The vulnerability of the Libmspack library and the CAB-file decompression utility SabExtract, which allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Libmspack library mspack/cab.h and the CAB-file decompression utilities provided by SabExtract are related to memory buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause system failures remotely...

PT-2023-1054

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free flaw was found in the Linux kernel’s nouveau driver, related to how a user triggers a memory overflow that causes the nvkm vma tail function to fail. This issue allows a...

The vulnerability of the _bfd_generic_read_minisymbols function in the GNU Binutils set of system utilities, related to memory overflow, allows an attacker to trigger a service failure.

The vulnerability of the bfdgenericreadminisymbols function in the descriptor library BFD, which is included in the GNU Binutils package, is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially crafted ELF file...

Marvell Avastar wireless SoCs have multiple vulnerabilities

Overview Some Marvell Avastar wireless system on chip SoC models have multiple vulnerabilities, including a block pool overflow during Wi-Fi network scan. Description A presentation at the ZeroNights 2018 conference describes multiple security issues with Marvell Avastar SoCs models 88W8787,...

The vulnerability of the Win32k component in Windows operating systems allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the Win32k.sys component in Windows operating systems arises due to an overflow in memory buffers. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created application...

CVE-2019-6983

The CVE-2019-6983 issue affects Foxit 3D Plugin Beta in Foxit Reader/PhantomPDF prior to 9.4.0.16807. The vulnerability is an Integer Overflow in the 3D content handling path that can cause a crash via freeing memory in certain crafted PDF files containing 3D content. No exploit details are provi...

The vulnerability of Siemens Sinumerik CNC microprogramming software, related to overflow in dynamic memory, allows a intruder to execute arbitrary code.

The vulnerability of Siemens Sinumerik CNC microprogramming software is related to overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with privileged privileges by sending specially crafted packets via port 4842/TCP...

Tron Foundation: DOS attack by consuming all CPU and using all available memory

Summary: A single request to submit a post to /wallet/deploycontract with several megabytes of bytecode along with CPU intensive long parsing will consume CPU for about 10 minutes while still holding several megabytes of bytecode in heap. With enough requests lets say 1K-10K depending upon...

VBScript - VbsErase Reference Leak Use-After-Free

VBScript - VbsErase Reference Leak Use-After-Free There is an reference leak in Microsoft VBScript that can be turned into an use-after-free given sufficient time. The vulnerability has been confirmed in Internet Explorer on various Windows versions with the latest patches applied. Details:...

The vulnerability of the `pack` function in the Perl interpreter allows attackers to cause service failures, gain access to confidential data, or compromise its integrity.

The vulnerability of the pack function in the Perl interpreter is related to an error that causes overflow in the dynamic memory when writing data to it during operations involving a large number of elements within the pack function. Exploiting this vulnerability allows a remote attacker to execu...

Mozilla Firefox and Firefox ESR integer overflow vulnerability (CNVD-2018-25865)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. A security vulnerability exists in Mozilla Firefox version 63 and Firefox ESR version 60.3. An...

The vulnerability of Qualcomm Biometrics’ component in the Android operating system allows a perpetrator to execute arbitrary code.

The vulnerability of Qualcomm Biometrics’ component in the Android operating system is caused by an overflow in the memory buffer. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browsers allows attackers to increase their privileges.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge browsers is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

Two Zero-Day Bugs Open Millions of Wireless Access Points to Attack

UPDATE Two zero-day vulnerabilities in Bluetooth Low-Energy chips made by Texas Instruments and used in millions of wireless access points open corporate networks to crippling stealth attacks. Adversaries can exploit the bugs by simply being approximately 100 to 300 feet from the vulnerable...

glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper

A buffer overflow has been discovered in the GNU C Library aka glibc or libc6 in the mempcpyavx512novzeroupper function when particular conditions are met. An attacker could use this vulnerability to cause a denial of service or potentially execute code...

Just Answering A Video Call Could Compromise Your WhatsApp Account

What if just receiving a video call on WhatsApp could hack your smartphone? This sounds filmy, but Google Project Zero security researcher Natalie Silvanovich found a critical vulnerability in WhatsApp messenger that could have allowed hackers to remotely take full control of your WhatsApp just b...

CVE-2018-17942

The converttodecimal function in vasnprintf.c in Gnulib before 2018-09-23 has a heap-based buffer overflow because memory is not allocated for a trailing '\0' character during %f processing...

CVE-2018-17076

The CVE-2018-17076 issue affects GPP up to version 2.25. The root cause is that processing a crafted file can cause excessive stack usage, leading to a segmentation fault or potentially other impact. The available documents confirm the vulnerability and its memory-related stack overflow behavior,...

The vulnerability of JavaScript script handlers in Internet Explorer allows a perpetrator to execute arbitrary code.

The vulnerability of JavaScript script handlers in Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted web page or document...

Microsoft Edge browser’s vulnerability, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...