SUSE CVE-2022-31622

MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs pthreadcreate returns a nonzero value while executing the method createworkerthreads, the held lock is not released correctly, which allows local users to trigger a denial of...

There is no way to retrieve the rewards from the MultisigManager and rewards are locked in the vault.

Lines of code Vulnerability details C4 issue M-21: Division by zero error can block RewardsPoolstartRewardCycle if all multisig wallet are disabled. Comments The protocol provides an external function startRewardsCycle so that anyone can start a new reward cycle if necessary. Before mitigation,...

RewardTokens can be locked in MultiRewardStaking contract when the rewardsEndTimestamp of the rewardsTokens are different.

Lines of code Vulnerability details Impact To claim reward tokens from the MultiRewardStaking contract deployed, a user must call claimRewardsaddress user, IERC20 memory rewardsTokens. The rewardsTokens array is populated with getAllRewardsTokens which returns all the reward Tokens the...

CVE-2023-20619

In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519159; Issue ID: ALPS07519159...

CVE-2023-20619

In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519159; Issue ID: ALPS07519159...

CVE-2023-20618

In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519184; Issue ID: ALPS07519184...

Memory corruption

In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519159; Issue ID: ALPS07519159...

Memory corruption

In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519184; Issue ID: ALPS07519184...

PT-2023-17488

Name of the Vulnerable Software and Affected Versions vcu affected versions not specified Description The issue is related to a possible memory corruption due to improper locking in vcu. This could lead to local escalation of privilege, with System execution privileges needed. User interaction is...

CVE-2023-20619

The CVE-2023-20619 entry concerns the vcu component, with a memory corruption issue caused by improper locking. The vulnerability enables local escalation of privileges to System execution level and does not require user interaction. A patch is identified as ALPS07519159 (Issue ALPS07519159). Pub...

CVE-2023-20619

In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519159; Issue ID: ALPS07519159...

CVE-2023-20619: Improper Locking

In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519159; Issue ID: ALPS07519159...

CVE-2023-20619

In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519159; Issue ID: ALPS07519159...

CVE-2023-20618

The CVE-2023-20618 vulnerability affects the MediaTek vcu component, where memory corruption can occur due to improper locking. This can enable local privilege escalation to System execution level without user interaction. The security entry lists Patch ID ALPS07519184 (Issue ALPS07519184) as the...

CVE-2023-20618

In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519184; Issue ID: ALPS07519184...

PT-2023-17489 · Vcu · Vcu

Name of the Vulnerable Software and Affected Versions: vcu affected versions not specified Description: The issue is related to a possible memory corruption due to improper locking in vcu. This could lead to local escalation of privilege, with System execution privileges needed. User interaction ...

MediaTek chip security vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a China-based company. A security vulnerability exists in the MediaTek chip vcu, which originates from improper locking and may result in memory corruption...

MediaTek chip security vulnerabilities

MediaTek chips are a variety of chips from MediaTek, a China-based company. A security vulnerability exists in the MediaTek chip vcu, which originates from improper locking and may result in memory corruption...

CVE-2023-20618: Improper Locking

In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519184; Issue ID: ALPS07519184...

OESA-2023-1056 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In bindervmaclose of binder.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...