CWE-190: Integer Overflow vulnerabilities

An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.

An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem.

Microsoft Digest Authentication Remote Code Execution Vulnerability

GDI+ Remote Code Execution Vulnerability

Windows Graphics Component Elevation of Privilege Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

Windows Telephony Service Remote Code Execution Vulnerability

CVE-2024-53187 is a vulnerability in the Linux kernel's io_uring subsystem where the io_pin_pages function does not properly check for integer overflows when handling user-supplied addresses. This flaw can lead to an overflow condition when adding size to a user pointer, potentially causing a denial of service via kernel crash. The issue was identified in kernel version 6.12.0-next-20241118-syzkaller and involves improper validation of user input in memory pinning operations.

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Heap-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in RTI Connext Professional (Security Plugins) allows Overflow Variables and Tags. This issue affects Connext Professional: from 7.0.0 before 7.3.0.2, from 6.1.0 before 6.1.2.17.

CVE-2024-47606 is a high-severity integer underflow vulnerability in the GStreamer media-handling library. It occurs in the qtdemux_parse_theora_extension function, where an integer underflow causes an incorrect large size value to be used for memory allocation. This leads to a buffer overflow that overwrites critical memory structures, potentially allowing an attacker to hijack function pointers and execute arbitrary code. The issue is fixed in GStreamer version 1.24.10.

CVE-2024-47537 is a high-severity vulnerability in GStreamer prior to version 1.24.10. It involves an out-of-bounds write caused by an integer overflow when reallocating memory for media samples. The vulnerability occurs because the samples_count value is read from an input file and can be large enough to cause an integer overflow during memory allocation, leading to insufficient memory being allocated. Subsequent writes exceed the allocated buffer, causing memory corruption. This flaw has been fixed in GStreamer version 1.24.10.

CVE-2024-49112 is a critical integer overflow or wraparound vulnerability in Microsoft Windows 10 Version 1507's Lightweight Directory Access Protocol (LDAP) implementation. It allows remote code execution without requiring user interaction or privileges. Affected systems can be fully compromised if exploited.

Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks. This issue affects Online Ordering System: 8.2.1. NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1.

Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a segmentation fault on the application.

CVE-2024-43566 is a high-severity integer overflow or wraparound vulnerability in Microsoft Edge (Chromium-based) that could allow remote code execution. The issue affects versions from 1.0.0 up to but not including 130.0.2849.46. Microsoft has released an official fix in version 130.0.2849.46 to address this vulnerability.

CVE-2024-37976 is an integer overflow or wraparound vulnerability in the Windows Resume Extensible Firmware Interface security feature affecting multiple versions of Microsoft Windows 10 and some Windows 8/8.1 builds. The flaw allows a security feature bypass that could lead to high impact on confidentiality, integrity, and availability. Microsoft has released official fixes for all affected versions.

An integer overflow vulnerability exists in the Compound Document Binary File format parser of v1.14.52 of the GNOME Project G Structured File Library (libgsf). A specially crafted file can result in an integer overflow that allows for a heap-based buffer overflow when processing the sector allocation table. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

An integer overflow vulnerability exists in the Compound Document Binary File format parser of the GNOME Project G Structured File Library (libgsf) version v1.14.52. A specially crafted file can result in an integer overflow when processing the directory from the file that allows for an out-of-bounds index to be used when reading and writing to an array. This can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.

Windows libarchive Remote Code Execution Vulnerability