Lucene search
+L

2691 matches found

Cvelist
Cvelist
•added 2022/10/20 12:00 a.m.•40 views

CVE-2022-3577

An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or potentially escalate their privileges on the system. It is in bigbenprobe of drivers/hid/hid-bigbenff.c. The reason is incorrect assumption - bigben...

7.9AI score0.00256EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/09/13 8:15 p.m.•10 views

CVE-2021-0871

In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

7.8CVSS7.4AI score0.00105EPSS
SaveExploits0References2
NVD
NVD
•added 2022/09/13 8:15 p.m.•42 views

CVE-2021-0871

In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

7.8CVSS0.00105EPSS
SaveExploits0References1
Prion
Prion
•added 2022/09/13 8:15 p.m.•29 views

Integer overflow

In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

4.3CVSS7.7AI score0.00105EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/09/13 7:13 p.m.•43 views

CVE-2021-0871

In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

8AI score0.00105EPSS
SaveExploits0References1
CVE
CVE
•added 2022/09/13 7:13 p.m.•123 views

CVE-2021-0871

PowerVR kernel driver issue CVE-2021-0871 involves PVRSRVBridgePMRPDumpSymbolicAddr where a missing size check can cause an integer overflow and out-of-bounds heap access. The described impact is local escalation of privilege with no additional execution privileges needed, and exploitation is not...

7.8CVSS7.8AI score0.00105EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/13 12:00 a.m.•5 views

CVE-2021-0871: Integer Overflow or Wraparound

In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

7.8CVSS7.5AI score0.00105EPSS
SaveExploits0References2
NVD
NVD
•added 2022/09/01 9:15 p.m.•24 views

CVE-2022-2308

A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in line with the features advertised by the VDUSE userspace application. In case of a mismatch, Virtio drivers config read helpers do not initialize t...

6.5CVSS0.00233EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2022/09/01 9:15 p.m.•61 views

CVE-2022-2308

A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in line with the features advertised by the VDUSE userspace application. In case of a mismatch, Virtio drivers config read helpers do not initialize t...

6.5CVSS6.7AI score0.00233EPSS
SaveExploits0References1
OSV
OSV
•added 2022/09/01 9:15 p.m.•12 views

UBUNTU-CVE-2022-2308

A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in line with the features advertised by the VDUSE userspace application. In case of a mismatch, Virtio drivers config read helpers do not initialize t...

6.5CVSS6.6AI score0.00233EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2022/09/01 8:01 p.m.•40 views

CVE-2022-2308

A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in line with the features advertised by the VDUSE userspace application. In case of a mismatch, Virtio drivers config read helpers do not initialize t...

6.5CVSS5.4AI score0.00233EPSS
SaveExploits0
Mend
Mend
•added 2022/09/01 8:01 p.m.•5 views

CVE-2022-2308

A flaw was found in vDPA with VDUSE backend. There are currently no checks in VDUSE kernel driver to ensure the size of the device config space is in line with the features advertised by the VDUSE userspace application. In case of a mismatch, Virtio drivers config read helpers do not initialize t...

8.2CVSS0.00233EPSS
SaveExploits0References2
CVE
CVE
•added 2022/09/01 8:01 p.m.•150 views

CVE-2022-2308

CVE-2022-2308 describes a vulnerability in the Linux kernel’s vDPA with the VDUSE backend. The VDUSE kernel driver does not validate that the device config space size matches the features advertised by the VDUSE userspace app, causing Virtio config read helpers to pass uninitialized memory to vdu...

6.5CVSS6.8AI score0.00233EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2022/09/01 3:15 a.m.•14 views

CVE-2022-36449

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory, write a limited amount outside of buffer bounds, or to disclose details of memory mappings. This affects Midgard r4p0 through r32p0,...

6.5CVSS6.9AI score0.01178EPSS
SaveExploits1References6
NVD
NVD
•added 2022/09/01 3:15 a.m.•33 views

CVE-2022-36449

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory, write a limited amount outside of buffer bounds, or to disclose details of memory mappings. This affects Midgard r4p0 through r32p0,...

6.5CVSS0.01178EPSS
SaveExploits1References5
Prion
Prion
•added 2022/09/01 3:15 a.m.•33 views

Out-of-bounds

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory, write a limited amount outside of buffer bounds, or to disclose details of memory mappings. This affects Midgard r4p0 through r32p0,...

6.4CVSS6.7AI score0.01178EPSS
SaveExploits1References5Affected Software3
Cvelist
Cvelist
•added 2022/09/01 2:50 a.m.•53 views

CVE-2022-36449

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory, write a limited amount outside of buffer bounds, or to disclose details of memory mappings. This affects Midgard r4p0 through r32p0,...

7AI score0.01178EPSS
SaveExploits1References5
CVE
CVE
•added 2022/09/01 2:50 a.m.•209 views

CVE-2022-36449

CVE-2022-36449 affects Arm Mali GPU Kernel Driver on Midgard, Bifrost, and Valhall architectures. The issue is an improper memory access that lets a non-privileged user access freed memory, write outside buffers, or disclose memory mappings. Reports indicate upstream ARM Mali driver patches exist...

6.5CVSS7AI score0.01178EPSS
SaveExploits1References5Affected Software3
CNNVD
CNNVD
•added 2022/09/01 12:00 a.m.•24 views

Arm Mali GPU Kernel Driver 资源管理错误漏洞

Arm Mali GPU Kernel Driver is a driver for a graphics processor unit from Arm UK. A security vulnerability exists in Arm Mali GPU Kernel Driver. An attacker could exploit the vulnerability to perform incorrect GPU processing operations, access freed memory, write limited memory outside of buffer...

6.5CVSS7AI score0.01178EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/01 12:00 a.m.•6 views

CVE-2022-36449: Use After Free

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory, write a limited amount outside of buffer bounds, or to disclose details of memory mappings. This affects Midgard r4p0 through r32p0,...

6.5CVSS7AI score0.01178EPSS
SaveExploits1References2
Rows per page
Query Builder