CVE-2024-26720

Removed by vendor...

PT-2024-27219

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential overflow in the result of the multiplication of two lower precision u32 operands before widening it to higher precision u64 in the drm/xe/xe migrate...

CVE-2024-2606: Incorrect Type Conversion or Cast

Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into pointer values. This vulnerability affects Firefox 124...

openSUSE: Security Advisory for chromium (openSUSE-SU-2022:10073-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2021-46965

In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access Cast &data to char in order to avoid unintentionally accessing the stack. Notice that data is of type u32, so any increment to &data will be in the order of 4-byte...

DEBIAN-CVE-2021-46965

In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access Cast &data to char in order to avoid unintentionally accessing the stack. Notice that data is of type u32, so any increment to &data will be in the order of 4-byte...

UBUNTU-CVE-2021-46965

In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access Cast &data to char in order to avoid unintentionally accessing the stack. Notice that data is of type u32, so any increment to &data will be in the order of 4-byte...

CVE-2021-46965

In the Linux kernel, the following vulnerability has been resolved: mtd: physmap: physmap-bt1-rom: Fix unintentional stack access Cast &data to char in order to avoid unintentionally accessing the stack. Notice that data is of type u32, so any increment to &data will be in the order of 4-byte...

libreoffice:htmlfuzzer: Bad-cast to const SfxSetItem from XFillBitmapItem in implCreateItemEntry

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=5638759284539392 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: htmlfuzzer Job Type: libfuzzerubsanlibreoffice Platform Id: linux Crash Type: Bad-cast Crash Address:...

libprotobuf-mutator:libxml2_example: Bad-cast to xmlParserNsExtraxmlParserNsPush in xmlParseStartTag2

Project: https://github.com/google/libprotobuf-mutator.git Detailed Report: https://oss-fuzz.com/testcase?key=6186549981020160 Project: libprotobuf-mutator Fuzzing Engine: libFuzzer Fuzz Target: libxml2example Job Type: libfuzzerubsanlibprotobuf-mutator Platform Id: linux Crash Type: Bad-cast Cra...

PT-2025-3514

Name of the Vulnerable Software and Affected Versions openlink virtuoso-opensource version 7.2.11 Description The issue in the row insert cast component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations For openlink virtuoso-opensource version 7.2.11,...

pigweed:uart_transport_fuzzer: Bad-cast to pw::stream::Writer from pw::stream::NullStream in pw::stream::ReaderWriter::operator pw::stream::Writer&

Detailed Report: https://oss-fuzz.com/testcase?key=4832986650247168 Project: pigweed Fuzzing Engine: libFuzzer Fuzz Target: uarttransportfuzzer Job Type: libfuzzerubsanpigweed Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000002c9138 Crash State: Bad-cast to pw::stream::Writer from...

kernel: tipc: fix the msg->req tlv len check in tipc_nl_compat_name_table_dump_header

A flaw was found in the tipc module in the Linux kernel. An uninitialized value issue can be triggered due to a missing type cast when comparing the length of data with the size of an object. This issue can potentially cause system instability and result in a denial of service...

rdkit:mol_deserialization_fuzzer: Bad-cast to RDKit::ATOM_EQUALS_QUERY' (aka 'EqualityQuery<int, const RDKit::Atom *, true>') from Queries::XOrQuery<int, RDKit::Atom const*, true> in RDKit::QueryOps::finalizeQueryFromDescription

Project: https://github.com/rdkit/rdkit.git Detailed Report: https://oss-fuzz.com/testcase?key=6662640801546240 Project: rdkit Fuzzing Engine: libFuzzer Fuzz Target: moldeserializationfuzzer Job Type: libfuzzerubsanrdkit Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003312a00 Crash...

Fedora 39 : chromium (2023-0b39dc9302)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0b39dc9302 advisory. update to 118.0.5993.117. Security release for CVE-2023-5472 ---- Update to 118.0.5993.88 ---- Update to 118.0.5993.70. Include following security...

Updated chromium-browser-stable packages fix bugs and vulnerabilities

The chromium-browser-stable package has been updated to the 118.0.5993.70 release, fixing 20 bugs and vulnerabilities. Some of the security fixes are: Critical CVE-2023-5218: Use after free in Site Isolation. Reported by @18 on 2023-09-27 Medium CVE-2023-5487: Inappropriate implementation in...

Chromium: CVE-2023-5473 Use after free in Cast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

The vulnerability of the Cast component in the Google Chrome browser allows a hacker to compromise the rendering process.

The vulnerability of the Cast component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the rendering process through a specially created HTML page...

DEBIAN-CVE-2023-5473

Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Low...

CVE-2023-5473

Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Low...