PT-2021-28843

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.37 Description A potential issue exists where the spi-zynqmp-gqspi component of the Linux Kernel may return -ENOMEM if dma map single fails. The actual impact and attack plausibility have not yet been prove...

PT-2021-24749

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.12.3 Description A potential issue exists where the dma map single function fails, returning -ENOMEM. This issue was introduced in version v5.10 and is fixed in version v5.12.4. The actual impact and atta...

PT-2021-24777

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.4 Description The issue concerns a problem with proper NULL termination in the secclass map permissions within the selinux component. The actual impact and potential for attack have not been fully determine...

PT-2021-24849

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: A potential issue exists where the spi-zynqmp-gqspi component of the Linux Kernel may return -ENOMEM if dma map single fails. The actual impact and attack plausibility have not yet been...

PT-2021-24873

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.37 Description: The issue concerns a lack of proper NULL termination in the secclass map permissions within the selinux component. This problem was introduced in version v4.15 and is fixed in Linux Kernel...

OSV-2021-801 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34665 Crash type: UNKNOWN READ Crash state: std::1::tree, std std::1::mapJson::Value::CZString, Json::Value, std::1::lessJson::Value::CZ Json::Value::begin...

PT-2021-28279

Name of the Vulnerable Software and Affected Versions: Json::Value affected versions not specified Description: The issue is related to a crash caused by an unknown read. The crash state indicates a problem with the std:: 1:: tree and std:: 1::map functions, specifically when using...

perfetto:trace_processor_fuzzer: Crash in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std

Project: https://android.googlesource.com/platform/external/perfetto/ Detailed Report: https://oss-fuzz.com/testcase?key=4817163784421376 Project: perfetto Fuzzing Engine: honggfuzz Fuzz Target: traceprocessorfuzzer Job Type: honggfuzzasanperfetto Platform Id: linux Crash Type: UNKNOWN READ Crash...

PT-2021-28273

Name of the Vulnerable Software and Affected Versions: Json::Value affected versions not specified Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves the std:: 1:: tree and std:: 1::map functions, specifically with Json::Value::CZString and Json::Value. Th...

GHSA-2CPX-427X-Q2C6 CHECK-fail in AddManySparseToTensorsMap

Impact An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.AddManySparseToTensorsMap: python import tensorflow as tf import numpy as np sparseindices = tf.constant530, shape=1, 1, dtype=tf.int64 sparsevalues = tf.ones1, dtype=tf.int64 shape = tf.Variabletf.ones55,...

CVE-2021-29258

An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion...

CVE-2021-29258

An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty METADATA map triggers a Reachable Assertion...

OSV-2021-776 UNKNOWN READ in std::__1::__tree<std::__1::__value_type<Json::Value::CZString, Json::Value>, std

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34443 Crash type: UNKNOWN READ Crash state: std::1::tree, std std::1::mapJson::Value::CZString, Json::Value, std::1::lessJson::Value::CZ Json::Value::begin...

PT-2021-18151 · Envoy · Envoy

Name of the Vulnerable Software and Affected Versions: Envoy version 1.14.0 Description: An issue was discovered that allows for a remotely exploitable crash for HTTP2 Metadata. This occurs because an empty METADATA map triggers a Reachable Assertion. Recommendations: For Envoy version 1.14.0, at...

PT-2021-28263

Name of the Vulnerable Software and Affected Versions: Json::Value affected versions not specified Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves the std:: 1:: tree and std:: 1::map functions, specifically with Json::Value::CZString and Json::Value. Th...

QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c

A reachable assertion vulnerability was found in the USB EHCI emulation code of QEMU. This issue occurs while processing USB requests due to missed handling of DMA memory map failure. This flaw allows a malicious privileged user within the guest to send bogus USB requests and crash the QEMU proce...

PYSEC-2021-451

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.AddManySparseToTensorsMap. This is because the...

PYSEC-2021-649

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.AddManySparseToTensorsMap. This is because the...

CVE-2021-29523

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.AddManySparseToTensorsMap. This is because the...

PYSEC-2021-160

TensorFlow is an end-to-end open source platform for machine learning. An attacker can trigger a denial of service via a CHECK-fail in tf.rawops.AddManySparseToTensorsMap. This is because the...