2120 matches found
Siemens SIMATIC Devices Improper Input Validation (CVE-2024-38579)
crypto: bcm - Fix pointer arithmetic In spu2dumpomd value of ptr is increased by ciphkeylen instead of hashivlen which could lead to going beyond the buffer boundaries. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Linux sw_mode_config Heap Buffer Overflow DoS
The vulnerability of the swmodeconfig function in the Linux operating system’s kernel is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2022-50580
CVE-2022-50580 affects the Linux kernel’s blk-throttle code. A risk existed that in tg_with_in_bps_limit() the expression bps_limit * jiffy_elapsed_rnd could overflow. The fix substitutes a safe multiplication/division helper, calling mul_u64_u64_div_u64() to prevent overflow. Several sources (in...
GHSA-H5J3-CRG5-8JQM orx-pinned-vec has undefined behavior in index_of_ptr with empty slices
The safe function indexofptr causes undefined behavior when called with an empty slice. The issue occurs in the line ptr.addslice.len - 1 which underflows when slice.len is 0, creating a pointer with a massive offset. According to Rust's safety rules, creating such a pointer causes immediate...
Undefined behavior in index_of_ptr with empty slices
The safe function indexofptr causes undefined behavior when called with an empty slice. The issue occurs in the line ptr.addslice.len - 1 which underflows when slice.len is 0, creating a pointer with a massive offset. According to Rust's safety rules, creating such a pointer causes immediate...
CLSA-2025-1760982550 Fix CVE(s): CVE-2022-48174
SECURITYUPDATE: avoid segfault on $0::0/009J - debian/patches/CVE-2022-48174.patch: Fix shell segfault in malformed arithmetic expressions - CVE-2022-48174...
CVE-2025-62492: Out-of-bounds Read
A vulnerability stemming from floating-point arithmetic precision errors exists in the QuickJS engine's implementation of TypedArray.prototype.indexOf when a negative fromIndex argument is supplied. The fromIndex argument read as a double variable, $d$ is used to calculate the starting position f...
USN-7823-1 ffmpeg vulnerabilities
It was discovered that FFmpeg did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 24.04 LTS. CVE-2024-35365 It was discovered that FFmpeg did not correctly handle...
Linux drivers media platform coda-bit Heap Buffer Overflow DoS
The vulnerability in the drivers/media/platform/chips-media/coda-bit.c module of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux fs/dlm/lock.c send_args() Heap Buffer Overflow
The vulnerability of the sendargs function in the fs/dlm/lock.c module of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Xen Kernel DoS
The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
Xen Kernel DoS
The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
Xen Kernel DoS
The vulnerability of the cross-platform hypervisor Xen in Linux operating systems is related to a pointer arithmetic error. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...
CVE-2023-53661
In the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow in bnxtgetnvramdirectory The value of an arithmetic expression is subject of possible overflow due to a failure to cast operands to a larger data type before performing arithmetic. Used macro for multiplicati...
EUVD-2016-1575
Malware in sbrugna...
EUVD-2007-4656
Malware in sbrugna...
EUVD-2010-4540
Malware in sbrugna...
EUVD-2020-7347
Malware in sbrugna...