621 matches found
EUVD-2022-6287
Malicious code in bioql PyPI...
EUVD-2022-25371
Malicious code in bioql PyPI...
EUVD-2023-33090
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2016-6737
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05 could enable a local malicious application to execute arbitrary...
Linux Distros Unpatched Vulnerability : CVE-2017-0508
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of t...
Linux Distros Unpatched Vulnerability : CVE-2017-0507
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An elevation of privilege vulnerability in the kernel ION subsystem could enable a local malicious application to execute arbitrary code within the context of t...
Linux Distros Unpatched Vulnerability : CVE-2021-39800
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ionioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no...
Linux Distros Unpatched Vulnerability : CVE-2023-5172
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash. Th...
MAL-2025-23310 Malicious code in ion-lsp-server (npm)
The package ion-lsp-server was found to contain malicious code...
Malicious code in iwasm-ion-schema (npm)
The package iwasm-ion-schema was found to contain malicious code...
MAL-2025-23512 Malicious code in iwasm-ion-schema (npm)
The package iwasm-ion-schema was found to contain malicious code...
Malicious code in ion-lsp-server (npm)
The package ion-lsp-server was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2016-9120
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in the ionioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a...
Linux Distros Unpatched Vulnerability : CVE-2023-29548
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox 112, Focus for Android 112,...
Linux Distros Unpatched Vulnerability : CVE-2023-5171
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a...
Linux Distros Unpatched Vulnerability : CVE-2021-39714
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In ionbufferkmapget of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additional...
firefox: thunderbird: JavaScript engine only wrote partial return value to stack
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: On 64-bit platforms, IonMonkey-JIT only wrote 32 bits of the 64-bit return value space on the stack. Baseline-JIT, however, reads the entire 64 bits...
CVE-2024-54130
The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A segmentation fault occurs with ION-DTN BPv7 software version 4.1.3 when a bundle with a Destination Endpoint ID EID set to dtn:none is received. This causes the node to become...
CVE-2024-54129
The NASA’s Interplanetary Overlay Network ION is an implementation of Delay/Disruption Tolerant Networking DTN. A vulnerability exists in the version ION-DTN BPv7 implementation version 4.1.3 when receiving a bundle with an improper reference to the imc scheme with valid Service-Specific Part SSP...
CVE-2023-5172
A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox 118...