CVE-2020-11174: Improper Validation of Array Index

u'Array index underflow issue in adsp driver due to improper check of channel id before used as array index.' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables,...

PT-2020-12586

Name of the Vulnerable Software and Affected Versions Snapdragon Auto versions Agatti through SM8250 Snapdragon Compute versions APQ8009 through SDX55 Snapdragon Connectivity versions IPQ4019 through QCS605 Snapdragon Consumer IOT versions QCA6390 through SA8155P Snapdragon Industrial IOT version...

CVE-2020-3673: Improper Validation of Array Index

u'Buffer overflow can happen as part of SIP message packet processing while storing values in array due to lack of check to validate the index length' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon...

freerdp: Unchecked read of array offset in rdpsnd_recv_wave2_pdu

In FreeRDP less than or equal to 2.0.0, an outside controlled array index is used unchecked for data used as configuration for sound backend alsa, oss, pulse, .... The most likely outcome is a crash of the client instance followed by no or distorted sound or a session disconnect. If a user cannot...

CVE-2020-25793: Improper Validation of Array Index

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with From...

CVE-2020-25791: Improper Validation of Array Index

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with unit...

CVE-2020-25792: Improper Validation of Array Index

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, the array size is not checked when constructed with pair...

CVE-2020-11881

An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated remote attacker to crash the SMB server via modified setup-request packets, aka SUP-12964...

Design/Logic Flaw

An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated remote attacker to crash the SMB server via modified setup-request packets, aka SUP-12964...

CVE-2020-11881

CVE-2020-11881 affects MikroTik RouterOS SMB service. An array-index error in RouterOS 6.41.3–6.46.5 and 7.x–7.0 Beta5 allows an unauthenticated remote attacker to crash the SMB server via crafted setup-request packets (SUP-12964). The vulnerability enables at least a DoS condition on the SMB ser...

CVE-2020-11881

An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated remote attacker to crash the SMB server via modified setup-request packets, aka SUP-12964...

PT-2020-12915

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions 6.41.3 through 6.46.5 MikroTik RouterOS versions 7.x through 7.0 Beta5 Description The issue is related to an array index error that can be exploited by an unauthenticated remote attacker to crash the SMB server. Thi...

CVE-2020-11881: Improper Validation of Array Index

An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated remote attacker to crash the SMB server via modified setup-request packets, aka SUP-12964...

OPENSUSE-SU-2020:1382-1 Security update for the Linux Kernel

The openSUSE Leap 15.2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-14314: Fixed potential negative array index in dosplit in ext4 bsc1173798. - CVE-2020-14386: Fixed an overflow in afpacket, which could lead to local privilege...

CVE-2019-10629: Improper Validation of Array Index

u'User Process can potentially corrupt kernel virtual page by passing a crafted page in API' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2019-10527: Improper Validation of Array Index

u'SMEM partition can be manipulated in case of any compromise on HLOS, thus resulting in access to memory outside of SMEM address range which could lead to memory corruption' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon...

OPENSUSE-SU-2020:1325-1 Security update for the Linux Kernel

The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-3639: Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are...

CVE-2020-17398: Improper Validation of Array Index

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17394: Improper Validation of Array Index

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...

CVE-2020-17401: Improper Validation of Array Index

This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...