The vulnerability of the Ghostscript software for document processing lies in the fact that operations are performed outside the buffer in memory. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Ghostscript document processing software lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the QEMU hardware emulation software, related to the issue of writing operations beyond the buffer boundaries in memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the QEMU hardware emulation software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the diFree function (fs/jfs/inode.c) in the Journaled File System (JFS) of the Linux operating system allows a attacker to disclose protected information or cause service failures.

The vulnerability of the diFree function fs/jfs/inode.c in the Journaled File System JFS of the Linux operating system is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

The vulnerability of the software used to create 3D computer graphics in Blender, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the software used to create three-dimensional computer graphics in Blender is related to the lack of checks for values less than 0. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Geth client library of the Ethereum programming language GO in Go Ethereum allows a hacker to trigger a service failure.

The vulnerability of the Geth client library for the Ethereum protocol, written in the Go programming language, is related to the occurrence of interpretation conflicts. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Samba networking communication package, related to pointer arithmetic errors, allows a hacker to trigger a service failure.

The vulnerability of the Samba networking communication package is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the decode_data function in the drivers/net/hamradio/6pack.c component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the decodedata function in the drivers/net/hamradio/6pack.c component of the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service...

CVE-2022-35981

TensorFlow is an open source platform for machine learning. FractionalMaxPoolGrad validates its inputs with CHECK failures instead of with returning errors. If it gets incorrectly sized inputs, the CHECK failure can be used to trigger a denial of service attack. We have patched the issue in GitHu...

CVE-2022-35952 `CHECK` failures in `UnbatchGradOp` in TensorFlow

TensorFlow is an open source platform for machine learning. The UnbatchGradOp function takes an argument id that is assumed to be a scalar. A nonscalar id can trigger a CHECK failure and crash the program. It also requires its argument batchindex to contain three times the number of elements as...

The vulnerability of the shell command line interface in IPython’s interactive computing environment allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the shell command line interface for interactive IPython computations is related to access control errors. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the FreeRDP remote desktop protocol lies in the ability to write beyond the buffer boundaries, allowing attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the FreeRDP remote desktop protocol lies in the ability to write beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the set_var.cc component of the MariaDB database, which allows a hacker to cause service failures.

The vulnerability of the setvar.cc component of the MariaDB database system is related to errors during resource release. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the MariaDB database, related to pointer assignment errors, allows attackers to cause service failures.

The vulnerability of the MariaDB database lies in pointer assignment errors. Exploiting this vulnerability allows an attacker to cause service failures...

The vulnerability of the `cgroup1_parse_param` function in the kernel/cgroup/cgroup-v1.c file of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the cgroup1parseparam function in the kernel/cgroup/cgroup-v1.c file of the Linux operating system is related to the lack of checks to ensure that the source parameter is indeed a string. Exploiting this vulnerability could allow an attacker to access confidential data,...

The vulnerability of the host shell adapter am53c974 in the SCSI emulator hardware support of QEMU allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the am53c974 host shell adapter in the SCSI emulator and hardware support provided by QEMU relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the FreeRDP remote desktop protocol lies in the ability to write beyond the buffer boundaries, allowing attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the FreeRDP remote desktop protocol lies in the ability to write beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of Ruby programming language date parsing methods, related to uncontrolled resource consumption, allows attackers to cause service failures.

The vulnerability of Ruby programming language date parsing methods is related to an uncontrolled consumption of resources. Exploiting this vulnerability allows a malicious actor to cause service failures...

The vulnerability of the FUSE file system in Linux kernel allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the FUSE file system in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of QEMU’s emulation of USB devices allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of QEMU’s emulation of hardware devices involves an incorrect pointer being freed. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Language Server Protocol plugin for the text editor Kate allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Language Server Protocol plugin for the text editor Kate is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...