Microsoft Windows Local Security Authority Subsystem Service 缓冲区错误漏洞

The Microsoft Windows Local Security Authority Subsystem Service is an internal Microsoft program that runs Windows system security policies. It authenticates users when they log on to a computer standalone or server, manages user password changes, and generates access characters. It also leaves...

Microsoft Windows Common Log File System Driver 缓冲区错误漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A buff...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a buffer error vulnerability that stems from the fact that when inserting text in edit mode, certain characters may result in out-of-bounds memory access, leading to a cras...

Microsoft Windows Remote Desktop Protocol缓冲区错误漏洞

Microsoft Windows Remote Desktop Protocol RDP is a Microsoft application for connecting to remote Windows desktops. A buffer error vulnerability exists in Microsoft Windows Remote Desktop Protocol. The following products and versions are affected:Windows 10 Version 1809 for 32-bit Systems,Windows...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a buffer error vulnerability that stems from a lack of proper authentication before executing a user-supplied eBPF program. An attacker could...

libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. libde265 is vulnerable to an access control error, and no detailed vulnerability details are currently available...

libde265 缓冲区错误漏洞

Libde265 is a German h.265 video codec. libde265 is vulnerable to an access control error, which can be exploited by attackers to cause segmentation errors and application crashes, resulting in a remote denial of service...

Samsung SMR 缓冲区错误漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung mobile applications. Samsung SMR suffers from a buffer error vulnerability that stems from a lack of input validation prior to TIMA trustlet memory copying, allowing an attacker to...

Binaryen 缓冲区错误漏洞

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C. A denial-of-service vulnerability exists in Binaryen 103, which stems from the fact that the product ends when it receives a SIGKILL signal. No detailed vulnerability details are available at this time...

Huawei HarmonyOS 缓冲区错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS 2.0 Bone Voice TA. Successful exploitation of this vulnerability could result in compromised...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android that could be exploited by attackers to remotely elevate privileges without additional executive privileges...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a company owned by MediaTek of China. A buffer error vulnerability exists in the MediaTek chips, which originates in the vow driver, where memory corruption is possible due to incorrect input validation...

Dhrystone 代码问题漏洞

dhrystone is a comprehensive benchmark program for system integer programming from the personal developer Reinhold P. Weicker. dhrystone suffers from a buffer error vulnerability stemming from a null pointer dereference in the main function dhry1.c of dhrystone 2.1, which could be exploited by an...

HarfBuzz 缓冲区错误漏洞

HarfBuzz is a text engine for OpenType fonts. A security vulnerability exists in HarfBuzz 2.9.0, which stems from an out-of-bounds write in hbbitsetinvertiblet::set...

Wasm 缓冲区错误漏洞

wasm3 is the fastest WebAssembly interpreter, as well as the most versatile runtime. A security vulnerability exists in Wasm3 0.5.0 that stems from an out-of-bounds write called from EvaluateExpression and InitDataSegments in the runtime version...

Dnsmasq 缓冲区错误漏洞

dnsmasq is a lightweight DNS forwarding and DHCP, TFTP server written in C. Dnsmasq 2.86 suffers from a buffer error vulnerability that stems from having a heap-based buffer overflow in resizepacket called from FuzzResizePacket and fuzzrfc1035.c...

Wolfssl 缓冲区错误漏洞

Wolfssl CyaSSL is a small, portable embedded SSL programming library for use by embedded systems developers from Wolfssl, USA. A buffer error vulnerability exists in Wolfssl wolfMQTT, which stems from a call to MqttClientDecodePacket from the product's MqttClientHandlePacket and MqttClientWaitTyp...

libvips 缓冲区错误漏洞

libvips is an open source 2D image processing library. A buffer error vulnerability exists in libvips 8.11 through 8.11.2, which stems from an out-of-bounds write in jxl::ModularFrameDecoder::DecodeGroup...

Rust 缓冲区错误漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A buffer error vulnerability exists in Rust nix crate versions prior to 0.20.2,0.21.2 prior to 0.21.x, and 0.22.2 prior to 0.22.x, which stems from an out-of-bounds write to Unistd::getgrouplist...

MediaTek 芯片缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Corporation Mediatek. The MediaTek chips contain a security vulnerability that arises from the mishandling of the IEEE 1905 protocol by MediaTek microchips used in NETGEAR devices and other devices...