CVE-2017-8242: Concurrent Execution using Shared Resource with Improper Synchronization

In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memory write...

CVE-2017-7889

The mm subsystem in the Linux kernel through 3.2 does not properly enforce the CONFIGSTRICTDEVMEM protection mechanism, which allows local users to read or write to kernel memory locations in the first megabyte and bypass slab-allocation access restrictions via an application that opens the...

CVE-2016-9958

game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations...

CVE-2016-9958: Improper Restriction of Operations within the Bounds of a Memory Buffer

game-music-emu before 0.6.1 allows remote attackers to write to arbitrary memory locations...

Memory corruption

fastping.c in MRLG aka Multi-Router Looking Glass before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption...

CVE-2014-3931

CVE-2014-3931 affects Multi-Router Looking Glass (MRLG); MRLG versions prior to 5.5.0 contain a buffer/memory handling vulnerability in fastping.c that can be triggered remotely without authentication, leading to an arbitrary memory write and memory corruption (potential RCE). Public references (...

CVE-2014-3931: Improper Restriction of Operations within the Bounds of a Memory Buffer

fastping.c in MRLG aka Multi-Router Looking Glass before 5.5.0 allows remote attackers to cause an arbitrary memory write and memory corruption...

CVE-2016-9400

The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling...

PT-2017-10396 · Game Music Emu +2 · Game-Music-Emu +2

Name of the Vulnerable Software and Affected Versions: game-music-emu versions prior to 0.6.1 Description: The issue allows remote attackers to write to arbitrary memory locations, potentially leading to exploitation. Recommendations: For versions prior to 0.6.1, update to version 0.6.1 or later ...

CVE-2015-5261

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...

CVE-2015-5261: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation...

CVE-2015-6856: Undefined Security Weakness

Dell Pre-Boot Authentication Driver PBADRV.sys 1.0.1.5 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x0022201c IOCTL call...

PT-2015-6823

Name of the Vulnerable Software and Affected Versions SPICE versions prior to 0.12.6 Description The issue allows guest OS users to read and write to arbitrary memory locations on the host via guest QXL commands related to surface creation. Recommendations For versions prior to 0.12.6, update to...

SIS XGI VGA Display Manager Privilege Vulnerability

SIS XGI VGA Display Manager is a VGA display manager. A security vulnerability exists in SIS XGI VGA Display Manager that allows an attacker to write to arbitrary memory locations and gain elevated privileges...

UBUNTU-CVE-2015-5950

The NVIDIA display driver R352 before 353.82 and R340 before 341.81 on Windows; R304 before 304.128, R340 before 340.93, and R352 before 352.41 on Linux; and R352 before 352.46 on GRID vGPU and vSGA allows local users to write to an arbitrary kernel memory location and consequently gain privilege...

CVE-2015-6923

CVE-2015-6923 affects VBox Communications Satellite Express Protocol 2.3.17.3. The ndvbs module permits a local attacker to write arbitrary physical memory via IOCTL 0x00000ffd, enabling privilege escalation by overwriting HalDispatchTable function pointers (arbitrary code execution). Public advi...

CVE-2015-6923: Undefined Security Weakness

The ndvbs module in VBox Communications Satellite Express Protocol 2.3.17.3 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x00000ffd ioctl call...

PT-2015-7058

Name of the Vulnerable Software and Affected Versions FortiClient versions prior to 5.2.4 Description The issue allows local users to write to arbitrary memory locations via a specific ioctl call, 0x226108, in certain drivers. Recommendations For versions prior to 5.2.4, update to version 5.2.4 o...

CVE-2015-5735: Undefined Security Weakness

The 1 mdare6448.sys, 2 mdare3248.sys, 3 mdare3252.sys, and 4 mdare6452.sys drivers in Fortinet FortiClient before 5.2.4 allow local users to write to arbitrary memory locations via a 0x226108 ioctl call...

CVE-2015-0664

The IPC channel in Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier allows local users to write to arbitrary userspace memory locations, and consequently gain privileges, via crafted messages, aka Bug ID CSCus79195...