allows a remote attacker to trigger a Denial-of-Service via a malformed TLS Client Key Exchange message.

CVE-2024-48993HIGHCVSS 8.8EG 8.8

2024-11-12