go-dagpb 缓冲区错误漏洞

go-dagpb is an IPLD open source implementation of the DAG-PB Go specification. A security vulnerability exists in go-dagpb that stems from the fact that the dag-pb codec may crash when decoding an invalid block...

LZ4 缓冲区错误漏洞

LZ4 is a lossless compression algorithm. A security vulnerability exists in LZ4 that stems from the use of a C API that is vulnerable to memory corruption. An attacker can exploit the vulnerability to execute arbitrary code...

YDB 缓冲区错误漏洞

YDB is an open source distributed SQL database from YDB Platform Open Source. YDB has a security vulnerability that stems from the fact that an attacker can construct a query using an insert statement to achieve an out-of-bounds read resulting in reading sensitive information from other memory...

Design/Logic Flaw

When resolving a symlink such as file:///proc/self/fd/1, an error message may be produced where the symlink was resolved to a string containing unitialized memory in the buffer. This bug only affects Thunderbird on Unix-based operated systems Android, Linux, MacOS. Windows is unaffected.. This...

OpenImageIO 缓冲区错误漏洞

OpenImageIO is OpenImageIO open source an image processing library . With an easy-to-use interface and a large number of supported image formats. A buffer error vulnerability exists in the OpenImageIO master-branch-9aeece7a version, which stems from its parsing of the image file directory portion...

Fuji Electric Tellus Lite V-Simulator 缓冲区错误漏洞

Fuji Electric Tellus Lite V-Simulator is a remote monitoring software for industrial environments from Fuji Electric Japan. A buffer error vulnerability exists in Fuji Electric Tellus Lite V-Simulator version 4.0.12.0 and prior versions, which stems from vulnerability to out-of-bounds writes, whi...

Open vSwitch 缓冲区错误漏洞

Open vSwitch is an open source virtual switch. Open vSwitch suffers from a buffer error vulnerability that stems from allowing an attacker to implement out-of-bounds reads in its specific TLV...

Open vSwitch 缓冲区错误漏洞

Open vSwitch is an open source virtual switch. Open vSwitch suffers from a buffer error vulnerability that stems from allowing an attacker to achieve integer underflow in its specific TLV...

Autodesk Maya 缓冲区错误漏洞

Autodesk Maya is a three-dimensional computer graphics software from the American company Autodesk. It is widely used to create digital special effects for movies, television, commercials, computer games, and video games. Autodesk Maya 2023 suffers from a buffer error vulnerability that stems fro...

Autodesk Maya 缓冲区错误漏洞

Autodesk Maya is a three-dimensional computer graphics software from the American company Autodesk. It is widely used to create digital special effects for movies, television, commercials, computer games, and video games. Autodesk Maya 2023 suffers from a buffer error vulnerability that stems fro...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, Inc. in the United States. Google Pixel suffers from a security vulnerability that stems from incorrect boundary checking in fdtpathoffsetnamelen in fdtro.c. An out-of-bounds read may exist, which could lead to the disclosure of local information that...

X.Org X Server 缓冲区错误漏洞

X.Org X Server is an X Window System display server from the X.org Foundation. A buffer error vulnerability exists in X.Org X Server that originates when a handler for an XIPassiveUngrab request is invoked using high keycode or button code that accesses an out-of-bounds memory address potentially...

X.Org X Server 缓冲区错误漏洞

X.Org X Server is an X Window System display server from the X.org Foundation. X.Org X Server suffers from a buffer error vulnerability that stems from its XIChangeProperty request handler incorrectly validating the length leading to out-of-bounds memory reads and potential information disclosure...

X.Org X Server 缓冲区错误漏洞

X.Org X Server is an X Window System display server from the X.org Foundation. X.Org X Server suffers from a buffer error vulnerability that originates when an attacker sends GenericEvents greater than 32 bytes in length via an XTestFakeInput request, the exchange handler for the XTestFakeInput...

Apple iOS 和 macOS 缓冲区错误漏洞

Apple iOS and Apple macOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system developed for Mac computers. A buffer error vulnerability exists in Apple iOS and macOS. No information about this vulnerability is...

Apple iOS 缓冲区错误漏洞

Apple iOS is a set of operating systems developed for mobile devices by the American company Apple. A security vulnerability exists in Apple iOS and macOS. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's bulletin...

Hutool 缓冲区错误漏洞

Hutool is a small but comprehensive library of Java tools for the Chinese Dromara community. A security vulnerability exists in Hutool version v5.8.10, which stems from the inclusion of an out-of-memory error...

Apple iOS 缓冲区错误漏洞

Apple iOS is a set of operating systems developed for mobile devices by the American company Apple. A security vulnerability exists in Apple iOS and macOS. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's bulletin...

Apple iOS 缓冲区错误漏洞

Apple iOS is a set of operating systems developed for mobile devices by the American company Apple. A security vulnerability exists in Apple iOS and macOS. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the manufacturer's bulletin...

Apple iOS 和 macOS 缓冲区错误漏洞

Apple iOS and Apple macOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system developed for Mac computers. A buffer error vulnerability exists in Apple iOS and macOS. No information about this vulnerability is...