9827 matches found
CVE-2019-3405
In the 3.1.3.64296 and lower version of 360F5, the third party can trigger the device to send a deauth frame by constructing and sending a specific illegal 802.11 Null Data Frame, which will cause other wireless terminals connected to disconnect from the wireless, so as to attack the router...
CVE-2019-3405
In the 3.1.3.64296 and lower version of 360F5, the third party can trigger the device to send a deauth frame by constructing and sending a specific illegal 802.11 Null Data Frame, which will cause other wireless terminals connected to disconnect from the wireless, so as to attack the router...
PT-2021-9105
Name of the Vulnerable Software and Affected Versions 360F5 versions 3.1.3.64296 and lower Description The issue allows a third party to trigger the device to send a deauth frame by constructing and sending a specific illegal 802.11 Null Data Frame, causing other wireless terminals connected to...
CVE-2019-3405: Undefined Security Weakness
In the 3.1.3.64296 and lower version of 360F5, the third party can trigger the device to send a deauth frame by constructing and sending a specific illegal 802.11 Null Data Frame, which will cause other wireless terminals connected to disconnect from the wireless, so as to attack the router...
360 F5 Input Validation Error Vulnerability
The 360 F5 is a smartphone device from the Chinese company 360. The 360F5 3.1.3.64296 and lower suffers from an Input Authentication Error vulnerability that stems from a specific illegal 802.11 Null Data Frame, which causes other wireless terminals to disconnect from the wireless connection in...
c-blosc2:decompress_frame_fuzzer: Heap-buffer-overflow in ZSTD_createDDict_advanced
Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5538084976459776 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompressframefuzzer Job Type: libfuzzerasanc-blosc2 Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...
`Frame::copy_from_raw_parts` can lead to segfault without `unsafe`
fn Frame::copyfromrawparts is a safe API that can take a raw pointer and dereference it. It is possible to read arbitrary memory address with an arbitrarily fed pointer. This allows the safe API to access & read arbitrary address in memory. Feeding an invalid memory address pointer to the API may...
PT-2021-28016
Name of the Vulnerable Software and Affected Versions blosc2 affected versions not specified Description The issue is related to a crash caused by an unknown read. Technical details about the crash include the functions frame get metalayers, blosc2 frame to schunk, and blosc2 schunk open sframe...
PT-2021-28023
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves functions such as blosc getitem, get coffset, and frame get lazychunk. No...
PT-2021-16835
Name of the Vulnerable Software and Affected Versions av-data crate versions prior to 0.3.0 Description An issue in the av-data crate allows a raw pointer to be dereferenced, leading to a read of an arbitrary memory address. This can sometimes cause a segfault. The fn Frame::copy from raw parts...
c-blosc2:decompress_frame_fuzzer: Segv on unknown address in frame_get_lazychunk
Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=5156125253173248 Project: c-blosc2 Fuzzing Engine: afl Fuzz Target: decompressframefuzzer Job Type: aflasanc-blosc2 Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...
DEBIAN-CVE-2020-35965
decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...
UBUNTU-CVE-2020-35965
decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...
CVE-2020-35965
decodeframe in libavcodec/exr.c in FFmpeg 4.3.1 has an out-of-bounds write because of errors in calculations of when to perform memset zero operations...
Qualcomm Wlan Firmware Buffer Error Vulnerability
Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A buffer error vulnerability exists in Qualcomm WLAN Firmware, which arises from a lack of checking of body and header lengths during WLAN frame parsing, which could result in out-of-bounds reads. The following...
Vidyo Clickjacking Vulnerability
Vidyo is a software used to support video conferencing from Vidyo, Inc. in the United States. A clickjacking vulnerability exists in Vidyo version 02-09-/D. The vulnerability stems from the absence of protection such as X-Frame-Options, which could be exploited by an attacker to achieve...
A Google Docs Bug Could Have Allowed Hackers See Your Private Documents
Google has patched a bug in its feedback tool incorporated across its services that could be exploited by an attacker to potentially steal screenshots of sensitive Google Docs documents simply by embedding them in a malicious website. The flaw was discovered on July 9 by security researcher Sreer...
CVE-2020-29243
dhowden tag before 2020-11-19 allows "panic: runtime error: index out of range" via readAPICFrame...
PT-2020-17118 · Dhowden · Dhowden Tag
Name of the Vulnerable Software and Affected Versions: dhowden tag versions before 0.0.0-20201120070457-d52dcb253c63 dhowden tag versions before 2020-11-19 Description: The issue is due to improper bounds checking in a number of methods, which can trigger a panic via readPICFrame, readAPICFrame, ...
PT-2020-17119 · Dhowden · Dhowden
Name of the Vulnerable Software and Affected Versions: dhowden tag versions prior to 0.0.0-20201120070457-d52dcb253c63 Description: The issue is due to improper bounds checking in a number of methods, which can trigger a panic via readAPICFrame or readAtomData due to attempted out-of-bounds reads...