Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Priority LOW 36

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00399 Published 2024-10-09 No fix listed CWE-121
TI-2024-31728 CVE-2024-47415 · GHSA-rm9c-jqp9-f6p3

Animate | Use After Free (CWE-416)

Priority LOW 36

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00406 Published 2024-10-09 No fix listed CWE-416
Priority LOW 36

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00399 Published 2024-10-09 No fix listed CWE-122
Priority LOW 36

Animate versions 23.0.7, 24.0.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0037 Published 2024-10-09 No fix listed CWE-190
TI-2024-31732 CVE-2024-47419 · GHSA-vf99-pjpx-wq4f

Animate | Out-of-bounds Read (CWE-125)

Priority LOW 24

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00268 Published 2024-10-09 No fix listed CWE-125
TI-2024-31726 CVE-2024-47413 · GHSA-6x93-8xjv-v3q7

Animate | Use After Free (CWE-416)

Priority LOW 36

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00406 Published 2024-10-09 No fix listed CWE-416
TI-2024-31733 CVE-2024-47420 · GHSA-276v-wjfx-4jc3

Animate | Out-of-bounds Read (CWE-125)

Priority LOW 24

Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00268 Published 2024-10-09 No fix listed CWE-125
TI-2024-31727 CVE-2024-47414 · GHSA-qf8p-3m5c-7q58

Animate | Use After Free (CWE-416)

Priority LOW 36

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00406 Published 2024-10-09 No fix listed CWE-416
TI-2024-31731 CVE-2024-47418 · GHSA-x2rw-m92v-98c5

Animate | Use After Free (CWE-416)

Priority LOW 36

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00406 Published 2024-10-09 No fix listed CWE-416
Priority LOW 36

Animate versions 23.0.7, 24.0.4 and earlier are affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0037 Published 2024-10-09 No fix listed CWE-824
TI-2024-31725 CVE-2024-47412 · GHSA-9mv7-8jwg-hfpr

Animate | Use After Free (CWE-416)

Priority LOW 36

Animate versions 23.0.7, 24.0.4 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00406 Published 2024-10-09 No fix listed CWE-416