CVE-2019-9730

CVE-2019-9730 concerns the Synaptics (formerly Conexant) Audio driver. Affected component is the CxUtilSvc/CxUtilSrv.exe within the Sound Device Driver, where an incorrect access control allows a local user to escalate privileges to the Windows Registry via an unpublished API. Impact: local privi...

Nvidia Fixes High-Severity Flaws in GeForce Experience for Gamers

Nvidia, which makes gaming-friendly graphics processing units GPUs, has patched two high-severity flaws in its GeForce Experience software, which could allow denial of service, information disclosure and privilege escalation on impacted systems. GeForce Experience is software for gamers utilizing...

CVE-2019-12456

CVE-2019-12456 : A local double-fetch vulnerability in the Linux kernel, affecting the MPT3COMMAND path of _ctl_ioctl_main in drivers/scsi/mpt3sas/mpt3sas_ctl.c. The issue arises from reading ioc_number between two kernel reads, allowing a local attacker to trigger a denial of service or potentia...

CVE-2019-12455

CVE-2019-12455 affects the Linux kernel code path sunxi_divs_clk_setup in sunxi/clk-sunxi.c (through 5.1.5). The issue is an unchecked kstrndup of derived_name, which could lead to a NULL pointer dereference and system crash (DoS). A vendor/field note in the description mentions the problem is di...

[SECURITY] Fedora 29 Update: c3p0-0.9.5.4-1.fc29

c3p0 is an easy-to-use library for augmenting traditional JDBC drivers with JNDI-bindable DataSources, including DataSources that implement Connection and Statement Pooling, as described by the jdbc3 spec and jdbc2 standard extension...

[SECURITY] Fedora 30 Update: c3p0-0.9.5.4-1.fc30

c3p0 is an easy-to-use library for augmenting traditional JDBC drivers with JNDI-bindable DataSources, including DataSources that implement Connection and Statement Pooling, as described by the jdbc3 spec and jdbc2 standard extension...

Memory corruption

DISPUTED An issue was discovered in coninsertunipair in drivers/tty/vt/consolemap.c in the Linux kernel through 5.1.5. There is a memory leak in a certain case of an ENOMEM outcome of kmalloc. NOTE: This id is disputed as not being an issue...

CVE-2019-12379

The connected Nessus UNPATCHED_CVE_2019_12379 entry confirms CVE-2019-12379 affects Linux kernel code path con_insert_unipair in drivers/tty/vt/consolemap.c (up to kernel 5.1.5) with a memory leak in an ENOMEM/kmalloc scenario. The description explicitly notes this issue is disputed as an actual ...

Denial Of Service (DoS)

firefox/thunderbird is vulnerable to denial of service. The bufferdata function in WebGL is vulnerable to a buffer overflow with specific graphics drivers on Linux. This could result in malicious content freezing a tab or triggering a potentially exploitable crash...

The vulnerability of the igdkm64.sys driver, a graphics system driver for Intel Graphics Drivers, allows a hacker to cause a service failure.

The vulnerability of the igdkm64.sys driver for Intel Graphics Drivers is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Intel Graphics Drivers Competitive Conditions Issue Vulnerability

IntelR Graphics Driver is a graphics card driver from Intel. A Competing Conditions Issue vulnerability exists in IntelR Graphics Drivers versions prior to 10.18.14.5067 and prior to 10.18.10.5069. The vulnerability stems from improper handling of concurrent access when concurrent code requires...

Intel Graphics Drivers Buffer Overflow Vulnerability

IntelR Graphics Driver is a graphics card driver from Intel. A security vulnerability exists in IntelR Graphics Drivers versions prior to 10.18.14.5067 and prior to 10.18.10.5069, which stems from a program that does not perform sufficient boundary checks. An attacker could use this vulnerability...

CVE-2019-0114

A race condition in IntelR Graphics Drivers before version 10.18.14.5067 aka 15.36.x.5067 and 10.18.10.5069 aka 15.33.x.5069 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0114

A race condition in IntelR Graphics Drivers before version 10.18.14.5067 aka 15.36.x.5067 and 10.18.10.5069 aka 15.33.x.5069 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0113

Insufficient bounds checking in IntelR Graphics Drivers before version 10.18.14.5067 aka 15.36.x.5067 and 10.18.10.5069 aka 15.33.x.5069 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0113

Insufficient bounds checking in IntelR Graphics Drivers before version 10.18.14.5067 aka 15.36.x.5067 and 10.18.10.5069 aka 15.33.x.5069 may allow an authenticated user to potentially enable a denial of service via local access...

Out-of-bounds

Insufficient bounds checking in IntelR Graphics Drivers before version 10.18.14.5067 aka 15.36.x.5067 and 10.18.10.5069 aka 15.33.x.5069 may allow an authenticated user to potentially enable a denial of service via local access...

Race condition

A race condition in IntelR Graphics Drivers before version 10.18.14.5067 aka 15.36.x.5067 and 10.18.10.5069 aka 15.33.x.5069 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0114

A race condition in IntelR Graphics Drivers before version 10.18.14.5067 aka 15.36.x.5067 and 10.18.10.5069 aka 15.33.x.5069 may allow an authenticated user to potentially enable a denial of service via local access...

CVE-2019-0114

Intel Graphics Driver for Windows contains a race condition (CVE-2019-0114) in specific pre-10.18.14.5067 and pre-10.18.10.5069 driver versions that may allow an authenticated local user to trigger a denial of service. Affected products include Intel graphics drivers for Windows; root cause is a ...