262 matches found
DEBIAN-CVE-2024-26749
In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: fixed memory use after free at cdns3gadgetepdisable ... cdns3gadgetepfreerequest&privep-endpoint, &privreq-request; listdelinit&privreq-list; ... 'privreq' actually free at cdns3gadgetepfreerequest. But listdelinit us...
USN-6718-1 curl vulnerabilities
Dan Fandrich discovered that curl would incorrectly use the default set of protocols when a parameter option disabled all protocols without adding any, contrary to expectations. This issue only affected Ubuntu 23.10. CVE-2024-2004 It was discovered that curl incorrectly handled memory when limiti...
USN-6680-3 linux-aws, linux-aws-6.5 vulnerabilities
黄思聪 discovered that the NFC Controller Interface NCI implementation in the Linux kernel did not properly handle certain memory allocation failure conditions, leading to a null pointer dereference vulnerability. A local attacker could use this to cause a denial of service system crash...
The vulnerability of the Mojo library for Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code.
The vulnerability of the Mojo library for Microsoft Edge and Google Chrome browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2024-25451
Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4DataBuffer::ReallocateBuffer function...
Design/Logic Flaw
Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4UrlAtom::AP4UrlAtom function...
Design/Logic Flaw
Bento4 v1.6.0-640 was discovered to contain an out-of-memory bug via the AP4DataBuffer::ReallocateBuffer function...
CVE-2024-25451
CVE-2024-25451 concerns Bento4 v1.6.0-640, which contains an out-of-memory bug in the AP4_DataBuffer::ReallocateBuffer() function. Multiple sources confirm the issue and tie it to Bento4’s MP4 reading/writing library, with the vulnerability enabling an OOM condition that can impact system availab...
CVE-2024-25452
CVE-2024-25452 affects Bento4 v1.6.0-640, with an out-of-memory bug in AP4_UrlAtom::AP4_UrlAtom(). Public document set confirms the vulnerable component and impact (OOM; Availability), but exploitation details are not provided. Red Hat notes the issue; PT-2024-20954 suggests disabling AP4 UrlAtom...
UBUNTU-CVE-2024-0755
Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 122, Firefox ESR...
The vulnerability of the DOC-file processor in Hancom Office software allows a hacker to execute arbitrary code.
The vulnerability of Hancom Office’s DOC-file processing tool is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created DOC file...
PT-2023-7269
Name of the Vulnerable Software and Affected Versions Vim versions prior to 9.0.2121 Description The issue is related to a heap-use-after-free vulnerability. When executing a :s command for the first time and using a sub-replace-special atom inside the substitution part, it is possible that the...
The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory usage after it is freed, allowing attackers to execute arbitrary code within the context of the current process.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute...
The vulnerability of the Substance 3D Stager software lies in its reliance on memory after it is freed, allowing an attacker to execute arbitrary code.
The vulnerability of the Substance 3D Stager software-related 3D design software is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...
The vulnerability of the Site Isolation component in Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s Site Isolation component relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTML page...
The vulnerability of Google Chrome’s autonomous mode for Android allows a hacker to execute arbitrary code.
The vulnerability of Google Chrome’s autonomous browser mode for Android relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...
QEMU 资源管理错误漏洞
QEMU is a suite of analog processor software from the French individual developer Fabrice Bellard. The software is fast and cross-platform. QEMU suffers from a memory misreference vulnerability that stems from a confusion in the instructions responsible for freeing memory in the e1000e NIC...
SUSE CVE-2023-26965
loadImage in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image...
Important: kernel-livepatch-6.1.19-30.43
Issue Overview: In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs. CVE-2022-48425 An out-of-bounds memory access flaw was found in the Linux kernel's XFS file system in how a user restores an XFS image after failu...