The vulnerability of embedded software developed by Qualcomm, related to deficiencies in the use of the assert() function, allows attackers to trigger a service failure.

The vulnerability of embedded software developed for Qualcomm chips lies in the improper implementation of the channel bandwidth division mechanism and the switching between subbands when performing Beam Switching. This occurs due to the use of the assert function. Exploiting this vulnerability c...

NULL Pointer Dereference

xen is vulnerable to NULL Pointer Dereference. The vulnerability is due to the incorrect assumption in C Xenstored that the quota cannot be negative. This leads to a crash when accounting temporarily goes negative, as assert checks fail when tools are built with default settings, which do not...

The vulnerability of the DNS BIND server, related to the lack of use of the assert() function, allows a hacker to trigger a service failure.

The vulnerability of the DNS BIND server is related to the lack of use of the assert function. Exploiting this vulnerability allows a remote attacker to cause service failures...

Buffer Overflow

libzephyr.so is vulnerable to Buffer Overflow. The vulnerability occurs due to a ineffective assert check within the STM32 Crypto Driver component which then leads to an application crash...

The vulnerability of embedded software developed by Qualcomm, related to the lack of use of the assert() function, allows a malicious actor to cause service failures.

The vulnerability of embedded software developed for Qualcomm chips lies in the lack of utilization of the assert function. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Xen: A transaction conflict can crash C Xenstored (XSA-440)

When a transaction is committed, C Xenstored will first check the quota is correct before attempting to commit any nodes. It would be possible that accounting is temporarily negative if a node has been removed outside of the transaction. Unfortunately, some versions of C Xenstored are assuming th...

PT-2023-5953 · Qualcomm · Qualcomm Embedded Platform

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform affected versions not specified Description: The issue is related to a transient Denial of Service DOS in the modem when triggering a camping on a 5G cell. It is also associated with a software vulnerability in...

The vulnerability of the DoT protocol’s implementation in BIND DNS servers allows a attacker to induce a service failure.

The vulnerability of the DoT protocol DNS over TLS implementation in BIND DNS servers lies in the insufficient use of the assert function or similar operators when processing requests. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the PDFDoc::replacePageDict function (PDFDoc.cc) in the Poppler PDF rendering library allows a attacker to trigger a service failure.

The vulnerability of the PDFDoc::replacePageDict function in the Poppler PDF rendering library is related to the insufficient use of the assert function. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability in the Object::getString component of the Poppler PDF rendering library allows a attacker to cause a service failure.

The vulnerability of the Object::getString component in the Poppler PDF rendering library is related to the insufficient use of the assert function. Exploiting this vulnerability may allow an attacker to cause a service failure...

The vulnerability of the item_cmpfunc.h component of the MariaDB database management system allows a hacker to trigger a segmentation fault.

The vulnerability of the itemcmpfunc.h component in the MariaDB database management system is related to the insufficient use of the assert function. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the Fast DDS library lies in the use of the assert() function or similar operators, which allow attackers to cause a service failure.

The vulnerability of the Fast DDS library lies in the use of the assert function or similar operators. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Fast DDS library lies in the use of the assert() function or similar operators, which allow attackers to cause a service failure.

The vulnerability of the Fast DDS library lies in the use of the assert function or similar operators. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability of Google’s gRPC remote procedure call system allows a attacker to trigger a service failure.

The vulnerability of the Google gRPC process callouts is related to the lack of use of the assert function. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

The vulnerability of the Demon Routing Protocol Daemon (rpd) in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems allows a attacker to cause a service failure.

The vulnerability of the Demon Routing Protocol Daemon rpd in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to the use of the assert function or similar operators. Exploiting this vulnerability can allow attackers to cause service interruptions...

ASB-A-275041864

In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Huawei EulerOS: Security Advisory for binutils (EulerOS-SA-2023-2054)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the `peek_for_as4_capability` function in the software for implementing network routing on Unix-like systems allows a hacker to cause a service failure.

The vulnerability of the peekforas4capability function in the software for implementing network routing on Unix-like systems is related to deficiencies in the use of the assert function. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability in the stb_image.h component of the SIXEL Libsixel encoder/decoder library for C/C++ Libstb allows a attacker to cause a service failure.

The vulnerability of the stbimage.h component in the SIXEL Libsixel encoder/decoder library for C/C++ Libstb is related to the insufficient use of the assert function. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the DNS BIND server, related to the lack of use of the assert() function, allows a hacker to trigger a service failure.

The vulnerability of the BIND DNS server relates to the processing of the Write Directive DS. BIND waits for this processing to complete, or until the timeout interval expires. As a result, the resumedslookup function is called, but it does not check whether the previous selection has been...