Asterisk buffer error vulnerability

Versions prior to Asterisk 20.20.1, from 21.0.0-pre1 up to versions prior to 21.12.3, from 22.0.0-pre1 up to versions prior to 22.10.1, from 23.0.0-pre1 up to versions prior to 23.4.1, as well as Certified Asterisk versions prior to 20.7-cert11 and from 22.8-cert1-pre1 up to 22.8-cert3, are...

Mozilla Firefox for iOS processing logic error vulnerability

Mozilla Firefox for iOS versions prior to 156.1 contain a logic error vulnerability. This vulnerability arises because malicious web pages can open tel links within windows displaying other websites, causing phone call notifications to appear as if they were initiated by those websites...

tildearrow Furnace input validation error vulnerability

Version 0.6.8.3 and earlier of tildearrow Furnace contain an input validation error vulnerability. This flaw arises from a lack of checks on sub-song indices within GROOVES blocks in DivEngine::loadFTM, resulting in out-of-bounds writes and heap memory corruption. An attacker can craft FamiTracke...

Open5GS buffer error vulnerability

Open5GS versions 1.3.0 through 2.8.0 contain a buffer error vulnerability. This vulnerability arises because parsemultipart performs heap-based out-of-bounds writes when a null multipart boundary is encountered. Unauthenticated attackers can exploit this by sending specially crafted...

Apple Safari resource management error vulnerability

A resource management error vulnerability exists in Apple Safari versions prior to 27.2, Apple iOS versions prior to 26.7.2 and 27.2, Apple iPadOS versions prior to 26.7.2 and 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple tvOS versions prior to 27.2, Apple visionOS versions prior to...

Apple iOS resource management error vulnerability

Apple iOS versions prior to 26.7 and 27, Apple iPadOS versions prior to 26.7 and 27, as well as Apple macOS Golden Gate 27, Apple macOS Sequoia 15.8, and Apple macOS Tahoe versions prior to 26.7.2 contain a resource management error vulnerability. This vulnerability stems from post-free reuse...

HashiCorp Consul input validation error vulnerability

Versions prior to HashiCorp Consul 2.1.0, as well as versions prior to HashiCorp Consul Enterprise 1.21.19 and 2.1.0, contain an input validation error vulnerability. This vulnerability stems from authorization bypass in service mesh proxy registration, potentially allowing users with write acces...

Oray Pugongying X5 Pro input validation error vulnerability

The Oray Pugongying X5 Pro version 7.6.1 contains an input validation error vulnerability. This vulnerability stems from improper handling of the regmsg parameter by the Ser2net component, potentially allowing CRLF injection. Attackers can exploit this flaw remotely...

Zephyr Project Zephyr resource management error vulnerability

In Zephyr Project versions from 2.3.0 up to but including 4.5.0, there is a resource management error vulnerability. This vulnerability arises because findpendingconnect only looks for pre-allocated connection objects based on identity and peer address, failing to determine the actual terminated...

Apple iOS buffer error vulnerability

Buffer error vulnerabilities exist in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple macOS Tahoe...

David Anderson libdwarf buffer error vulnerability

David Anderson: Libdwarf versions 2.3.3 and earlier contain a buffer error vulnerability. This vulnerability arises because the dwarfdebugaddrtable function omits the table’s starting offset when validating the length of the .debugaddr element, potentially leading to heap-based out-of-bounds read...

lxsmnsyc seroval resource management error vulnerability

In versions lxsmnsyc seroval from 1.4.1 up to but including 1.6.8, there is a resource management error vulnerability. This vulnerability arises because fromJSON and fromCrossJSON fail to require that the list of elements in array nodes be an actual array. A specially crafted payload can allow...

lxsmnsyc seroval input validation error vulnerability

Versions of lxsmnsyc seroval prior to 1.6.8 contain a security vulnerability. This vulnerability arises because fromJSON and fromCrossJSON fail to validate the done index of sequence nodes. A specially crafted done index can create an iterator that never completes its iteration. When...

OpenHands Software Agent SDK configuration error vulnerability

Versions prior to OpenHands Software Agent SDK 1.52.0 contain a configuration error vulnerability. This vulnerability arises because DockerWorkspace and Apptainer workspace starters bind the sandbox proxy server to all network interfaces, and since sessionapikeys is set to an empty value,...

GStreamer processing logic error vulnerability

Versions of GStreamer Editing Services prior to 1.28.8 contain a logic error vulnerability. This vulnerability arises because GES project files can embed arbitrary GStreamer pipeline descriptions as effect definitions. During loading, there is no restriction on the elements and attributes that ca...

Apple iOS buffer error vulnerability

Buffer error vulnerabilities exist in Apple iOS versions prior to 26.7.2, iOS versions prior to 27.2, iPadOS versions prior to 26.7.2, iPadOS versions prior to 27.2, and Apple visionOS versions prior to 27.2. These vulnerabilities stem from improper boundary checks and may lead to out-of-bounds...

Apple iOS input validation error vulnerability

A input validation error vulnerability exists in Apple iOS versions prior to 26.7.2, Apple iPadOS versions prior to 26.7.2, Apple iOS versions prior to 27.2, Apple iPadOS versions prior to 27.2, Apple macOS Golden Gate versions prior to 27.2, Apple macOS Sequoia versions prior to 15.8.2, Apple...

Christian Garbs gbsplay buffer error vulnerability

Versions 0.0.103 and earlier of Christian Garbs’ gbsplay contain a buffer error vulnerability. This vulnerability stems from the gbropen function in gbs.c failing to validate file length prior to scanning the GBR ROM title field. As a result, it may lead to heap-based out-of-bounds reads. Attacke...

FastStone Image Viewer buffer error vulnerability

FastStone Image Viewer versions 8.5 and earlier contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds read issue in the FUN0062d96c function within the Box-Average Downsampler Engine component, allowing remote attackers to exploit it...

Mattermost resource management error vulnerability

Versions 11.9.1 and earlier of Mattermost, as well as versions 11.8.5 and earlier, 11.7.10 and earlier, and 11.10.1 and earlier are affected by a resource management error vulnerability. This vulnerability arises because the WebSocket msgpack decoder fails to enforce allocation limits on byte...