The vulnerability of the libbfd library in the GNU Binutils development environment, related to reading beyond the buffer boundaries in memory, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the libbfd library in the GNU Binutils development environment, within the Debian GNU operating system, relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of PDF-XChange Editor’s document viewing and editing software lies in the possibility of an operation going beyond the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PT-2023-5294

Name of the Vulnerable Software and Affected Versions GCC versions prior to the fixed version Description A failure in the -fstack-protector feature in GCC-based toolchains that target AArch64 allows an attacker to exploit an existing buffer overflow in dynamically-sized local variables in an...

protobuf-java: timeout in parser leads to DoS

A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted...

python-cryptography: memory corruption via immutable objects

A vulnerability was found in python-cryptography. In affected versions, Cipher.updateinto would accept Python objects which implement the buffer protocol but provide only immutable buffers. This issue allows immutable objects such as bytes to be mutated, thus violating the fundamental rules of...

Huawei EulerOS: Security Advisory for python-cryptography (EulerOS-SA-2023-2664)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the NFC microprogramming software services provided by the microcircuits S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82 allows a perpetrator to trigger a restart of the NFC service.

The vulnerability of the NFC microprogramming software services provided by the microcircuits S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to...

python-cryptography: memory corruption via immutable objects

A vulnerability was found in python-cryptography. In affected versions, Cipher.updateinto would accept Python objects which implement the buffer protocol but provide only immutable buffers. This issue allows immutable objects such as bytes to be mutated, thus violating the fundamental rules of...

CVE-2023-32004

A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of Buffers in file system APIs causing a traversal path to bypass when verifying file permissions. This vulnerability affects all users using th...

CVE-2023-32004

A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of Buffers in file system APIs causing a traversal path to bypass when verifying file permissions. This vulnerability affects all users using th...

CVE-2023-32004

A vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of Buffers in file system APIs causing a traversal path to bypass when verifying file permissions. This vulnerability affects all users using th...

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome’s Chrome browser relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially crafted HTML page...

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. The Qualcomm Chipsets suffer from a security vulnerability that stems from the fact that buffers obtained from kernel APIs such as cammemgetcpubuf may be readable/writable in user space after kernel access...

AMD μProf Security Vulnerability

AMD μProf is a software analysis tool from Ultra Micro Semiconductor AMD. A security vulnerability exists in AMD μProf that stems from insufficient validation of the IOCTL input buffer, which allows an attacker to send arbitrary buffers resulting in a Denial of Service DoS...

PT-2023-21825 · Qualcomm · Snapdragon +29

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue involves kernel APIs, such as cam mem get cpu buf, where a buffer may remain readable and writable in userspace after being accessed by the kernel. This can lead to a race...

CVE-2020-8648 - use-after-free vulnerability

There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the nttyreceivebufcommon function in drivers/tty/ntty.c...

The vulnerability in the StorageManager manager of Mozilla Firefox, Firefox ESR, and Thunderbird email client allows a hacker to bypass security restrictions and cause a service failure.

The vulnerability of the StorageManager manager for Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to bypass security restrictions and cause service...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a lack of boundary checking in the camera middleware module, which may result in out-of-bounds writes...

PT-2023-36243 · Oracle · Mysql Connector/J

Name of the Vulnerable Software and Affected Versions: mysql-connector-java versions prior to 8.0.25 Description: The mysql-connector-java has several bugs and vulnerabilities that have been fixed in version 8.0.25. These include issues with authentication, data type handling, and connection...

The vulnerability in the kernel of operating systems such as macOS Big Sur, macOS Monterey, iOS, iPadOS, tvOS, macOS Ventura, and watchOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the kernel of operating systems such as macOS Big Sur, macOS Monterey, iOS, iPadOS, tvOS, macOS Ventura, and watchOS relates to operations that occur outside of the buffers in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...