Samsung Bixby 安全漏洞

Samsung Bixby Voice is an application from the South Korean company Samsung. It provides a voice recognition function. A security vulnerability exists in Bixby prior to version 3.0.53.02, which stems from mishandling of exceptions in Bixby prior to version 3.0.53.02, and can be exploited by an...

PT-2021-16571 · Samsung · Bixby

Name of the Vulnerable Software and Affected Versions: Bixby versions prior to 3.0.53.02 Description: The issue arises from improper handling of exceptional conditions, allowing an attacker to execute actions registered by the user. Recommendations: For versions prior to 3.0.53.02, update to...

OSV-2021-564 Uncaught exception in com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32514 Crash type: Uncaught exception Crash state: com.fasterxml.jackson.databind.deser.std.BaseNodeDeserializer.deserializeArray java.base/java.lang.Module.isStaticallyExportedOrOpen...

OSV-2021-552 Uncaught exception in java.base/java.lang.ClassLoader.defineClass0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32407 Crash type: Uncaught exception Crash state: java.base/java.lang.ClassLoader.defineClass0 java.base/java.lang.System$2.defineClass java.base/java.lang.invoke.MethodHandles$Lookup$ClassDefiner.defineClass...

The vulnerability of the Exiv2::ValueType function in the Exiv2 media file metadata management library allows a attacker to cause a service failure.

The vulnerability of the Exiv2::ValueType function in the Exiv2 metadata management library is related to incorrect exception handling. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2021-27568

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive...

The vulnerability of the Intel Graphics Drivers’ driver lies in a error handling issue related to exceptions, which allows attackers to trigger a service failure.

The vulnerability of the Intel Graphics Drivers driver is related to an exception handling error. Exploiting this vulnerability can allow a hacker to cause a service failure...

CVE-2021-20637

CVE-2021-20637 affects LOGITEC LAN-W300N/PR5B and is caused by improper check or handling of exceptional conditions. A remote attacker can trigger a denial-of-service by sending a specially crafted URL. Public details in connected sources confirm the vulnerability, its exposure over network acces...

openSUSE Security Update : gcc7 (openSUSE-2020-2301)

This update for gcc7 fixes the following issues : - CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue bsc1172798 - Enable fortran for the nvptx offload compiler. - Update README.First-for.SuSE.packagers - avoid assembler errors with AVX512 gather and scatter instruction...

openSUSE Security Update : gcc7 (openSUSE-2020-2300)

This update for gcc7 fixes the following issues : - CVE-2020-13844: Added mitigation for aarch64 Straight Line Speculation issue bsc1172798 - Enable fortran for the nvptx offload compiler. - Update README.First-for.SuSE.packagers - avoid assembler errors with AVX512 gather and scatter instruction...

Security update for gcc7 (moderate)

openSUSE Security Update: Security update for gcc7 Announcement ID: openSUSE-SU-2020:2300-1 Rating: moderate References: 1150164 1161913 1167939 1172798 1178577 1178614 1178624 1178675 Cross-References: CVE-2020-13844 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability a...

Security update for gcc7 (moderate)

openSUSE Security Update: Security update for gcc7 Announcement ID: openSUSE-SU-2020:2301-1 Rating: moderate References: 1150164 1161913 1167939 1172798 1178577 1178614 1178624 1178675 Cross-References: CVE-2020-13844 Affected Products: openSUSE Leap 15.2 An update that solves one vulnerability a...

Xstream Arbitrary File Deletion Vulnerability

XStream is a lightweight , easy to use open source Java class library of the XStream team , it is mainly used to serialize objects into XML JSON or deserialize objects . An arbitrary file deletion vulnerability exists in XStream. The vulnerability stems from an exception handling during...

XStream 操作系统命令注入漏洞

XStream is a lightweight , easy to use open source Java class library of the XStream team , it is mainly used to serialize objects into XML JSON or deserialize objects . An arbitrary file deletion vulnerability exists in XStream. The vulnerability stems from an exception handling during...

Misubishi Electric MELSEC iQ-F series Security Vulnerability

The Misubishi Electric MELSEC iQ-F series is a programmable logic controller from Misubishi Electric Japan. A security vulnerability exists in the MELSEC iQ-F series, which can be exploited by an attacker to cause a denial of service, due to improper checking or handling of an exception by the...

The vulnerability of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) system, related to an exception handling error, allows a violator to trigger a service failure.

The vulnerability of the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P system is related to an exception handling error. Exploiting this vulnerability could allow a malicious actor to trigger a service failure remotely...

CVE-2020-6019

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::ReceivedData, leading to an exception thrown from libprotobuf and resulting in a crash...

CVE-2020-6019

Valve's Game Networking Sockets/Steam Sockets before v1.2.0 contains a vulnerability in CConnectionTransportUDPBase::Received_Data() where inlined statistics messages trigger a libprotobuf exception, causing a crash. Affected component appears in both Steam server and client code paths per multip...

CVE-2020-5387

Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability. A local attacker with physical access could exploit this vulnerability to prevent the system from booting until the exploited boot device is removed...

PT-2020-18447 · Dell · Dell Xps 13 9370 Bios

Name of the Vulnerable Software and Affected Versions: Dell XPS 13 9370 BIOS versions prior to 1.13.1 Description: The issue is related to improper exception handling. A local attacker with physical access could exploit this to prevent the system from booting until the exploited boot device is...