CVE-2021-40034

The video framework has the memory overwriting vulnerability caused by addition overflow. Successful exploitation of this vulnerability may affect the availability...

golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString

A flaw was found in the big package of the math library in golang. The Rat.SetString could cause an overflow, and if left unhandled, it could lead to excessive memory use. This issue could allow a remote attacker to impact the availability of the system...

The vulnerability of the Mozilla Firefox browser arises from an operation that goes beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Mozilla Firefox browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created website...

The vulnerability of the TestEmail function in the Reolink RLC-410W camera’s microprogramming system allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the TestEmail function in the Reolink RLC-410W camera’s microprogramming system is related to memory overflow. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through...

Juniper is vulnerable to @DOS GraphQL Nested Fragments overflow

GraphQL behaviour Nested fragment in GraphQL might be quite hard to handle depending on the implementation language. Some language support natively a max recursion depth. However, on most compiled languages, you should add a threshold of recursion. graphql Infinite loop example query ...a fragmen...

The vulnerability of the BIOS microprogramming system of Intel processors allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the BIOS microprogramming system of Intel processors is related to writing beyond the memory buffer boundaries. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the mod_isapi module in the Apache HTTP Server allows a hacker to cause a service failure.

The vulnerability of the modisapi module in the Apache HTTP Server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure by sending a specially crafted HTTP request...

The vulnerability of the setstaticroutecfg function in Tenda AC6 software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the setstaticroutecfg function in Tenda AC6 router microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the CODESYS Runtime Toolkit execution environment arises from overflowing buffers in dynamic memory, allowing attackers to trigger a service failure or reallocate memory areas.

The vulnerability of the CODESYS Runtime Toolkit execution environment is due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure or reallocate memory by sending a specially crafted request...

UBUNTU-CVE-2021-41689

DCMTK through 3.6.6 does not handle string copy properly. Sending specific requests to the dcmqrdb program, it would query its database and copy the result even if the result is null, which can incur a head-based overflow. An attacker can use it to launch a DoS attack...

The vulnerability of the Adobe Bridge file manager, related to writing beyond the buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the `ntfs_names_full_collate` function in the NTFS file system, which allows a malicious actor to execute arbitrary code with elevated privileges on the FUSE NTFS-3G module.

The vulnerability of the ntfsnamesfullcollate function in the NTFS file system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges using a specially created NTFS image file...

Null pointer dereference

A NULL pointer dereference vulnerability was found in Ghostscript, which occurs when it tries to render a large number of bits in memory. When allocating a buffer device, it relies on an initdeviceprocs defined for the device that uses it as a prototype that depends upon the number of bits per...

The vulnerability of the pre-processing processor Simcenter Femap, caused by overflow in the dynamic memory buffer, allows a hacker to execute arbitrary code.

The vulnerability of the pre-processing processor Simcenter Femap is caused by an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code during the analysis of specially created NEU files...

The vulnerability of the lrzip.c component: the initialise_control function of the Irzip software, which allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the lrzip.c component, specifically the initialisecontrol function of the Irzip software, arises due to an overflow in the dynamic memory buffer. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

The vulnerability of the DirectX11 user-mode driver of the NVIDIA GPU Display Driver allows a hacker to execute arbitrary code.

The vulnerability of the DirectX11 graphics driver for NVIDIA GPU Display Driver lies in its ability to write data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by injecting a specially crafted shader...

The vulnerability of the “String to CSV conversion” algorithm in the Kernel#Float and String#to_f methods of the Ruby language interpreter allows a attacker to cause a service failure.

The vulnerability of the Stringtof and KernelFloat methods in the Ruby language interpreter involves operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

SUSE SLES12 Security Update : tiff (SUSE-SU-2022:1667-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1667-1 advisory. - CVE-2022-0561: Fixed null source pointer passed as an argument to memcpy within TIFFFetchStripThing in tifdirread.c bsc1195964. -...

PT-2022-3245 · Ntfs-3G +6 · Ntfs-3G +6

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions through 2021.8.22 Description: The issue is related to a buffer overflow vulnerability in the NTFS file system descriptor for the FUSE NTFS-3G module, allowing arbitrary memory read and write operations. This can be exploited...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine arises due to an overflow in the dynamic memory buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...