Qualcomm 芯片缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits including primarily semiconductor devices, but also passive components, etc., and from time to time fabricated on the surface of semiconductor wafers. A buffer error vulnerability exists in several qualcomm...

ptp4l 缓冲区错误漏洞

ptp4l is an implementation of IEEE Standard 1588 for Linux for the Precision Time Protocol PTP. A buffer error vulnerability exists in ptp4l, which stems from a lack of length checking when forwarding PTP messages between ports, and can lead to information leakage, crashes, or potentially remote...

Huawei HarmonyOS 缓冲区错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS Phones and Tablets A buffer error vulnerability exists in some Huawei products. The vulnerability, when successfully exploited, may lead to...

HTSlib 缓冲区错误漏洞

HTSlib is a library file for the C language. A buffer error vulnerability exists in HTSlib versions 1.10 through 1.10.2, which stems from the program allowing out-of-bounds write access to the vcf parsing format...

Archlinux libtpms 缓冲区错误漏洞

Archlinux libtpms is an Archlinux open source application. A library that provides software emulation of Trusted Platform Modules TPM 1.2 and TPM 2.0. A buffer error vulnerability exists in Archlinux libtpms that stems from a boundary condition. A local user can trigger an out-of-range read error...

Delta Electronics Industrial Automation DOPSoft 缓冲区错误漏洞

Delta Electronics DOPSoft is a human-machine interface HMI software from Delta Electronics, Taiwan, China.A buffer error vulnerability exists in Delta Electronics DOPSoft, which stems from the fact that the affected product is vulnerable to out-of-bounds reads and can be exploited by attackers to...

UnRAR 缓冲区错误漏洞

UnRAR is a command that decompresses files with a rar extension. A buffer error vulnerability exists in UnRAR, which originates in QuickOpen::ReadRaw of QuickOpen::ReadNext, which can be called to trigger an out-of-bounds write operation that can be used by an attacker to execute malicious code...

Delta Electronics Industrial Automation DOPSoft 缓冲区错误漏洞

Delta Electronics Industrial Automation DOPSoft is a set of human machine interface HMI software from Delta Electronics Taiwan, China. A buffer error vulnerability exists in Delta Electronics Industrial Automation DOPSoft that stems from the affected product's susceptibility to out-of-bounds read...

uWebSockets 缓冲区错误漏洞

uWebSockets is a highly extensible library of the lightest and most efficient WebSocket servers. It features an easy-to-use, fully asynchronous object-oriented interface and scales to millions of connections using a fraction of the memory compared to other competing products. uWebSockets versions...

libavif 缓冲区错误漏洞

libavif is a library for encoding and decoding .avif files. libavif suffers from a security vulnerability that stems from libavif 0.8.0 and 0.8.1 having an out-of-bounds write in the avifDecoderDataFillImageGrid. no details of the vulnerability are currently available...

华为智能手机缓冲区错误漏洞

Huawei phones are smartphones from Huawei, a Chinese company. A buffer error vulnerability exists in multiple Huawei smartphones, which stems from a memory buffer being restricted for improper operation. The vulnerability can be exploited by an attacker to cause code execution. The following...

华为智能手机缓冲区错误漏洞

Huawei Emui is a mobile operating system developed on Android. Magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI are vulnerable to a resource management error, which stems from a memory buffer being restricted for improper operation. An attacker could exploit th...

JTEKT TOYOPUC-Plus 缓冲区错误漏洞

JTEKT TOYOPUC-Plus is a PLC from JTEKT Japan. The JTEKT TOYOPUC-Plus suffers from a buffer error vulnerability that originates when the product receives an invalid frame, the outer region of the FL-net receive buffer will be overwritten. This causes the PLC CPU to detect a system error and the...

Phoenix Contact Classic Automation Worx Software Suite 缓冲区错误漏洞

Phoenix Contact Classic Automation is a division of Phoenix Contac Phoenix Contact, a German company that provides surplus parts and Phoenix Contact repair services. A security vulnerability exists in Software Suite 1.87 and prior versions, which stems from a vulnerability that can be exploited b...

Dell BIOSConnect feature 缓冲区错误漏洞

Dell BIOSConnect is an underlying platform from Dell USA that enables BIOS to connect to Dell's HTTP backend and load images via HTTP methods. A buffer error vulnerability exists in the Dell BIOSConnect feature that can be exploited by an attacker to run arbitrary code and bypass UEFI restriction...

winproladder 缓冲区错误漏洞

FATEK Automation WinProladder is a PLC from FATEK Automation in China. PLC WinProladder 3.30 suffers from a buffer error vulnerability that originates from a boundary error when processing untrustworthy input. A remote attacker can exploit this vulnerability to create a specially crafted file tha...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from Autodesk, Inc. Autodesk AutoCAD suffers from a buffer error vulnerability that stems from an arbitrary address write issue in the Autodesk DWG application. The vulnerability could allow a malicious attacker to exploit the...

winproladder 缓冲区错误漏洞

FATEK Automation WinProladder is a PLC from FATEK Automation in China. PLC WinProladder 3.30 suffers from a buffer error vulnerability that stems from an out-of-bounds read error. A remote attacker can exploit the vulnerability by creating a specially crafted file, tricking the victim into openin...

winproladder 缓冲区错误漏洞

FATEK Automation WinProladder is a PLC from FATEK Automation in China. A buffer error vulnerability exists in PLC WinProladder 3.30, which stems from the affected product not properly limiting operations within the range of the memory buffer. A remote attacker could exploit the vulnerability coul...

Autodesk Design Review 缓冲区错误漏洞

Autodesk Design Review ADR is a suite of AutoCAD drafting software assist software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a buffer error vulnerability that could be...