CVE-2023-27969

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, tvOS 16.4, watchOS 9.4. An app may be able to execute arbitrary code with kernel privileges...

The vulnerability of the Radare2 reverse-engineering framework lies in its memory management mechanism after objects are freed. This allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the reverse-engineering framework Radare2 relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

Debian DSA-5397-1 : wpewebkit - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5397 advisory. - Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

CVE-2023-21642

Memory corruption in HAB Memory management due to broad system privileges via physical address...

Memory corruption

Memory corruption in HAB Memory management due to broad system privileges via physical address...

CVE-2023-21642 Improper Access Control in HAB Memory Management

Memory corruption in HAB Memory management due to broad system privileges via physical address...

CVE-2023-21642 Improper Access Control in HAB Memory Management

Memory corruption in HAB Memory management due to broad system privileges via physical address...

Qualcomm 芯片安全漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. a way of miniaturizing circuitry mainly semiconductor devices, but also passive components, etc. and is manufactured from time to time on the surface of semiconductor wafers. A security vulnerability exists in some Qualcomm products that...

PT-2023-18306 · Hab · Hab

Name of the Vulnerable Software and Affected Versions: HAB affected versions not specified Description: The issue is related to memory corruption in HAB Memory management. It occurs due to broad system privileges via physical address, which can lead to memory corruption. Recommendations: At the...

GHSA-CH89-5G45-QWC7 Undefined Behavior in Rust runtime functions

Impact Wasmtime's implementation of managing per-instance state, such as tables and memories, contains LLVM-level undefined behavior. This undefined behavior was found to cause runtime-level issues when compiled with LLVM 16 which causes some writes, which are critical for correctness, to be...

USN-6010-3 firefox regressions

USN-6010-1 fixed vulnerabilities and USN-6010-2 fixed minor regressions in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were...

Rocky Linux 9 : webkit2gtk3 (RLSA-2023:1918)

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:1918 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1, iOS 16.4.1 and iPadOS...

Rocky Linux 8 : webkit2gtk3 (RLSA-2023:1919)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:1919 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1, iOS 16.4.1 and iPadOS...

AlmaLinux 9 : webkit2gtk3 (ALSA-2023:1918)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:1918 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1, iOS 16.4.1 and iPadOS...

Fedora 38 : webkitgtk (2023-5b61346bbe)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5b61346bbe advisory. The Bubblewrap sandbox no longer requires setting an application identifier via GApplication to operate correctly. Using GApplication is still...

AlmaLinux 8 : webkit2gtk3 (ALSA-2023:1919)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:1919 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1, iOS 16.4.1 and iPadOS...

Out-of-Bounds Write

Firefox is vulnerable to Out-of-Bounds Write. A remote local attacker is able to cause out-of-bound writes due to improper memory management operations, resulting in a denial of service or arbitrary code execution...

Out-of-Bounds Write

thunderbird is vulnerable to Out-of-bounds Write. A remote local attacker is able to cause out-of-bound writes due to improper memory management operations, resulting in a denial of service or arbitrary code execution...

RHEL 8 : webkit2gtk3 (RHSA-2023:1919)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1919 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: WebKitGTK: use-after-free leads to arbitrary...

Oracle Linux 9 : webkit2gtk3 (ELSA-2023-1918)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-1918 advisory. 2.36.7-1.3 - Add patch for CVE-2023-28205 Resolves: 2185744 Tenable has extracted the preceding description block directly from the Oracle Linux security...