Blink Web Page Display Mechanism Bypass

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass existing security restrictions...

CVE-2023-20775

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07978760; Issue ID: ALPS07363410...

Race condition

In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671046; Issue ID: ALPS07671046...

Some MediaTek chips have buffer error vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some MediaTek chips, which stems from a possible out-of-bounds write in display due to a lack of boundary checking, resulting in local privilege escalation. The following products a...

Some MediaTek chips have buffer error vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some MediaTek chips, which stems from a possible out-of-bounds read in display due to a lack of boundary checking, resulting in local privilege escalation. The following products ar...

Some MediaTek chips have buffer error vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some of the MediaTek chips, which stems from a possible read out-of-bounds situation in the display due to a lack of boundary checking, leading to local information disclosure...

PT-2023-17634 · Mediatek +1 · Mt6789 +1

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with...

Linux MSM DRM Kernel Heap Buffer Overflow DoS

The vulnerability of the dpucrtcatomiccheck function in the drivers/gpu/drm/msm/disp/dpu1/dpucrtc.c file of the Linux operating system’s MSM DRM kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Liferay Portal and Liferay DXP cross-site scripting vulnerabilities

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...

CVE-2022-32625

In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326216; Issue ID: ALPS07326216...

Out-of-bounds

In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326239; Issue ID: ALPS07326239...

Out-of-bounds

In display, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07326216; Issue ID: ALPS07326216...

MediaTek chip buffer error vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips, which stems from an incorrect boundary check found in display, which may allow out-of-bounds writes...

qt5-qtsvg security update

An update for qt5-qtsvg is now available for Rocky Linux 8. Rocky Enterprise Software Foundation Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Blink Web Page Disclosure

The vulnerability of the Blink web page display mechanism in Microsoft Edge and Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Oracle Email Center Message Display Unauthorized Access

The vulnerability of the Message Display component of the Oracle Email Center messaging software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or to have read, add, or...

CVE-2020-10614

In OSIsoft PI System multiple products and versions, an authenticated remote attacker with write access to PI Vision databases could inject code into a display. Unauthorized information disclosure, deletion, or modification is possible if a victim views the infected display...

Qualcomm MSM8909W and QCS605 Resource Management Error Vulnerability

The Qualcomm QCS605 and Qualcomm MSM8909W are both central processing unit CPU products from Qualcomm Incorporated. A resource management error vulnerability exists in Display in the Qualcomm MSM8909W and QCS605. The vulnerability arises from improper management of system resources e.g., memory,...

CVE-2019-15034

hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe extended config space...

QEMU hardware emulation software Heap Buffer Overflow DoS

The vulnerability of functions mode4and5 in the QEMU hardware emulation software hw/display/cirrusvga.c is related to writing beyond the memory buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a system failure...