Qualcomm 芯片缓冲区错误漏洞

The Qualcomm SDX55 and MSM8909 are both products of Qualcomm Incorporated.The SDX55 is a modem.The MSM8909 is a central processing unit CPU product. The qualcomm chips have a buffer error vulnerability that stems from a lack of length checking when flashing a meta-image, which could result in an...

Qualcomm 芯片缓冲区错误漏洞

Qualcomm MDM9206 and others are products of Qualcomm Incorporated Qualcomm.MDM9206 is a central processing unit CPU product.APQ8053 is a central processing unit CPU product.SDX55 is a modem. qualcomm A buffer error vulnerability exists in multiple products that stems from a lack of length checkin...

ptp4l 缓冲区错误漏洞

ptp4l is an implementation of IEEE Standard 1588 for Linux for the Precision Time Protocol PTP. A buffer error vulnerability exists in ptp4l, which stems from a lack of length checking when forwarding PTP messages between ports, and can lead to information leakage, crashes, or potentially remote...

CVE-2021-22753

A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious WSP file is being parsed by IGSS Definition...

CVE-2021-22753

A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious WSP file is being parsed by IGSS Definition...

CVE-2021-22750

A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition Def.exe V15.0.0.21041 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious CGF file is imported to IGSS Definition...

CVE-2021-22753

A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious WSP file is being parsed by IGSS Definition...

CVE-2021-22750

The CVE-2021-22750 issue affects Schneider Electric IGSS Definition (Def.exe) versions up to 15.0.0.21041 (and earlier) with an out-of-bounds write when importing a malicious CGF file, caused by missing length checks. The vulnerability can lead to data loss or remote code execution on affected sy...

CVE-2021-22750

A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition Def.exe V15.0.0.21041 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious CGF file is imported to IGSS Definition...

多款Qualcomm产品缓冲区错误漏洞

The Qualcomm Component is a component of Qualcomm Incorporated USA. Intrinsic component that provides the functionality of Qualcomm devices. A security vulnerability exists in Qualcomm products that could result in out-of-bounds reads in DRM due to incorrect buffer length checks. The following...

OPENSUSE-SU-2021:0807-1 Security update for libX11

This update for libX11 fixes the following issues: - CVE-2021-31535: Fixed missing request length checks in libX11 bsc1182506. This update was imported from the SUSE:SLE-15:Update update project...

SUSE SLES12 Security Update : libX11 (SUSE-SU-2021:1766-1)

This update for libX11 fixes the following issues : CVE-2021-31535: Fixed missing request length checks in libX11 bsc1182506. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

CVE-2020-24020

Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnnexecutelayerpad in libavfilter/dnn/dnnbackendnativelayerpad.c due to a call to memcpy without length checks, which could let a remote malicious user execute arbitrary code...

CVE-2020-24020

Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnnexecutelayerpad in libavfilter/dnn/dnnbackendnativelayerpad.c due to a call to memcpy without length checks, which could let a remote malicious user execute arbitrary code...

CVE-2020-24020

Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnnexecutelayerpad in libavfilter/dnn/dnnbackendnativelayerpad.c due to a call to memcpy without length checks, which could let a remote malicious user execute arbitrary code...

CVE-2020-24020

Buffer Overflow vulnerability in FFMpeg 4.2.3 in dnnexecutelayerpad in libavfilter/dnn/dnnbackendnativelayerpad.c due to a call to memcpy without length checks, which could let a remote malicious user execute arbitrary code...

SUSE-SU-2021:1766-1 Security update for libX11

This update for libX11 fixes the following issues: - CVE-2021-31535: Fixed missing request length checks in libX11 bsc1182506...

SUSE-SU-2021:1765-1 Security update for libX11

This update for libX11 fixes the following issues: - CVE-2021-31535: Fixed missing request length checks in libX11 bsc1182506...

CVE-2021-31616

CVE-2021-31616 affects ShapeShift KeepKey hardware wallet firmware prior to 7.1.0. The issue is a stack buffer overflow caused by insufficient length checks in the ethereum_extractThorchainSwapData() function within ethereum.c, which can be triggered by crafted messages and is reachable remotely ...

CVE-2021-31616

Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.1.0 allow a stack buffer overflow via crafted messages. The overflow in ethereumextractThorchainSwapData in ethereum.c can circumvent stack protections and lead to code execution. The vulnerable interface is...