235 matches found
The vulnerability of Google Chrome’s IndexedDB function allows attackers to execute arbitrary code.
The vulnerability of the IndexedDB function in Google Chrome browser is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2019-20006
An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlcharcontent puts a pointer to the internal address of a larger block as xml-txt. This is later deallocated using free, leading to a segmentation fault...
Adobe Framemaker 资源管理错误漏洞
Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A memory misreference vulnerability exists in Adobe Framemaker. The vulnerability arises from a mix-up in the...
The vulnerability of the Screen Capture function in Google Chrome browser allows a hacker to execute arbitrary code.
The vulnerability of the Screen Capture function in Google Chrome browser relates to the use of memory after deallocation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created web page from a remote location...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Omnibox, which is caused by a confusion in the program's instructions for freeing memory and can be exploited by attackers to execute arbitrary code on the system or cause a denial of service...
The vulnerability of the Accessibility component in Google Chrome browser allows a perpetrator to access confidential information.
The vulnerability of the Accessibility component in Google Chrome browser relates to memory usage after deallocation. Exploiting this vulnerability could allow an attacker to access confidential information through a specially created web page...
The vulnerability in the command-line utility BusyBox, related to memory usage after deallocation, allows a hacker to execute arbitrary code.
The vulnerability of the BusyBox command-line utility set is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
USN-5163-1: Linux kernel vulnerabilities
Ilja Van Sprundel discovered that the SCTP implementation in the Linux kernel did not properly perform size validations on incoming packets in some situations. An attacker could possibly use this to expose sensitive information kernel memory. CVE-2021-3655 It was discovered that the Option USB Hi...
Ubuntu: Security Advisory (USN-5140-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-38467
A specific function code receives a raw pointer supplied by the user and deallocates this pointer. The user can then control what memory regions will be freed and cause use-after-free condition...
Race condition
A specific function code receives a raw pointer supplied by the user and deallocates this pointer. The user can then control what memory regions will be freed and cause use-after-free condition...
CVE-2021-38467
CVE-2021-38467 (AUVESY Versiondog) is a use-after-free vulnerability described in multiple sources as arising when a function receives a raw user-supplied pointer and deallocates it, allowing control over what memory is freed. The vulnerability affects Versiondog and has high impact on integrity ...
The vulnerability of the CSS Node-css-what selector analyzer, related to memory usage after deallocation, allows a attacker to cause a service failure.
The vulnerability of the CSS Node-css-what selector analyzer is related to an error in checking the size of input data. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
GHSA-VFQX-HV88-F9CV Double-free in id-map
A double free can occur in getorinsert upon a panic of a user-provided f function. getorinsert reserves space for a value, before calling the user provided insertion function f. If the function f panics then uninitialized or previously freed memory can be dropped...
GHSA-QC4M-GC8R-MG8M Double free in alpm-rs
An issue was discovered in the alpm-rs crate through 2020-08-20 for Rust. StrcCtx performs improper memory deallocation...
Double free in alpm-rs
An issue was discovered in the alpm-rs crate through 2020-08-20 for Rust. StrcCtx performs improper memory deallocation...
CVE-2021-38467
A specific function code receives a raw pointer supplied by the user and deallocates this pointer. The user can then control what memory regions will be freed and cause use-after-free condition...
PYSEC-2021-314
TensorFlow is an end-to-end open source platform for machine learning. In affected versions under certain conditions, Go code can trigger a segfault in string deallocation. For string tensors, C.TFTStringDealloc is called during garbage collection within a finalizer function. However, tensor...
