7949 matches found
CVE-2021-0418
CVE-2021-0418 concerns the Mediatek memory management driver, where improper input validation can cause a local system crash leading to denial of service without user interaction. The issue is described across multiple sources (NVD, Red Hat) with the same core weakness. The patch reference provid...
CVE-2021-0418
In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336706...
CVE-2021-0417
CVE-2021-0417 describes a vulnerability in a memory management driver where improper input validation can cause a system crash, leading to local denial of service without extra privileges. The issue is not user-initiated and headers indicate a local attack vector. Connected sources confirm the ro...
CVE-2021-0417
In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336702...
CVE-2021-0416
CVE-2021-0416 concerns the Mediatek memory management driver. The available descriptions state a vulnerability due to improper input validation that can cause a system crash, yielding local denial of service without requiring user interaction. Affected components are described as the memory manag...
CVE-2021-0416
In memory management driver, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS05336700...
CVE-2021-0415
CVE-2021-0415 concerns a vulnerability in the Mediatek memory management driver where a missing permission check can disclose local information without requiring user interaction. The issue affects the in-memory management component (Mediatek chipset context) and enables information leakage with ...
CVE-2021-0415
In memory management driver, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05403499; Issue ID: ALPS0533669...
Google Android 安全特征问题漏洞
Google Android is a Linux-based open source operating system from Google Inc. in the United States. Android suffers from a security signature issue vulnerability that originates from the memory management driver crashing the system due to incorrect input validation. The following products and...
Mediatek 芯片安全漏洞
Mediatek chips are smartphone chipsets from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek chipset, which is caused by a lack of privilege checking in the memory management driver, leading to information disclosure...
Mediatek 芯片输入验证错误漏洞
Mediatek chips are smartphone chipsets from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek chipset, which is caused by a lack of privilege checking in the memory management driver, resulting in the disclosure of information...
PT-2021-13094 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software name or versions are mentioned in the provided descriptions. Description: The issue is related to a memory management driver, where improper input validation can cause a system crash. This can lead to a local denial of...
Mediatek 芯片输入验证错误漏洞
Mediatek chips are smartphone chipsets from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek chip, which originates from a system crash due to incorrect input validation of the memory management driver...
The vulnerability of the MediaCacheStream::NotifyDataReceived method in the Thunderbird email client, as well as in Firefox and Firefox ESR browsers, allows a hacker to execute arbitrary code on the target system.
The vulnerability of the MediaCacheStream::NotifyDataReceived method in the Thunderbird email client, as well as in Firefox and Firefox ESR browsers, is related to a memory management error after deallocation. Exploiting this vulnerability can allow an attacker to remotely trick users into openin...
kernel security, bug fix, and enhancement update
4.18.0-305.12.14.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...
Cisco Firepower Threat Defense Software SNMP DoS (cisco-sa-ftd-snmp-dos-R8ENPbOs)
According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability in the Simple Network Management Protocol SNMP input packet processor that could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly. The...
NicheStack embedded TCP/IP has vulnerabilities
Overview HCC Embedded's software called InterNiche stack NicheStack and NicheLite, which provides TCP/IP networking capability to embedded systems, is impacted by multiple vulnerabilities. The Forescout and JFrog researchers who discovered this set of vulnerabilities have identified these as...
Design/Logic Flaw
arch/x86/kvm/mmu/pagingtmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault...
Linux kernel 安全漏洞
Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable due to a failure to properly access permissions flaw in the shadow page in arch/x86/kvm/mmu/pagingtmpl.h. By sending a build request, a local attacker could exploit this flaw t...
