2120 matches found
FFmpeg libavcodec/mpeg4videodec.c Heap Buffer Overflow DoS
The vulnerability of the ffmpeg4decodepictureheader function in the libavcodec/mpeg4videodec.c file of the FFmpeg multimedia library is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure by using a specially created AVI file...
Linux fs/ntfs3 Pointer Arithmetic DoS
The vulnerability of the fs/ntfs3 component in the Linux operating system is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux net/ipv4/ip_sockglue.c Pointer Dereferencing DoS
The vulnerability of the ipracontrol function in the net/ipv4/ipsockglue.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the ip6racontrol function in the net/ipv6/ipv6sockglue.c component of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux l2cap_sock_recv_cb Buffer Overflow DoS
The vulnerability of the l2capsockrecvcb function in the net/bluetooth/l2capsock.c module of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Cisco Adaptive Security Appliances Pointer Arithmetic DoS
The vulnerability of Microprogramming Software in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to pointer arithmetic errors. Exploiting this vulnerability can allow attackers to cause service failures...
sp1-recursion-gnark-ffi has insufficient range checks of BabyBear arithmetic
The Gnark recursion circuit constrains arithmetic over BabyBear when the native field of the ZKP circuit is the BN254 scalar field. Proper implementation of this logic requires range checking Bn254 values to be less than the BabyBear modulus. In versions 1.2.0, functions like InvF and InvE used...
GHSA-F77Q-R5QM-W4M8 sp1-recursion-gnark-ffi has insufficient range checks of BabyBear arithmetic
The Gnark recursion circuit constrains arithmetic over BabyBear when the native field of the ZKP circuit is the BN254 scalar field. Proper implementation of this logic requires range checking Bn254 values to be less than the BabyBear modulus. In versions 1.2.0, functions like InvF and InvE used...
Windows kernel DoS
The vulnerability of the Windows operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
VulnCheck KEV: CVE-2023-4320
An arithmetic overflow flaw was found in Satellite when creating a new personal access token. This flaw allows an attacker who uses this arithmetic overflow to create personal access tokens that are valid indefinitely, resulting in damage to the system's integrity...
SUSE: Security Advisory (SUSE-SU-2024:3524-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15: frr / frr-devel / libfrr0 / libfrr_pb0 / libfrrcares0 / etc (SUSE-SU-2024:3524-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3524-1 advisory. This update for frr fixes the following issue: - Arithmetic overflow when parsing attribute of update packet due to regression introduced by...
openSUSE: Security Advisory for frr (SUSE-SU-2024:3524-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for frr
This update for frr fixes the following issue: Arithmetic overflow when parsing attribute of update packet due to regression introduced by the fix for CVE-2017-15865. bsc1230866 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...
SUSE-SU-2024:3524-1 Security update for frr
This update for frr fixes the following issue: - Arithmetic overflow when parsing attribute of update packet due to regression introduced by the fix for CVE-2017-15865. bsc1230866...
NILFS Block Dirty Buffer DoS
The vulnerability of the blockdirtybuffer component in the NILFS file system of Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
kernel: crypto: bcm - Fix pointer arithmetic
In the Linux kernel, the following vulnerability has been resolved: crypto: bcm - Fix pointer arithmetic In spu2dumpomd value of ptr is increased by ciphkeylen instead of hashivlen which could lead to going beyond the buffer boundaries. Fix this bug by changing ciphkeylen to hashivlen. Found by...
HTMLDOC image_load_jpeg pointer arithmetic DoS
The vulnerability of the imageloadjpeg function in the image.cxx component of the HTMLDOC conversion tool is related to pointer dereferencing errors. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...
mruby:mruby_fuzzer: Segv on unknown address in mrb_bint_reduce
Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5825967505866752 Project: mruby Fuzzing Engine: libFuzzer Fuzz Target: mrubyfuzzer Job Type: libfuzzerasanmruby Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...
HDF5 Heap Buffer Overflow DoS
The vulnerability of the H5Tcompletecopy function in the H5T.c file of the HDF5 library is related to the invocation of an arithmetic exception. Exploiting this vulnerability may allow a malicious actor to cause service failure remotely...