CVE-2024-26832

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix missing folio cleanup in writeback race path In zswapwritebackentry, after we get a folio from readswapcacheasync, we grab the tree lock again to check that the swap entry was not invalidated and recycled. If it wa...

Use After Free

GTKWave is vulnerable to multiple use-after-free in the VCD getvartoken realloc functionality. The vulnerability is due to improper handling of memory deallocation, specifically when triggered via the GUI's legacy VCD parsing code, which can be exploited by opening a specially crafted .vcd file,...

CVE-2024-24862

Removed by vendor...

Memory Corruption

thunderbird is vulnerable to Memory Corruption.The vulnerability is due to improper handling of memory allocation or deallocation, It allows for potential memory corruption within the Firefox and Thunderbird applications, which could lead to the execution of arbitrary code by attackers...

PT-2024-6087 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the drm/nouveau component of the Linux kernel, where several DMA buffer leaks are fixed. Nouveau manages GSP-RM DMA buffers with nvkm gsp mem objects, and some ...

PT-2024-8440

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to errors in memory deallocation in the wilc1000 component of the Linux kernel. This issue can cause a denial of service. The problem arises from the...

PT-2024-26756

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.7.0-rc7-custom+ Description The vulnerability is related to the bcachefs filesystem in the Linux kernel. The issue arises from the incorrect freeing of memory allocated for bch fs::snapshots using kfree instead of kvfree...

Buffer Overflow

chromium:sid is vulnerable to buffer overflow. The vulnerability due to to access a memory location after the memory has been freed or deallocated. It allow a remote attacker to potentially exploit heap corruption via a crafted HTML page...

kernel: scsi: mpt3sas: Fix a memory leak

In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Fix a memory leak Add a forgotten kfree...

ALPINE-CVE-2023-45802

When a HTTP/2 stream was reset RST frame by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox, which originates from a mix-up in the instructions responsible for freeing memory in LoadingSessionHistoryEntry. The vulnerability can be exploited b...

CVE-2023-29336

Win32k Elevation of Privilege Vulnerability Recent assessments: gwillcox-r7 at May 31, 2023 9:15pm UTC reported: Doing a patch diff between a Windows 10 1607 x86 version of win32kfull.sys prior to the patch and after the patch shows that only one function changed: xxxEnableMenuItem. Looking at th...

CVE-2023-22995

In the Linux kernel before 5.17, an error path in dwc3qcomacpiregistercore in drivers/usb/dwc3/dwc3-qcom.c lacks certain platformdeviceput and kfree calls...

USN-5876-1 linux-aws, linux-aws-5.15, linux-azure-fde, linux-gcp, linux-gcp-5.15, linux-intel-iotg vulnerabilities

It was discovered that a memory leak existed in the Unix domain socket implementation of the Linux kernel. A local attacker could use this to cause a denial of service memory exhaustion. CVE-2022-3543 It was discovered that the Bluetooth HCI implementation in the Linux kernel did not properly...

USN-5862-1: Linux kernel (Qualcomm Snapdragon) vulnerabilities

It was discovered that an out-of-bounds write vulnerability existed in the Video for Linux 2 V4L2 implementation in the Linux kernel. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-20369 Pawan Kumar Gupta, Alyssa Milburn, Ami...

PT-2023-18558 · Ftp · Ftp

Name of the Vulnerable Software and Affected Versions: FTP project through 96c1a35 Description: The issue allows remote attackers to cause a denial of service due to memory consumption by engaging in client activity, such as establishing and then terminating a connection. This occurs because mall...

PT-2022-6181 · Iptables · Iptables

Name of the Vulnerable Software and Affected Versions: iptables affected versions not specified Description: The issue is related to memory deallocation errors in the xtables-nft-multi and xtables-legacy-multi utilities of the iptables package in the EMIAS OS operating system. Exploitation of thi...

PT-2022-34115 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to the deallocation of EPC memory in the dw pcie ep init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2022-33510 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the deallocation of EPC memory in the dw pcie ep init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

The vulnerability of the kernel of iOS, macOS Mojave, tvOS, and watchOS allows a hacker to execute arbitrary code.

The vulnerability of the kernel of iOS, macOS Mojave, tvOS, and watchOS is related to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...