PT-2024-21528

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A warning in copy from iter has been reported by Syzkaller due to an iov iter being used in the wrong direction. This occurs when a request with a transfer direction of SG DXFER TO FROM...

PT-2024-8425

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, where the iov iter unit test causes a crash on nommu systems, such as the qemu kc705-nommu emulation. The test calls the vmap function directly,...

PT-2024-7733

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to a kernel-infoleak-after-free issue in the skb datagram iter function. The problem occurs when netlink to full skb creates a new skb and puts the skb-data...

iter-hulp.be Cross Site Scripting vulnerability OBB-3548547

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-54000

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists when reading the 'trace pipe' file within the Linux kernel's tracing subsystem. Specifically, the iter-temp memory is allocated or relocated in the trace find next...

SUSE CVE-2015-2686

net/socket.c in the Linux kernel 3.19 before 3.19.3 does not validate certain range data for 1 sendto and 2 recvfrom system calls, which allows local users to gain privileges by leveraging a subsystem that uses the copyfromiter function in the ioviter interface, as demonstrated by the Bluetooth...

SUSE CVE-2019-19053

A memory leak in the rpmsgeptdevwriteiter function in drivers/rpmsg/rpmsgchar.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of service memory consumption by triggering copyfromiterfull failures, aka CID-bbe692e349e2...

SUSE CVE-2021-41073

looprwiter in fs/iouring.c in the Linux kernel 5.10 through 5.14.6 allows local users to gain privileges by using IORINGOPPROVIDEBUFFERS to trigger a free of a kernel buffer, as demonstrated by using /proc//maps for exploitation...

SUSE CVE-2022-0617

A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udffilewriteiter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2...

OSV-2022-981 Heap-buffer-overflow in SkPath::Iter::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51915 Crash type: Heap-buffer-overflow READ 8 Crash state: SkPath::Iter::next SkStroke::strokePath SkStrokeRec::applyToPath...

OSV-2022-978 Heap-buffer-overflow in SkPath::Iter::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51926 Crash type: Heap-buffer-overflow READ 8 Crash state: SkPath::Iter::next SkPath1DPathEffectImpl::next Sk1DPathEffect::onFilterPath...

OSV-2022-976 Heap-buffer-overflow in SkPath::Iter::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51925 Crash type: Heap-buffer-overflow READ 8 Crash state: SkPath::Iter::next SkParsePath::ToSVGString SkSVGDevice::drawPath...

skia-ftz:api_mock_gpu_canvas: Heap-buffer-overflow in SkPath::Iter::next

Detailed Report: https://oss-fuzz.com/testcase?key=5132993278902272 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: apimockgpucanvas Job Type: libfuzzerasanskia-ftz Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x6100000005f8 Crash State: SkPath::Iter::next...

skia-ftz:api_mock_gpu_canvas: Heap-buffer-overflow in SkPath::Iter::next

Detailed Report: https://oss-fuzz.com/testcase?key=4962882995748864 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: apimockgpucanvas Job Type: libfuzzerasanskia-ftz Platform Id: linux Crash Type: Heap-buffer-overflow READ 16 Crash Address: 0x607000000848 Crash State: SkPath::Iter::next...

OSV-2022-969 Heap-buffer-overflow in SkPath::Iter::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=51875 Crash type: Heap-buffer-overflow READ 8 Crash state: SkPath::Iter::next SkRegion::setPath SkRasterClip::SkRasterClip...

PT-2022-37313 · Git +1 · Skia

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the SkPath::Iter::next function, SkRegion::setPath...

skia:api_null_canvas: Heap-buffer-overflow in SkPath::Iter::next

Detailed Report: https://oss-fuzz.com/testcase?key=5212484751720448 Project: skia Fuzzing Engine: libFuzzer Fuzz Target: apinullcanvas Job Type: libfuzzerasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x60f000028230 Crash State: SkPath::Iter::next...

skia-ftz:api_raster_n32_canvas: Heap-buffer-overflow in SkPath::Iter::next

Detailed Report: https://oss-fuzz.com/testcase?key=5458728564686848 Project: skia-ftz Fuzzing Engine: honggfuzz Fuzz Target: apirastern32canvas Job Type: honggfuzzasanskia-ftz Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x603000000600 Crash State: SkPath::Iter::next...

skia-ftz:api_mock_gpu_canvas: Heap-buffer-overflow in SkPath::Iter::next

Detailed Report: https://oss-fuzz.com/testcase?key=6098578749915136 Project: skia-ftz Fuzzing Engine: libFuzzer Fuzz Target: apimockgpucanvas Job Type: libfuzzerasanskia-ftz Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x617000005078 Crash State: SkPath::Iter::next...

Linux Kernel Buffer Overflow Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel versions 2.6.12-rc2 through 5.15-rc1, which originates from an attacker being able to force a read of an invalid memory address ...