1360 matches found
PCRE 缓冲区错误漏洞
PCRE is an open source regular expression library written in C by the individual developer Philip Hazel. A security vulnerability exists in PCRE. An attacker can exploit this vulnerability to trigger a denial of service or obtain sensitive information by forcing a read of an invalid memory addres...
CVE-2021-33315
The TRENDnet TI-PG1284i switchhw v2.0R prior to version 2.0.2.S0 suffers from an integer underflow vulnerability. This vulnerability exists in its lldp related component. Due to lack of proper validation on length field of PortID TLV, by sending a crafted lldp packet to the device, integer...
CVE-2022-30524
There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...
CVE-2022-30524
There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...
CVE-2022-30524
There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...
CVE-2022-30524
There is an invalid memory access in the TextLine class in TextOutputDev.cc in Xpdf 4.0.4 because the text extractor mishandles characters at large y coordinates. It can be triggered by for example sending a crafted pdf file to the pdftotext binary, which allows a remote attacker to cause a Denia...
GSD-2022-1001934 locking/lockdep: Avoid potential access of invalid memory in lock_class
locking/lockdep: Avoid potential access of invalid memory in lockclass This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...
SUSE-SU-2022:1307-1 Security update for dnsmasq
This update for dnsmasq fixes the following issues: - CVE-2022-0934: Fixed an invalid memory access that could lead to remote denial of service via crafted packet bsc1197872...
SUSE-SU-2022:0943-2 Security update for slirp4netns
This update for slirp4netns fixes the following issues: - CVE-2020-29130: Fixed an invalid memory access while processing ARP packets bsc1179467...
CVE-2022-22514 Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.
An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor control the values to be written. If inval...
SUSE-SU-2022:0944-1 Security update for libarchive
This update for libarchive fixes the following issues: - CVE-2021-36976: Fixed an invalid memory access that could cause data corruption bsc1188572. Non-security updates: - Updated references for CVE-2017-5601, which was already fixed in a previous version bsc1022528 bsc1189528...
SUSE-SU-2022:0943-1 Security update for slirp4netns
This update for slirp4netns fixes the following issues: - CVE-2020-29130: Fixed an invalid memory access while processing ARP packets bsc1179467...
Silicon Graphics LibTIFF 缓冲区错误漏洞
Silicon Graphics LibTIFF is a library for reading and writing TIFF Tagged Image File Format files from Silicon Graphics, USA. The library contains some command line tools for working with TIFF files. A security vulnerability exists in Silicon Graphics LibTIFF that originates from an invalid memor...
Google Android Buffer Overflow Vulnerability (CNVD-2022-16339)
Google Android is a Linux-based open source operating system from Google. Google Android buffer overflow vulnerability, the vulnerability stems from improper boundary checking. An attacker can exploit the vulnerability to read invalid memory and cause the application to crash...
Input validation
An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...
Mageia: Security Advisory (MGASA-2017-0297)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-46333
Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component asanmemmove...
CVE-2021-46333
Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component asanmemmove...