QEMU 资源管理错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from a security vulnerability that originates from the fact that an attacker on a client system can force the reuse of a freed...

PT-2022-6092

Name of the Vulnerable Software and Affected Versions Arm Mali GPU kernel driver versions Bifrost r0p0 through r39p0 Arm Mali GPU kernel driver versions Valhall r19p0 through r39p0 Arm Mali GPU kernel driver versions Midgard r4p0 through r32p0 Description The issue is related to the mishandling o...

CLSA-2022-1659639100 Fixed CVEs in vim: CVE-2022-2345, CVE-2022-2344, CVE-2022-2343, CVE-2022-2522

CVE-2022-2345: fix using freed memory with recursive substitute - CVE-2022-2344: fix reading past end of completion with duplicate match - CVE-2022-2343: fix reading past end of completion with a long line and 'infercase' set - CVE-2022-2522: fix accessing uninitialized memory when completing...

CVE-2022-33917

An issue was discovered in the Arm Mali GPU Kernel Driver Valhall r29p0 through r38p0. A non-privileged user can make improper GPU processing operations to gain access to already freed memory...

CVE-2022-33917

An issue was discovered in the Arm Mali GPU Kernel Driver Valhall r29p0 through r38p0. A non-privileged user can make improper GPU processing operations to gain access to already freed memory...

CVE-2022-33917

An issue was discovered in the Arm Mali GPU Kernel Driver Valhall r29p0 through r38p0. A non-privileged user can make improper GPU processing operations to gain access to already freed memory...

Design/Logic Flaw

An issue was discovered in the Arm Mali GPU Kernel Driver Valhall r29p0 through r38p0. A non-privileged user can make improper GPU processing operations to gain access to already freed memory...

CVE-2022-33917

An issue was discovered in the Arm Mali GPU Kernel Driver Valhall r29p0 through r38p0. A non-privileged user can make improper GPU processing operations to gain access to already freed memory...

PT-2022-4511 · Arm · Arm Mali Gpu Kernel Driver

Name of the Vulnerable Software and Affected Versions: Arm Mali GPU Kernel Driver versions Valhall r29p0 through r38p0 Description: A non-privileged user can make improper GPU processing operations to gain access to already freed memory. The issue is caused by a buffer overflow in memory, which c...

PT-2022-6437 · Google +3 · Android Kernel +3

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to the use of previously freed memory in the l2cap chan put function of l2cap core. This could lead to local escalation of privilege with no additional...

CLSA-2022-1655901847 Fix CVE(s): CVE-2022-2042

SECURITY UPDATE: Using uninitialized value and freed memory in spell command - debian/patches/CVE-2022-2042.patch: Initialize "attr" and check for empty line early - CVE-2022-2042...

Fixed CVE-2022-2042 in vim

CVE-2022-2042: fix using uninitialized value and freed memory in spell command...

CLSA-2022-1655901379 Fixed CVE-2022-2042 in vim

CVE-2022-2042: fix using uninitialized value and freed memory in spell command...

fast-string-search 缓冲区错误漏洞

fast-string-search is a module from the individual developer Magic Len Ron Li in China that searches for substrings in a string using N-API and boyer-moore-magiclen. A security vulnerability exists in fast-string-search due to incorrect memory freeing and length calculation of any non-string inpu...

CVE-2022-2042

A heap use-after-free vulnerability was found in Vim's skipwhite function of the src/charset.c file. This flaw occurs because of an uninitialized attribute value and freed memory in the spell command. This flaw allows an attacker to trick a user into opening a specially crafted file, triggering a...

CLSA-2022-1654804579 Fixed CVEs in vim: CVE-2022-0319, CVE-2022-1886, CVE-2022-1898, CVE-2022-1851

CVE-2022-0319: correct end of Visual area when entering another buffer - CVE-2022-1851: fix invalid cursor position after text formatting - CVE-2022-1886: fix access before start of text with a put command - CVE-2022-1898: fix using freed memory with 'd'...

CLSA-2022-1654525751 Fix CVE(s): CVE-2022-1796, CVE-2022-1785

SECURITY UPDATE: Memory access error when substitute expression changes window - debian/patches/CVE-2022-1785.patch: Disallow changing window in substitute expression - CVE-2022-1785 SECURITY UPDATE: Accessing freed memory when line is flushed - debian/patches/CVE-2022-1796.patch: Make a copy of...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel suffers from a resource management error vulnerability that stems from a problem with deviceisregistered. An attacker exploiting this vulnerability could force the reuse of a freed memory...

USN-5458-1: Vim vulnerabilities

It was discovered that Vim was incorrectly handling virtual column position operations, which could result in an out-of-bounds read. An attacker could possibly use this issue to expose sensitive information. CVE-2021-4193 It was discovered that Vim was not properly performing bounds checks when...

The vulnerability of the find_pattern_in_path() function in the Vim text editor allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the findpatterninpath function in the Vim text editor lies in the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure using a specially created file...