GSD-2022-1001500 clk: qcom: clk-rcg2: Update logic to calculate D value for RCG

clk: qcom: clk-rcg2: Update logic to calculate D value for RCG This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

CVE-2021-32434

abcm2ps v8.14.11 was discovered to contain an out-of-bounds read in the function calculatebeam at draw.c...

PT-2022-10075

Name of the Vulnerable Software and Affected Versions abcm2ps version 8.14.11 Description The issue is related to an out-of-bounds read in the calculate beam function located at draw.c. Recommendations For abcm2ps version 8.14.11, at the moment, there is no information about a newer version that...

abcm2ps 缓冲区错误漏洞

abcm2ps is a command line program by Sammy S. Individual developer in the United States. It can convert music tunes from ABC music notation to PostScript or SVG. A security vulnerability exists in abcm2ps v8.14.11, which originates from an out-of-bounds read included in the function calculatebeam...

PT-2022-28883

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.16.5 Description The issue is related to the drm/amd/display component, specifically with the dcn301 calculate wm and dlg function. The actual impact and attack plausibility have not yet been proven...

GHSA-WM93-F238-7V37 Integer overflow in Tensorflow

Impact The implementation of OpLevelCostEstimator::CalculateOutputSize is vulnerable to an integer overflow if an attacker can create an operation which would involve tensors with large enough number of elements: cc for const auto& dim : outputshape.dim outputsize = dim.size; Here, we can have a...

PYSEC-2022-84

Tensorflow is an Open Source Machine Learning Framework. The implementation of OpLevelCostEstimator::CalculateTensorSize is vulnerable to an integer overflow if an attacker can create an operation which would involve a tensor with large enough number of elements. The fix will be included in...

PYSEC-2022-139

Tensorflow is an Open Source Machine Learning Framework. The implementation of OpLevelCostEstimator::CalculateTensorSize is vulnerable to an integer overflow if an attacker can create an operation which would involve a tensor with large enough number of elements. The fix will be included in...

PYSEC-2022-85

Tensorflow is an Open Source Machine Learning Framework. The implementation of OpLevelCostEstimator::CalculateOutputSize is vulnerable to an integer overflow if an attacker can create an operation which would involve tensors with large enough number of elements. We can have a large enough number ...

PT-2022-16093

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1 and earlier TensorFlow versions 2.6.3 and earlier TensorFlow versions 2.5.3 and earlier Description The implementation of OpLevelCostEstimator::CalculateOutputSize is vulnerable to a...

PT-2022-16092

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.8.0 TensorFlow versions 2.7.1 and earlier TensorFlow versions 2.6.3 and earlier TensorFlow versions 2.5.3 and earlier Description The implementation of OpLevelCostEstimator::CalculateTensorSize is vulnerable to a...

_calculateMaltRequiredForExit makes wrong calculations

Handle 0x0x0x Vulnerability details Proof of concept calculateMaltRequiredForExit calculates the quantity of malts returned. uint256 maltQuantity = userMaltPurchased.mulamount.divuserCommitment; uint256 fullReturn = maltQuantity.mulcurrentPrice / pegPrice; userMaltPurchased / userCommitment...

Google TensorFlow 缓冲区错误漏洞

Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to security flaws that could be exploited by attackers by sending specially crafted illegal parameters to "BoostedTreesSparseCalculateBestFeatureSplit" by sending specially crafted illegal...

PT-2021-19932

Name of the Vulnerable Software and Affected Versions woocommerce-gutenberg-products-block versions 2.5.0 through 2.5.15 Description An SQL injection issue affects WooCommerce sites running the WooCommerce Blocks feature plugin. This can be exploited via a carefully crafted URL against the...

OSV-2020-188 Heap-buffer-overflow in BEInt<short, 2>::operator short

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=20924 Crash type: Heap-buffer-overflow READ 2 Crash state: BEInt::operator short OT::IntType::operator int OT::TupleVarHeader::calculatescalar...

PT-2020-21874

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read issue is reported, with a crash type indicating a heap-buffer-overflow READ 2. The crash state involves several function calls,...

PT-2020-22027

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 2 crash has been reported. The crash involves the BEInt::operator short, OT::IntType::operator int, and...

PT-2020-21816

Name of the Vulnerable Software and Affected Versions OT affected versions not specified Description The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the OT::TupleVarHeader::calculate scalar function, which is called by OT::gvar::accelerator t::appl...

Threshold value is ignored (all shares are n=3)

Affected versions of this crate did not properly calculate secret shares requirements. This reduces the security of the algorithm by restricting the crate to always using a threshold value of three, rather than a configurable limit. The flaw was corrected by correctly configuring the threshold...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.6.0.25114. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...