CVE-2021-46763

The CVE-2021-46763 entry concerns AMD components: the AMD Secure Processor (ASP) and AMD System Management Unit (SMU). The root cause is insufficient input validation in the SMU, which may allow a privileged attacker to write beyond the bounds of a shared memory buffer, potentially compromising i...

CVE-2021-46762

CVE-2021-46762 is an AMD SMU/ASP input-validation vulnerability: insufficient validation in the System Management Unit (SMU) may allow corruption of SMU SRAM, risking integrity or availability. Affected products include AMD ASP/SMU components in AMD Embedded processors; exploitation details are n...

CVE-2021-46762

Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service...

CVE-2021-46763

Insufficient input validation in the SMU may enable a privileged attacker to write beyond the intended bounds of a shared memory buffer potentially leading to a loss of integrity...

CVE-2021-26397

Insufficient address validation, may allow an attacker with a compromised ABL and UApp to corrupt sensitive memory locations potentially resulting in a loss of integrity or availability...

CVE-2021-26379

Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, potentially leading to a loss of integrity and privilege escalation...

CVE-2021-26379

CVE-2021-26379 concerns the AMD System Management Unit (SMU) and related AMD Secure Processor (ASP) firmware. The documented issue is insufficient input validation of mailbox data in the SMU, which may allow an attacker to coerc e the SMU to corrupt SMRAM, potentially causing a loss of integrity ...

CVE-2023-29460

An arbitrary code execution vulnerability contained in Rockwell Automation's Arena Simulation software was reported that could potentially allow a malicious user to commit unauthorized arbitrary code to the software by using a memory buffer overflow potentially resulting in a complete loss of...

PT-2023-12584 · Abl · Abl

Name of the Vulnerable Software and Affected Versions: ABL affected versions not specified Description: The issue is related to improper input validation in ABL, which may allow an attacker with physical access to perform arbitrary memory overwrites. This could potentially lead to a loss of...

PT-2023-12095 · Smu · Smu

Name of the Vulnerable Software and Affected Versions: SMU affected versions not specified Description: The issue is related to insufficient input validation of mailbox data in the SMU, which may allow an attacker to coerce the SMU to corrupt SMRAM. This could potentially lead to a loss of...

PT-2023-17450 · Amd · 2Nd Gen Amd Epyc™ +41

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: An attacker with a compromised ASP could possibly send malformed commands to an ASP on another CPU, resulting in an out of bounds write, potentially...

Design/Logic Flaw

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability...

CVE-2022-31643

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability...

CVE-2022-31643

Summary (mode C): CVE-2022-31643 concerns a BIOS-related vulnerability in HP PC products that may compromise system integrity. The affected component is the system BIOS on certain HP PC platforms, with the root cause described as a potential integrity loss if exploited. Practical impact is listed...

HP PC 安全漏洞

HP PCs are computer products from Hewlett-Packard HP in the United States. A security vulnerability exists in HP PCs that stems from a vulnerability in the BIOS of some PCs that could lead to a loss of integrity...

The vulnerability of the Lib/webbrowser.py component in the Python programming language allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Lib/webbrowser.py component of the Python interpreter is related to insufficient neutralization of special elements in requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the coders/pcl.c component in the console-based graphic editor ImageMagick allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the coders/pcl.c component of the console-based image editing tool ImageMagick is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability of the LoadPartitionTable function in the gpt.cc component of the GPT disk partitioning tool allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the LoadPartitionTable function in the gpt.cc component of the GPT disk partitioning tool, fdisk, is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...

The vulnerability of the `answer_request` function in the `fuzz_rfc1035.c` component of the DNS server Dnsmasq allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the answerrequest function in the fuzzrfc1035.c component of the DNS server Dnsmasq is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability in the MagickCore/property.c component of the console-based image editing tool ImageMagick allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the MagickCore/property.c component in the console-based image editing tool ImageMagick is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...