XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the parsing of RWZ files. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-22913.
CVE-2024-47546 is an integer underflow vulnerability in the GStreamer media-handling library, specifically in the extract_cc_from_data function within qtdemux.c. The flaw occurs when a subtraction operation atom_length - 8 underflows if atom_length is less than 8, causing an out-of-bounds read via g_memdup2. This vulnerability is fixed in version 1.24.10.
CVE-2024-47545 is an integer underflow vulnerability in the GStreamer media-handling library, specifically in the qtdemux_parse_trak function. The flaw occurs during strf parsing when a subtraction operation reduces a size variable by 40, potentially causing a negative integer underflow. This leads to an out-of-bounds read when gst_buffer_fill calls memcpy with an incorrect large size. The issue is fixed in version 1.24.10.
Sonos Era 100 SMB2 Message Handling Integer Underflow Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos Era 100 smart speakers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the handling of SMB2 messages. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before reading from memory. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-22336.
CVE-2024-32975 is an integer underflow vulnerability in the Envoy proxy affecting versions up to 1.30.1. It causes a crash in the QuicheDataReader::PeekVarInt62Length() function due to an integer underflow in QuicStreamSequencerBuffer::PeekRegion(). The issue has a medium severity with a CVSS score of 5.9 and does not impact confidentiality or integrity but results in availability disruption.
FreeRDP versions prior to 2.11.6 and 3.5.0 contain an integer underflow vulnerability when connecting to servers using the NSC codec. This flaw is addressed in versions 2.11.6 and 3.5.0. Users can mitigate the issue by avoiding the NSC codec, for example by using the '-nsc' option.
An integer underflow vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111). A specially crafted .famos file can lead to an out-of-bounds write which in turn can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.
CVE-2023-33059 is a high-severity integer underflow vulnerability (CWE-191) affecting a wide range of Qualcomm Snapdragon platforms and related chipsets. The flaw occurs due to improper handling of VOC packet data in the audio processing component of the ADSP, leading to memory corruption. Exploitation requires local privileges and no user interaction, potentially allowing attackers to compromise confidentiality, integrity, and availability of affected devices. This vulnerability impacts numerous Snapdragon-based devices, including mobile phones, IoT devices, automotive platforms, and wearable technology. Although no known exploits are currently reported in the wild, the broad range of affected products and the high CVSS score (7.8) indicate significant risk. European organizations relying on Snapdragon-powered devices, especially in telecommunications, automotive, and industrial IoT sectors, may face operational and security risks. Mitigation requires timely patching from device manufacturers and applying strict input validation and memory safety checks in audio processing modules. Countries with high adoption of Snapdragon devices and advanced automotive or IoT industries, such as Germany, France, the UK, and the Nordics, are most likely to be affected. Due to the complexity and privilege requirements, exploitation is moderately difficult but impactful, warranting urgent attention from defenders.
An out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of Accusoft ImageGear 20.1. A specially crafted malformed file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.
