10253 matches found
tiff: Null source pointer passed as an argument to memcpy in TIFFFetchNormalTag() in tif_dirread.c
A flaw was found in LibTIFF where a NULL source pointer passed as an argument to the memcpy function within the TIFFFetchNormalTag in tifdirread.c. This flaw allows an attacker with a crafted TIFF file to cause a crash that leads to a denial of service...
kernel: ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock
In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Fix potential AB/BA lock with buffermutex and mmaplock syzbot caught a potential deadlock between the PCM runtime-buffermutex and the mm-mmaplock. It was brought by the recent fix to cover the racy read/write and other...
kernel: sched/fair: Fix fault in reweight_entity
In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix fault in reweightentity Syzbot found a GPF in reweightentity. This has been bisected to commit 4ef0c5c6b5ba "kernel/sched: Fix schedfork access an invalid schedtaskgroup" There is a race between schedpostfork and...
kernel: inet: fully convert sk->sk_rx_dst to RCU rules
A use-after-free vulnerability was found in the TCP IP protocol in the Linux Kernel, where a delete operation of the RCU-protected pointer is supposed to clear the pointer before the callrcu/synchronizercu guarding the actual memory freeing. This flaw allows a local attacker to crash the system o...
kernel: NFSv4: Fix free of uninitialized nfs4_label on referral lookup.
In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix free of uninitialized nfs4label on referral lookup. Send along the already-allocated fattr along with nfs4fslocations, and drop the memcpy of fattr. We end up growing two more allocations, but this fixes up a crash as:...
kernel: drm/amdkfd: NULL pointer dereference in kfd_parse_subtype_iolink()
An issue was discovered in the Linux kernel through 5.16-rc6. kfdparsesubtypeiolink in drivers/gpu/drm/amd/amdkfd/kfdcrat.c lacks check of the return value of kmemdup...
kernel: fanotify misuses fd_install() which could lead to use-after-free
A use-after-free flaw was found in the Linux kernel’s File System notify functionality in the way a user triggers the copyinforecordstouser function call to fail in copyeventtouser. This flaw allows a local user to crash or potentially escalate their privileges on the system...
PT-2022-17482 · Qualcomm · Snapdragon Consumer Iot +2
Name of the Vulnerable Software and Affected Versions: Snapdragon Consumer IOT affected versions not specified Snapdragon Industrial IOT affected versions not specified Snapdragon Voice & Music affected versions not specified Description: The issue is related to memory corruption in the modem due...
Qualcomm 芯片安全漏洞
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is often manufactured on the surface of semiconductor wafers. The Qualcomm chip has a security vulnerability that stems from a modem memory...
CVE-2022-43295
XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy at xpdf/Stream.cc:795...
CVE-2022-43295
XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy at xpdf/Stream.cc:795...
CVE-2022-43295
XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy at xpdf/Stream.cc:795...
UBUNTU-CVE-2022-43295
XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy at xpdf/Stream.cc:795...
Stack overflow
XPDF v4.04 was discovered to contain a stack overflow via the function FileStream::copy at xpdf/Stream.cc:795...
GSD-2022-1007043 NFSD: fix use-after-free on source server when doing inter-server copy
NFSD: fix use-after-free on source server when doing inter-server copy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...
GSD-2022-1006774 NFSD: fix use-after-free on source server when doing inter-server copy
NFSD: fix use-after-free on source server when doing inter-server copy This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit...
PT-2022-26836 · Xpdf +1 · Xpdf +1
Name of the Vulnerable Software and Affected Versions: XPDF version 4.04 Description: A stack overflow issue was discovered in the function FileStream::copy at xpdf/Stream.cc:795. This issue affects XPDF and can be exploited via the FileStream::copy function. Recommendations: For XPDF version 4.0...
PT-2022-35029 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to a use-after-free error on the source server when performing inter-server copy. This problem is noted in the context of NFSD. The actual impact and potential for attack...
XPDF 缓冲区错误漏洞
XPDF is an open source PDF reader from FOO Labs. The product supports decoding files in LZW compressed format and reading encrypted PDF files. XPDF v4.04 version of a security vulnerability , the vulnerability stems from the attacker can be achieved through its xpdf/Stream.cc component of the...
PT-2022-35237 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.76 Description: The issue is related to a potential security problem in the cifs copy file range function, which may lead to an xid leak. The actual impact and attack plausibility have not yet been proven...