AMD System Management Unit (SMU) buffer error vulnerability

The AMD System Management Unit SMU is a system management unit at UltraMicroelectronics AMD. A security vulnerability exists in the AMD System Management Unit SMU that stems from insufficient bind checking and could allow an attacker to update the sender/receiver address space to an invalid value...

CVE-2021-26409

Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table RMP memory, potentially resulting in a loss of SNP Secure Nested Paging memory integrity...

CVE-2021-26409

CVE-2021-26409 affects AMD SEV-ES, where insufficient bounds checking can corrupt the Reverse Map (RMP) memory, potentially compromising SNP memory integrity. Public references identify AMD SEV-ES-related memory integrity risk; mitigation guidance is distributed via AMD’s PSU/AGS updates (AMD-SB-...

CVE-2021-26404

Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure...

CVE-2021-26404

Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure...

CVE-2021-26404

CVE-2021-26404 affects AMD SEV firmware; root cause is improper input validation and bounds checking that may leak scratch buffer bytes, potentially leading to information disclosure. Documents indicate mitigations via AMD’s BIOS updates (AMD-SB-1032) with platform-specific versions (e.g., MilanP...

CVE-2021-26402

CVE-2021-26402 describes insufficient bounds checking in the AMD Secure Processor (ASP) firmware during BIOS mailbox handling, enabling an attacker to write partially controlled data out-of-bounds into SMM or SEV-ES regions and potentially compromise integrity and availability. The issue is discu...

CVE-2021-26402

Insufficient bounds checking in ASP AMD Secure Processor firmware while handling BIOS mailbox commands, may allow an attacker to write partially-controlled data out-of-bounds to SMM or SEV-ES regions which may lead to a potential loss of integrity and availability...

Authentication flaw

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive...

CVE-2021-26409: Buffer Copy without Checking Size of Input

Insufficient bounds checking in SEV-ES may allow an attacker to corrupt Reverse Map table RMP memory, potentially resulting in a loss of SNP Secure Nested Paging memory integrity...

PT-2023-1485 · Amd · Amd Secure Encrypted Virtualization (Sev) Firmware

Name of the Vulnerable Software and Affected Versions: AMD Secure Encrypted Virtualization SEV firmware affected versions not specified Description: The issue is related to improper input validation and bounds checking in the SEV firmware, which may cause a buffer overflow in memory. This could...

CVE-2021-26404: Improper Input Validation

Improper input validation and bounds checking in SEV firmware may leak scratch buffer bytes leading to potential information disclosure...

TRENDnet TEW-755AP Stack Overflow Vulnerability

The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that stems from a lack of size checking of input data in the reboottype parameter of the wizardipv6 sub41C380 function, which can be exploited by an attacker to execute arbitrary...

UNISOC chipset security vulnerabilities

The UNISOC chipset is an integrated circuit chipset from China's Zilight Zhanrui UNISOC. A security vulnerability exists in the UNISOC chipset that stems from a lack of privilege checking in the music service, which could lead to a local denial of service in the contact service without additional...

Google Android OS and unisoc devices have vulnerabilities related to buffer errors.

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in some Google Android OS and unisoc products, which stems from a lack of bounds checking in the wlan driver, leading to a local denial of service...

Google Android OS and unisoc products have security vulnerabilities

Google Android is a set of Linux-based open source operating system by the American company Google Google. A security vulnerability exists in some Google Android OS and unisoc products, which stems from a lack of permission checking in the messaging service, leading to a local denial of service...

TRENDnet TEW-755AP stack overflow vulnerability (CNVD-2023-18940)

The TRENDnet TEW-755AP is a router from TRENDnet. The TRENDnet TEW-755AP suffers from a stack overflow vulnerability that stems from the lack of size checking of input data in the comeo.comeo.netstatrsname parameter of the toolsnetstat sub41E730 function, which can be exploited by an attacker to...

Google Android OS and unisoc devices have vulnerabilities related to buffer errors.

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in some Google Android OS and unisoc products, which stems from a lack of bounds checking in the wlan driver, leading to a local denial of service...

Google Android OS and unisoc devices have vulnerabilities related to buffer errors.

Google Android is a Linux-based open source operating system from the American company Google. A security vulnerability exists in some Google Android OS and unisoc products, which stems from a lack of bounds checking in the wlan driver, leading to a local denial of service...

Tenda A15 wepkey3 parameter stack overflow vulnerability

Tenda A15 is a WiFi extender from Tenda, China. A stack overflow vulnerability exists in the Tenda A15 wepkey3 parameter, which stems from a lack of length checking of input data in the wepkey3 parameter of /goform/WifiBasicSet, and could be exploited to execute arbitrary code on the system...