Mozilla: Symlinks may resolve to partially uninitialized buffers

The Mozilla Foundation Security Advisory describes this flaw as: When resolving a symlink such as file:///proc/self/fd/1, an error message may be produced where the symlink was resolved to a string containing unitialized memory in the buffer...

Mozilla: Symlinks may resolve to partially uninitialized buffers

The Mozilla Foundation Security Advisory describes this flaw as: When resolving a symlink such as file:///proc/self/fd/1, an error message may be produced where the symlink was resolved to a string containing unitialized memory in the buffer...

Google TensorFlow 缓冲区错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. A buffer error vulnerability exists in Google TensorFlow versions prior to 2.8.4, 2.9.0 and later, and prior to 2.9.3, which stems from a lack of validation of user-supplied data in the...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, a U.S. company. Google Android has a security vulnerability that stems from incorrect input validation and a possible method of corrupting memory. No details of the vulnerability are currently available...

FreeRDP 缓冲区错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP by the FreeRDP team. FreeRDP suffers from a buffer error vulnerability that stems from a lack of input length validation in the "urbdrc" channel...

FreeRDP 缓冲区错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP by the FreeRDP team. FreeRDP suffers from a buffer error vulnerability that stems from a lack of input length validation in the "drive" channel...

FreeRDP 缓冲区错误漏洞

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP by the FreeRDP team. FreeRDP suffers from a buffer error vulnerability. An attacker exploiting this vulnerability could read confidential data...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S. Mozila Firefox has a security vulnerability that could be exploited by attackers to execute arbitrary code...

grub2 缓冲区错误漏洞

grub2 is a Linux system boot program from the American GNU community. grub2 suffers from a buffer error vulnerability that stems from its font code presenting certain unicode sequences when it fails to properly validate the width and height of a font. These values are further used to access the...

PHOENIX CONTACT AUTOMATIONWORX Software Suite 缓冲区错误漏洞

PHOENIX CONTACT AUTOMATIONWORX Software Suite is a comprehensive collection of optimally coordinated software tools for automation systems from PHOENIX CONTACT, Germany. It includes PC Worx, PC Worx EXPRESS, DIAG+, DIAG+NETSCAN, CONFIG+, VISU+, WEBVISIT, AX OPC SERVER. A buffer error vulnerabilit...

Silicon Labs Gecko SDK 缓冲区错误漏洞

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A buffer error vulnerability exists in the Silicon Labs Gecko SDK that stems from improper manipulation ...

Intel XMM 缓冲区错误漏洞

Intel XMM is a family of 4G LTE, LTE Advanced, LTE Advanced Pro and 5G modems from Intel Corporation USA. A security vulnerability exists in previous versions of Intel XMM 7560 Modem software M27560R01.2146.00, which stems from an out-of-bounds write in the modem software that could allow an...

Wasmtime 缓冲区错误漏洞

Wasmtime, a Bytecode Consortium project, is a standalone wasm-optimized runtime for WebAssembly and WASI only. A security vulnerability exists in versions of Wasmtime prior to 2.0.2, which stems from out-of-bounds reads and writes in its zero-memory page configuration...

Wasmtime 缓冲区错误漏洞

Wasmtime, a Bytecode Consortium project, is a standalone wasm optimization runtime for WebAssembly and WASI only. A buffer error vulnerability exists in Wasmtime versions prior to 2.0.2, which stems from an out-of-bounds write to its wasmtimetrapcode C API function...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel. An attacker exploits this vulnerability to trigger a denial of service via l2capparseconfreq resulting in a fatal error...

Cisco Firepower Threat Defense 缓冲区错误漏洞

Cisco Firepower Threat Defense FTD is a suite of unified software from Cisco that provides next-generation firewall services. A buffer error vulnerability exists in Cisco Firepower Threat Defense FTD Software, which stems from a memory processing error in its Generic Routing Encapsulation GRE...

Cisco Firepower Threat Defense和Cisco Adaptive Security Appliances Software 缓冲区错误漏洞

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliance are both products of Cisco Corporation.Cisco Firepower Threat Defense is a suite of unified software that provides next-generation firewall services. Cisco Adaptive Security Appliance is a network appliance. It is used to...

Cisco Adaptive Security Appliance Software和Firepower Threat Defense（FTD）Software 缓冲区错误漏洞

Cisco ASA and Cisco Adaptive Security Appliance are both products of Cisco Cisco.Cisco ASA is a series of firewalls applied to enterprise security.Cisco Adaptive Security Appliance is a network appliance. Cisco Adaptive Security Appliance is a network appliance used to protect corporate networks...

WAGO 缓冲区错误漏洞

WAGO is a 750-88x series programmable logic controller from WAGO, Germany. The device is specifically designed for use in industrial environments as an electronic system for the operation of digital algorithms. A buffer error vulnerability exists in the WAGO I/O-Check Service, which originates fr...

AMD Radeon 缓冲区错误漏洞

AMD Radeon is a device driver and utility package for Advanced Micro Devices graphics cards and GPUs from UltraMicro Semiconductor AMD. A security vulnerability exists in AMD Radeon that stems from an insufficient validation of missing size checks in LoadModule, which could lead to out-of-bounds...