CVE-2022-20048

CVE-2022-20048 affects MediaTek video decoder with a missing bounds check causing an out-of-bounds write and local privilege escalation without user interaction. MTK’s advisory (ALPS05917502) notes the patch, and other sources (NVD, Red Hat, CNVD, CVE listings) corroborate the description. The av...

Privilege Escalation

kernel is vulnerable to privilege escalation. The vulnerability exists due to an out of bounds write due to a missing bounds check...

MGASA-2022-0085 Updated flac packages fix security vulnerability

In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. CVE-2021-0561...

PUB-A-205036834

In ProtocolStkProactiveCommandAdapter::Init of protocolstkadapter.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-206472503

In TBD of TBD, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

FreeBSD : flac -- fix encoder bug (5e1440c6-95af-11ec-b320-f8b156b6dcc8)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5e1440c6-95af-11ec-b320-f8b156b6dcc8 advisory. - In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a...

Fedora 35 : flac (2022-db30f1bd42)

The remote Fedora 35 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-db30f1bd42 advisory. Security fix for CVE-2021-0561 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus ha...

CVE-2022-0546

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution...

UBUNTU-CVE-2022-0546

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution...

Out-of-bounds

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution...

CVE-2022-0546

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution...

CVE-2022-0546

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution...

CVE-2021-0561

An out-of-bounds write vulnerability was found in libFlak. The vulnerability occurs due to a missing bounds check. This flaw allows a local attacker without additional execution privileges to cause local information disclosure...

Oracle Linux 7 : kernel (ELSA-2022-0620)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-0620 advisory. - drm/vmwgfx: Fix stale file descriptors on failed usercopy Dave Airlie 2047597 CVE-2022-22942 - fix regression in 'epoll: Keep a reference on files...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current flac Multiple Vulnerabilities (SSA:2022-052-01)

The version of flac installed on the remote host is prior to 1.3.4. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-052-01 advisory. - In FLACbitreaderreadricesignedblock of bitreader.c, there is a possible out of bounds read due to a heap buffer overflow. Thi...

PT-2022-1368 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.10 Description: The issue is related to the USB Gadget subsystem in the Linux kernel, which lacks certain validation of interface OS descriptor requests. This can lead to memory corruption. The vulnerabilit...

Huawei EulerOS: Security Advisory for hivex (EulerOS-SA-2022-1068)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.0 : hivex (EulerOS-SA-2022-1068)

According to the versions of the hivex packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivexopen...

CVE-2021-39664

CVE-2021-39664 concerns Android 12, rooted in the loader for APK resources: In LoadedPackage::Load of LoadedArsc.cpp, a missing bounds check can cause an out-of-bounds read. The documented impact is local information disclosure when parsing APK files, with no additional execution privileges requi...

SUSE: Security Advisory (SUSE-SU-2022:0362-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...