Important: kernel

Issue Overview: An out-of-bounds write flaw was found in the Linux kernels framebuffer-based console driver functionality in the way a user triggers ioctl FBIOPUTVSCREENINFO with malicious data. This flaw allows a local user to crash or potentially escalate their privileges on the system...

CVE-2021-45454

Ampere Altra before SRP 1.08b and Altra Max​ before SRP 2.05 allow information disclosure of power telemetry via HWmon...

CVE-2022-37459

Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel attack, aka a "Retbleed" issue...

CVE-2022-37459

Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a allow attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel attack, aka a "Retbleed" issue...

CVE-2021-45454

Ampere Altra before SRP 1.08b and Altra Max​ before SRP 2.05 allow information disclosure of power telemetry via HWmon...

CVE-2021-45454

Ampere Altra before SRP 1.08b and Altra Max​ before SRP 2.05 allow information disclosure of power telemetry via HWmon...

CVE-2022-37459

This CVE affects Ampere Altra line: Ampere Altra devices before 1.08g and Ampere Altra Max devices before 2.05a are vulnerable to a Retbleed-style attack that can hijack code flow by manipulating return-address predictions. Impact is the potential execution of arbitrary code via a side-channel. A...

CVE-2021-45454

Ampere Altra before SRP 1.08b and Altra Max​ before SRP 2.05 allow information disclosure of power telemetry via HWmon...

CVE-2021-45454

The vulnerability CVE-2021-45454 affects Ampere Altra SRP prior to 1.08b and Ampere Altra Max SRP prior to 2.05, allowing information disclosure of power telemetry via HWmon. The root cause is exposure of power telemetry data through HWmon in affected SRP versions. Impact is information disclosur...

PT-2022-12362 · Ampere · Ampere Altra +1

Name of the Vulnerable Software and Affected Versions: Ampere Altra versions before SRP 1.08b Ampere Altra Max versions before SRP 2.05 Description: The issue allows information disclosure of power telemetry via HWmon. Recommendations: For Ampere Altra versions before SRP 1.08b, update to SRP 1.0...

Ampere Computing Ampere Altra 安全漏洞

Ampere Computing Ampere Altra is an 80-core server processor from Ampere Computing, USA. A security vulnerability exists in Ampere Altra SRP versions prior to 1.08b and Ampere Altra Max SRP versions prior to 2.05. An attacker could exploit this vulnerability to disclose sensitive information...

PT-2022-24012 · Ampere · Ampere Altra +1

Name of the Vulnerable Software and Affected Versions: Ampere Altra devices before 1.08g Ampere Altra Max devices before 2.05a Description: The issue allows attackers to control the predictions for return addresses and potentially hijack code flow to execute arbitrary code via a side-channel...

CVE-2022-25793

A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when parsing ActionScript Byte Code files. This...

CVE-2022-25793

A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when parsing ActionScript Byte Code files. This...

CVE-2022-25793

A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when parsing ActionScript Byte Code files. This...

Stack overflow

A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when parsing ActionScript Byte Code files. This...

CVE-2022-25793

CVE-2022-25793 describes a stack-based buffer overflow in Autodesk 3ds Max 2020–2022 during parsing of ABC/ActionScript Byte Code files. The overflow occurs when copying length-validated user data into a fixed-length stack buffer, potentially allowing arbitrary code execution. Documents vary on e...

CVE-2022-25793

A Stack-based Buffer Overflow Vulnerability in Autodesk 3ds Max 2022, 2021, and 2020 may lead to code execution through the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer when parsing ActionScript Byte Code files. This...

Autodesk 3ds Max 安全漏洞

Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the American company Autodesk. A security vulnerability exists in Autodesk 3ds Max versions 2022, 2021, and 2020, which stems from the presence of a stack-based buffer overflow that can lead to code execution...

Missing upper limit definition in replaceLenderFee() of HomeFi.sol

Lines of code Vulnerability details Missing upper limit definition in replaceLenderFee of HomeFi.sol Impact The admin of the HomeFi contract can set lenderFee to greater than 100%, forcing calls to lendToProject to all projects created in the future to revert. Proof of Concept Using the function...