CVE-2021-25452

An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent denial of service on the device...

CVE-2021-25452: Improper Limitation of a Pathname to a Restricted Directory

An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent denial of service on the device...

CVE-2021-25457: Improper Input Validation

An improper input validation vulnerability in DSP driver prior to SMR Sep-2021 Release 1 allows local attackers to get a limited kernel memory information...

PT-2021-16647

Name of the Vulnerable Software and Affected Versions: DSP driver versions prior to SMR Sep-2021 Release 1 Description: The issue is related to an improper input validation vulnerability. This allows local attackers to obtain limited kernel memory information. Recommendations: For versions prior ...

Samsung SMR 输入验证错误漏洞

Samsung SMR is a system patch package from Samsung South Korea. The patch program is provided for Samsung mobile applications. Samsung SMR suffers from an Input Validation Error vulnerability that stems from an Input Validation Error vulnerability in the DSP driver when loading graphic files prio...

PT-2021-16642

Name of the Vulnerable Software and Affected Versions: DSP driver versions prior to SMR Sep-2021 Release 1 Description: The issue is related to an improper input validation vulnerability in the loading of graph files in the DSP driver. This vulnerability allows attackers to perform a permanent...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2021:2687-1 Rating: important References: 1065729 1085224 1094840 1113295 1152472 1152489 1153274 1154353 1155518 1156395 1170511 1176447 1176940 1179243 1180092 1180814 1183871 1184114 1184350 1184631...

CVE-2021-29295

Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The DSP-W215 and all hardware...

CVE-2021-29295

Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The DSP-W215 and all hardware...

CVE-2021-29295

Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The DSP-W215 and all hardware...

Null pointer dereference

UNSUPPORTED WHEN ASSIGNED Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The...

CVE-2021-29295

The CVE-2021-29295 vulnerability affects D-Link DSP-W215 (version 1.10). A null pointer dereference in the device’s HTTP handling (via usr/bin/lighttpd) can be exploited remotely by sending an HTTP request with no URL in the start line, enabling denial of service. Multiple sources corroborate the...

CVE-2021-29295

Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The DSP-W215 and all hardware...

CVE-2021-29295: NULL Pointer Dereference

Null Pointer Dereference vulnerability exists in D-Link DSP-W215 1.10, which could let a remote malicious user cause a denial of servie via usr/bin/lighttpd. It could be triggered by sending an HTTP request without URL in the start line directly to the device. NOTE: The DSP-W215 and all hardware...

PT-2021-18162 · D Link · D-Link Dsp-W215

Name of the Vulnerable Software and Affected Versions: D-Link DSP-W215 version 1.10 Description: A Null Pointer Dereference issue exists, which could allow a remote malicious user to cause a denial of service via usr/bin/lighttpd. This can be triggered by sending an HTTP request without a URL in...

D-Link DSP-W215 代码问题漏洞

The D-Link DSP-W215 is a smart plug product from D-Link, a Taiwan-based company. A security vulnerability exists in the D-Link DSP-W215 1.10, which can be exploited by attackers to cause a denial of service for related devices...

SUSE: Security Advisory (SUSE-SU-2015:0581-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-7907

Name of the Vulnerable Software and Affected Versions libaom versions prior to 2021-03-24 Description The issue is caused by a buffer overflow in the aom dsp/noise model.c component of the libaom library, which implements the AV1 codec. This can allow a remote attacker to execute arbitrary code...

UBUNTU-CVE-2020-22046

A Denial of Service vulnerability exists in FFmpeg 4.2 due to a memory leak in the avprivfloatdspallocl function in libavutil/floatdsp.c...

PT-2021-7909

Name of the Vulnerable Software and Affected Versions libaom versions prior to 2021-03-30 Description The issue is related to a use-after-free in the aom dsp/grain table.c component of the libaom library, which implements the AV1 codec. This could allow a remote attacker to execute arbitrary code...