CVE-2023-21649 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Memory corruption in WLAN while running doDriverCmd for an unspecific command...

rngComplete() function is vulnerable to an array out of bounds error

Lines of code Vulnerability details Impact A malicious actor can manipulate the AuctionResult passed to RewardLib.rewards to make it return a short rewards array Proof of Concept The issue is that there is no check that i stays within the bounds of rewards. If rewards is shorter than expected, th...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the ril module, which may result in out-of-bounds writes...

AlmaLinux 8 : ruby:2.6 (ALSA-2021:2588)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:2588 advisory. rubygem-bundler: Insecure permissions on directory in /tmp/ allows for execution of malicious code CVE-2019-3881 ruby: NUL injection vulnerability of...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a possible lack of privilege checking in the Contacts Service module...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the nvram module, which may result in out-of-bounds writes...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking in the hcp module, which may result in out-of-bounds writes...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a possible lack of privilege checking in the ims service module...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a lack of boundary checking in the keyinstall module, which may result in out-of-bounds writes...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a possible lack of privilege checking in the Contacts Service module...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking in the OPTEE module, which may result in out-of-bounds writes...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisoc Corporation. A security vulnerability exists in UNISOC Chipsets due to a possible lack of privilege checking in the Contacts service module...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking in the apu module, which may result in memory corruption...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisoc Corporation. A security vulnerability exists in UNISOC Chipsets due to a possible lack of privilege checking in the Contacts service module...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking in the imgsys module, which may result in out-of-bounds writes...

Code Injection

Firefox is vulnerable to Code Injection. The vulnerability exists due to the type checking bug in the library, which allows an attacker to inject execute malicious code...

Google Chrome Buffer Overflow Vulnerability (CNVD-2023-63466)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a buffer overflow vulnerability that is caused by incorrect boundary checking by Visuals. An attacker can exploit this vulnerability to cause the buffer to overflow and execute arbitrary code on the system...

OPENSUSE-SU-2023:0206-1 Security update for amanda

This update for amanda fixes the following issues: - CVE-2023-30577: Fixed improper argument checking for runtar.c boo1213701,...

OPENSUSE-SU-2023:0205-1 Security update for amanda

This update for amanda fixes the following issues: - CVE-2023-30577: Fixed improper argument checking for runtar.c boo1213701...

CVE-2023-3346 Denial of Service (DoS) and Remote Code Execution Vulnerability in MITSUBISHI CNC Series

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service DoS condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is...