多款Apple产品 缓冲区错误漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. A buffer overflow vulnerability exists in iOS and iPadOS, which originates from a boundary error in the GPU...

Apple iOS和Apple iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are both products of Apple, an operating system developed for mobile devices. The vulnerability is caused by a boundary error in the GPU driver when handling untrusted input, which can be exploited to execute arbitrary code with root privileges...

About the security content of watchOS 8.7

About the security content of watchOS 8.7 This document describes the security content of watchOS 8.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

Ubuntu 16.04 ESM : Linux kernel vulnerabilities (USN-5505-1)

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5505-1 advisory. Norbert Slusarek discovered a race condition in the CAN BCM networking protocol of the Linux kernel leading to multiple use-after-free vulnerabilities. A...

CVE-2022-20082

In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044730; Issue ID: ALPS07044730...

CVE-2022-20082

In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044730; Issue ID: ALPS07044730...

Race condition

In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044730; Issue ID: ALPS07044730...

CVE-2022-20082

CVE-2022-20082 : In MediaTek GPU software, a race condition can cause a use-after-free, enabling local elevation of privilege with no extra execution privileges or user interaction required. Multiple connected sources (including NVD and RH Red Hat advisories) confirm the issue as a GPU component ...

CVE-2022-20082

In GPU, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07044730; Issue ID: ALPS07044730...

CVE-2021-39793

creationtimestamp| type| source ---|---|--- 2022-07-04 20:00:05+00:00| seen| https://t.me/truesecator/3129 2022-09-08 13:17:27+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6761 2022-11-22 21:05:00+00:00| seen|...

The vulnerability of the NVIDIA GPU Display Driver at the ECC level, related to writing beyond the buffer in memory, allows a hacker to cause a system failure and compromise data integrity.

The vulnerability of the NVIDIA GPU Display Driver at the ECC level is related to writing beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure and compromise data integrity...

GSD-2022-1003512 drm/amd/pm: fix a potential gpu_metrics_table memory leak

drm/amd/pm: fix a potential gpumetricstable memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.88 by commit...

GSD-2022-1002933 drm/amd/pm: fix a potential gpu_metrics_table memory leak

drm/amd/pm: fix a potential gpumetricstable memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17 by commit...

GSD-2022-1002581 drm/amd/pm: fix a potential gpu_metrics_table memory leak

drm/amd/pm: fix a potential gpumetricstable memory leak This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17 by commit...

MAL-2022-1220 Malicious code in azure-accessplatform-windows-gpu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d52dfa43f0e7e14be55e44d82af2cdd599adc6519fdc9f32471a93c8a8c3528d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-accessplatform-windows-gpu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d52dfa43f0e7e14be55e44d82af2cdd599adc6519fdc9f32471a93c8a8c3528d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Vulnerability of the nvidia.ko module of the NVIDIA Virtual GPU Manager driver, which allows a hacker to cause a service failure.

The vulnerability of the nvidia.ko module of the NVIDIA Virtual GPU Manager driver relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

NVIDIA Data Center GPU Manager Remote Memory Corruption

!/usr/bin/python3 -- coding: UTF-8 -- heart.py NVIDIA Data Center GPU Manager Remote Memory Corruption Vulnerability Jeremy Brown jbrown3264/gmail NVIDIA DCGM runs on machines with NVIDIA GPUs to gather telemetry and GPU health data. nv-hostengine is a daemon that by default listens on the loopba...

Update now! Nvidia released fixes for 10 flaws in Windows GPU drivers

Multiple NVIDIA graphic card models have been found to have flaws in their GPU drivers, with six medium-and four high-severity ratings. Last Monday, the company released a software security update for NVIDIA GPU Display Driver to address the vulnerabilities. If exploited, they could lead to denia...

Mageia: Security Advisory (MGASA-2022-0198)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...