3363 matches found
Apple iOS 和 iPadOS 缓冲区错误漏洞
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS and iPadOS, where an application can execute arbitrary code with kernel...
Corel Parallels Desktop 缓冲区错误漏洞
Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Corel Canada. A buffer error vulnerability exists in Corel Parallels Desktop version 17.1.1 51537, which stems from a vulnerability that allows a local attacker to elevate privileges on an affected Parallel...
IrfanView 缓冲区错误漏洞
IrfanView is an image viewer by the individual developer Irfan Skiljan from Bosnia and Herzegovina, which supports image browsing, image editing, image format conversion and more. A security vulnerability exists in IrfanView version 4.54. No information about this vulnerability is available at th...
EIPStackGroup OpENer 缓冲区错误漏洞
EIPStackGroup OpENer is a software from the EIPStackGroup organization for providing EtherNet/IP stacking functionality to IO adapter devices . A buffer error vulnerability exists in EIPStackGroup OpENer version v2.3.0, which stems from the discovery of a stack overflow contained via...
Adobe Acrobat和Adobe Reader 缓冲区错误漏洞
Adobe Acrobat and Adobe Reader are both products of the U.S. company Audobee Adobe.Adobe Acrobat is a set of PDF file editing and conversion tools.Adobe Reader is a set of PDF document reading software. 20.005.30331 - 20.005.30334, 22.001.20142, 2017.008.30051 - 2017.012.30229, 2020.001.30002 -...
xorg-x11-server 缓冲区错误漏洞
xorg-x11-server is an X Window System display server from the X.org Foundation. A buffer error vulnerability exists in xorg-x11-server, which exists as a result of a boundary error in the ProcXkbSetDeviceInfo request handler of the Xkb extension, which allows a local user to trigger an...
Microsoft Windows 缓冲区错误漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A buffer error vulnerability exists in the Microsoft Windows Client/Server Runtime Subsystem. The following products and editions are affected:Windows 10 Version 1809 for 32-bit Systems,Windo...
Microsoft Windows 缓冲区错误漏洞
Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. A buffer error vulnerability exists in the Microsoft Windows Client/Server Runtime Subsystem. The following products and editions are affected:Windows 10 Version 1809 for x64-based...
Trend Micro Security 缓冲区错误漏洞
Trend Micro Security Consumer is an antivirus software from Trend Micro, Inc. A buffer error vulnerability exists in Trend Micro Security 2021 and 2022 Consumer that originates from a boundary condition. A local user can trigger an out-of-bounds read error and read the contents of memory on the...
Qualcomm 芯片缓冲区错误漏洞
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from a buffer error vulnerability that...
UNISOC chipset 缓冲区错误漏洞
UNISOC chipset is an integrated circuit chipset from China's Zilight Spreadtrum UNISOC. A buffer error vulnerability exists in the UNISOC chipset. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...
Google Android 缓冲区错误漏洞
Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which stems from incorrect input validation in CCCI, and can be exploited by an attacker to obtain local information. mt6771, mt6779, mt6781, mt6785, mt6833, mt6853, mt6873...
MediaTek 芯片 缓冲区错误漏洞
MediaTek chips are various chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in MediaTek's WLAN driver, which stems from a lack of boundary checking, leading to out-of-bounds writes. An attacker could exploit the vulnerability to escalate privileges...
Google Android 缓冲区错误漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from a buffer error vulnerability that originates from incorrect input validation in the CCCI, which can be exploited by an attacker to escalate local privileges, and the following products and versio...
UNISOC chipset 缓冲区错误漏洞
UNISOC chipset is an integrated circuit chipset from China's Zilight Spreadtrum UNISOC. A buffer error vulnerability exists in the UNISOC chipset. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...
UltraJSON 资源管理错误漏洞
UltraJSON is an open source, ultra-fast JSON encoder and decoder written in pure C and bundled with Python 3.7+. A resource management error vulnerability exists in versions of UltraJSON prior to 5.4.0, which stems from an error when reallocating a buffer for string decoding, which could cause th...
Fortinet FortiManager 缓冲区错误漏洞
Fortinet FortiManager is a centralized network security management platform from Fortinet. The platform supports centralized management of any number of Fortinet devices, and the ability to group devices into different management domains ADOM to further simplify multi-device security deployment a...
Fortinet FortiProxy 缓冲区错误漏洞
Fortinet FortiProxy is a secure network proxy from Fortinet that protects employees from cyberattacks by combining multiple detection technologies such as Web filtering, DNS filtering, DLP, anti-virus, intrusion prevention, and advanced threat protection.FortiProxy helps reduce bandwidth...
PT-2022-20540
Name of the Vulnerable Software and Affected Versions UltraJSON versions prior to 5.4.0 Description The issue occurs when an error happens while reallocating a buffer for string decoding, causing the buffer to get freed twice. Due to how UltraJSON uses the internal decoder, this double free is...