15935 matches found
Out-of-bounds
The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access...
CVE-2022-48298
The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access...
CVE-2022-48297
The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access...
CVE-2022-48298
CVE-2022-48298 affects Huawei HarmonyOS geofencing kernel. The issue is that the geofencing kernel code does not verify the length of input data, which can lead to out-of-bounds memory access. The Available documents describe the vulnerability as a length-check bypass in the geofencing kernel, wi...
CVE-2023-21430
An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows attacker to cause memory access fault...
CVE-2022-48297
The geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access...
CVE-2023-21430
An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows attacker to cause memory access fault...
CVE-2022-48297
The CVE-2022-48297 issue affects the geofencing kernel code where input data length is not verified, potentially causing out-of-bounds memory access. The vulnerability is described with a CVSS v3.1 base score of 7.5 (HIGH), with a network-based, low complexity exploit and no user interaction; con...
CVE-2023-21430
Consolidated details show CVE-2023-21430 affects libSDKRecognitionText.spensdk.samsung.so (Samsung) for software prior to SMR JAN-2023 Release 1. Root cause is an out-of-bounds read in the mapToBuffer function that can cause a memory access fault. Impact descriptions in sources indicate memory ac...
SAMSUNG Mobile devices 缓冲区错误漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, and more, from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Jan-2023 Release 1 and earlier, which stems from an out-of-bounds read vulnerability in the...
CVE-2022-48298
The geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access...
Out-of-bounds Memory Access
directxtex is vulnerable to Out-of-bound Memory Access. A remote attacker is able to overwrite memory through the ConvertToSinglePlane method via the texconv command-line tool when given an invalid height for planar video textures such as NV12, resulting in a system crash or disclosure of sensiti...
EulerOS 2.0 SP8 : tigervnc (EulerOS-SA-2023-1340)
According to the versions of the tigervnc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory,...
git: gitattributes parsing integer overflow
A flaw was found in Git, a distributed revision control system. When parsing gitattributes, a mechanism to allow defining attributes for paths, multiple integer overflows can occur when there is a huge number of path patterns, attributes for a single pattern, or declared attribute names. These...
git: gitattributes parsing integer overflow
A flaw was found in Git, a distributed revision control system. When parsing gitattributes, a mechanism to allow defining attributes for paths, multiple integer overflows can occur when there is a huge number of path patterns, attributes for a single pattern, or declared attribute names. These...
Huawei HarmonyOS 输入验证错误漏洞
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from the geofencing kernel code not determining the length of incoming data, which can be...
Medium: protobuf
Issue Overview: A flaw was found in protobuf. The vulnerability occurs due to incorrect parsing of a NULL character in the proto symbol and leads to a Null pointer dereference. This flaw allows an attacker to execute unauthorized code or commands, read memory, modify memory. CVE-2021-22570 Affect...
Lenovo Diagnostics Driver Memory Access
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Lenovo Diagnostics Driver IOCTL memmove', 'Description' = %q Incorrect access control for the Lenovo Diagnostics Driver allows a low-privileged...
Security Bulletin: IBM Sterling Connect:Direct File Agent is vulnerable to a memory exploit due to Eclipse Openj9 (CVE-2022-3676)
Summary There is a vulnerability in Eclipse Openj9 used by IBM Sterling Connect:Direct File Agent. IBM Sterling Connect:Direct File Agent has addressed the applicable issue. Vulnerability Details CVEID:CVE-2022-3676 DESCRIPTION: Eclipse Openj9 could allow a remote attacker to bypass security...
CVE-2022-34398
Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system...