CVE-2022-38999

The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability...

CVE-2022-38999

The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability...

CVE-2022-38999

The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability...

Design/Logic Flaw

The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability...

CVE-2022-38999

The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability...

CVE-2022-38999

The CVE-2022-38999 entry concerns Huawei HarmonyOS AOD module with an improper update of reference counts. The vulnerability allows potential impact to data integrity, confidentiality, and availability. Connected sources (Red Hat, NVD, CVE, CNNVD) reiterate the same root cause and impact, without...

GHSA-JV3G-J58F-9MQ9 JOSE vulnerable to resource exhaustion via specifically crafted JWE

The PBKDF2-based JWE key management algorithms expect a JOSE Header Parameter named p2c PBES2 Count, which determines how many PBKDF2 iterations must be executed in order to derive a CEK wrapping key. The purpose of this parameter is to intentionally slow down the key derivation function in order...

PT-2022-33531 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A reference count leak occurs on route deletion failure in the netdevsim fib. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2022-23116

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description The issue occurs when tensorflow::full type::SubstituteFromAttrs receives a...

PT-2022-24655

Name of the Vulnerable Software and Affected Versions AOD module affected versions not specified Description The AOD module has an improper update of reference count issue. Successful exploitation of this issue may affect data integrity, confidentiality, and availability. Recommendations At the...

PT-2022-33374 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: The issue is related to a module reference count leak in the rtnetlink rcv msg function. This problem was introduced in Linux Kernel version v5.19 and is fixed in version v5.19.4. The actual...

PT-2022-33423 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.4 Description: A reference count leak was discovered in the aa pivotroot function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-33589 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns the addition of more validity checks for inode counts in the ext2 file system. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

CVE-2022-38999: Undefined Security Weakness

The AOD module has the improper update of reference count vulnerability. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability...

PT-2022-24372 · Xpdf +1 · Xpdf +1

Name of the Vulnerable Software and Affected Versions: XPDF versions 4.04 and earlier Description: A stack overflow issue was discovered in the function Catalog::countPageTree at Catalog.cc. This issue affects XPDF and can be exploited via the Catalog::countPageTree function. Recommendations: For...

CVE-2022-2526

A use-after-free vulnerability was found in systemd. This issue occurs due to the onstreamio function and dnsstreamcomplete function in 'resolved-dns-stream.c' not incrementing the reference counting for the DnsStream object. Therefore, other functions and callbacks called can dereference the...

CVE-2022-36083 JOSE vulnerable to resource exhaustion via specifically crafted JWE

JOSE is "JSON Web Almost Everything" - JWA, JWS, JWE, JWT, JWK, JWKS with no dependencies using runtime's native crypto in Node.js, Browser, Cloudflare Workers, Electron, and Deno. The PBKDF2-based JWE key management algorithms expect a JOSE Header Parameter named p2c PBES2 Count, which determine...

Amazon Linux 2022 : bpftool, kernel, kernel-devel (ALAS2022-2022-083)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-083 advisory. A flaw was found in unrestricted eBPF usage by the BPFBTFLOAD, leading to a possible out-of-bounds memory write in the Linux kernel's BPF subsystem due to the way a user loads BTF. This flaw...

CVE-2022-25680: Buffer Copy without Checking Size of Input

Memory corruption in multimedia due to buffer overflow while processing count variable from client in Snapdragon Auto...

Qualcomm Multimedia security vulnerabilities

Qualcomm Multimedia is a camera driver component from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Multimedia that originates from a memory corruption in Multimedia due to a buffer overflow when processing count variables from a client...