172 matches found
AFD
AFD CVE-2022-24494 该漏洞是一个任意内存读取漏洞。根本原因在于：用于 memcpy 操作的内存地址缺乏验证，该地址由用户态提供，memcpy 操作将该内存地址中的数据复制到池内存中。 缺少检查的地址位于 Afd!AfdTliIoControl+0x40B 如上图截图所示，该用户态内存地址第一次从 InputBuffer+0x20 复制时，会使用 MmUserProbeAddress 正确检查该内存地址是否位于用户态内存地址空间内。然而，第二次将该内存地址从 InputBuffer+0x20 复制到 RAX 寄存器时，却没有使用 MmUSerProbeAddress...
CVE-2024-2887
CVE-2024-2887 Esta es una breve descripción del CVE-2024-2887, que utilicé para reclamar V8CTF M123. Cuando se definen más tipos que kV8MaxWasmTypes, lo cual se puede lograr añadiendo más tipos en RecGroup, el índice de tipos puede superar los 20 bits y entonces desbordarse. De este modo, dos tip...
CVE-2021-28476
CVE-2021-28476：vmswitch.sys 中的“Microsoft Hyper-V 远程代码执行漏洞” 这是 CVE-2021-28476（“Hyper-V 远程代码执行漏洞”）的概念验证，该漏洞是 vmswitch.sys（ 网络虚拟化服务提供程序 ）中的任意内存读取问题，微软于 2021 年 5 月进行了修补。 该漏洞由 @australeo、@ergot86、@peleghd 和 @OphirHarpaz 发现。客户虚拟机通过 VMBus（一种 用于分区间通信的基于通道的通信机制 ）发送恶意 RNDIS 数据包即可触发该漏洞。 以下是主机 系统在调试器中崩溃时的样子：...
GHSA-9W56-46F6-3QHX asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter
Summary With its default configuration numpy enabled, import disabled, asteval's Interpreter lets an attacker-controlled expression obtain a raw arbitrary process-memory read and write primitive, without using import, any dunder attribute, or eval/exec/getattr. Arbitrary in-process read/write is...
CVE-2025-29937
An out of bounds read within the AMD Platform Management Framework PMF could allow an attacker to trigger a read of an arbitrary memory location potentially resulting in loss of availability or confidentiality...
ruby: Arbitrary memory address read vulnerability with Regex search
A flaw was found in Ruby. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings...
AZL-81104 CVE-2026-34353 affecting package ocaml for versions less than 5.1.1-1
In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed...
CVE-2026-3437
An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Portwell Engineering Toolkits version 4.8.2 could allow a local authenticated attacker to read and write to arbitrary memory via the Portwell Engineering Toolkits driver. Successful exploitation of this...
CVE-2025-33192
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-33192
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-33192
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-33192
CVE-2025-33192 affects NVIDIA DGX Spark GB10 via a vulnerability in the SROOT firmware that could allow an attacker with local access to perform an arbitrary memory read, potentially causing a denial of service. The impact is described as local, with availability as the primary concern; no exploi...
NVIDIA DGX Spark 安全漏洞
The NVIDIA DGX Spark is a personal AI computer from NVIDIA, USA. A security vulnerability exists in NVIDIA DGX Spark GB10, which stems from an arbitrary memory read in the SROOT firmware that could lead to a denial of service...
PT-2025-48053
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-55080
The vulnerability CVE-2025-55080 affects Eclipse ThreadX prior to version 6.4.3. Root cause: memory protection enabled, syscall parameter verification is insufficient, enabling an attacker to obtain an arbitrary memory read/write. Affected component: ThreadX RTOS (pre-6.4.3). Impact: arbitrary me...
PT-2025-42235
In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...
EUVD-2017-12036
Malware in sbrugna...
EUVD-2017-12033
Malware in sbrugna...