Threats tagged 'ghsa-85hc-7q7f-x4j8'

A heap corruption vulnerability exists in the Advantech TP-3250 printer driver's DrvUI_x64_ADVANTECH.dll (version 0.3.9200.20789). The issue occurs when the DocumentPropertiesW() function is called with a valid dmDriverExtra value but an output buffer that is smaller than expected. The driver incorrectly assumes the output buffer size matches the input buffer size, leading to invalid memory operations and heap corruption. This can cause application crashes resulting in denial of service and potentially allow code execution in user space. Exploitation requires local access.