PT-2017-2215

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to an Improper Validation of Array Index in the TrustZone component of the Android operating system. This could potentially allow a remote attacker to access information...

CVE-2014-9948: Improper Validation of Array Index

In TrustZone in all Android releases from CAF using the Linux kernel, an Improper Validation of Array Index vulnerability could potentially exist...

PT-2017-2726

Name of the Vulnerable Software and Affected Versions Android CAF-сборки affected versions not specified Qualcomm products with Android releases from CAF using the Linux kernel affected versions not specified Description The issue is caused by an out-of-bounds array index in the LPP process of th...

PT-2017-10537

Name of the Vulnerable Software and Affected Versions NVIDIA Windows GPU Display Driver affected versions not specified Description The issue is related to a vulnerability in the kernel mode layer handler for DxgkDdiEscape, where a value passed from a user to the driver is not correctly validated...

CVE-2017-0347: Improper Validation of Array Index

All versions of the NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape where a value passed from a user to the driver is not correctly validated and used as the index to an array, which may lead to denial of service or potenti...

Adobe Reader DC XFA Array Index Integer Underflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within XFA's...

CVE-2017-7228: Improper Validation of Array Index

An issue known as XSA-212 was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The earlier XSA-29 fix introduced an insufficient check on XENMEMexchange input, allowing the caller to drive hypervisor memory accesses outside of the guest provided input/output arra...

Aerospike Database Server RW Fabric Message Particle Type Code Execution Vulnerability

Summary An exploitable out-of-bounds indexing vulnerability exists within the RW fabric message particle type of Aerospike Database Server 3.10.0.3. A specially crafted packet can cause the server to fetch a function table outside the bounds of an array resulting in remote code execution. An...

CVE-2017-0322: Improper Validation of Array Index

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler where a value passed from a user to the driver is not correctly validated and used as the index to an array, leading to denial of service or potential escalation of privileges...

Code injection

Array index error in the msmsensorconfig function in kernel/SM-G9008VCHNKKOpensource/Kernel/drivers/media/platform/msm/camerav2/sensor/msmsensor.c in Samsung devices with Android KK4.4 or L and an APQ8084, MSM8974, or MSM8974pro chipset allows local users to have unspecified impact via the...

CVE-2016-4038

Array index error in the msmsensorconfig function in kernel/SM-G9008VCHNKKOpensource/Kernel/drivers/media/platform/msm/camerav2/sensor/msmsensor.c in Samsung devices with Android KK4.4 or L and an APQ8084, MSM8974, or MSM8974pro chipset allows local users to have unspecified impact via the...

CVE-2016-4038

Array index error in the msmsensorconfig function in kernel/SM-G9008VCHNKKOpensource/Kernel/drivers/media/platform/msm/camerav2/sensor/msmsensor.c in Samsung devices with Android KK4.4 or L and an APQ8084, MSM8974, or MSM8974pro chipset allows local users to have unspecified impact via the...

CVE-2016-4038

Array index error in the msmsensorconfig function in kernel/SM-G9008VCHNKKOpensource/Kernel/drivers/media/platform/msm/camerav2/sensor/msmsensor.c in Samsung devices with Android KK4.4 or L and an APQ8084, MSM8974, or MSM8974pro chipset allows local users to have unspecified impact via the...

CVE-2016-4038

The CVE-2016-4038 issue affects Samsung devices running Android KK (4.4) or L on APQ8084, MSM8974, or MSM8974pro, due to an array bounds issue in msm_sensor_config (kernel/drivers/media/platform/msm/camera_v2/sensor/msm_sensor.c). Local users could exploit gpio_config.gpio_name to cause unspecifi...

PT-2017-8447

Name of the Vulnerable Software and Affected Versions Samsung devices with Android KK4.4 or L and an APQ8084, MSM8974, or MSM8974pro chipset Description The issue is related to an array index error in the msm sensor config function. This error can be triggered by local users via the gpio...

CVE-2016-4038: Improper Input Validation

Array index error in the msmsensorconfig function in kernel/SM-G9008VCHNKKOpensource/Kernel/drivers/media/platform/msm/camerav2/sensor/msmsensor.c in Samsung devices with Android KK4.4 or L and an APQ8084, MSM8974, or MSM8974pro chipset allows local users to have unspecified impact via the...

CVE-2016-8815

All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape where a value passed from a user to the driver is used without validation as the index to an array, leading to denial of service or potential escalation of...

CVE-2016-9277: Integer Overflow or Wraparound

Integer overflow in SystemUI in KK4.4 and L5.0/5.1 on Samsung Note devices allows attackers to cause a denial of service UI restart via vectors involving APIs and an activity that computes an out-of-bounds array index, aka SVE-2016-6906...

CVE-2016-8810

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x100009a where a value passed from an user to the driver is used without...

CVE-2016-8808

For the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before 342.00 and R375 before 375.63 contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgDdiEscape ID 0x70000d5 where a value passed from an user to the driver is used without...