Adobe Bridge 缓冲区错误漏洞

An out-of-bounds read vulnerability exists in Adobe Bridge, a file viewer from Adobe, which stems from a boundary error when handling untrusted input. A remote attacker could exploit the vulnerability to create a carefully constructed file and trick a victim into opening it, triggering an...

Adobe Acrobat Reader Dc 缓冲区错误漏洞

Adobe Acrobat Reader Dc is a Pdf reading tool from Adobe. Adobe Acrobat Reader Dc has a buffer overflow vulnerability that can be exploited by an attacker to trick a victim into opening a carefully constructed PDF file, triggering an out-of-bounds read error and reading the contents of memory on...

UBUNTU-CVE-2021-36411

An issue has been found in libde265 v1.0.8 due to incorrect access control. A SEGV caused by a READ memory access in function deriveboundaryStrength of deblock.cc has occurred. The vulnerability causes a segmentation fault and application crash, which leads to remote denial of service...

Binaryen 缓冲区错误漏洞

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C++. Binaryen has a stack buffer overflow vulnerability in version 103, which originates when the software printf public function performs an operation in memory, and can be exploited by an attacker to cause...

Window may read from uninitialized memory locations in rdiff

An issue was discovered in the rdiff crate through version 0.1.2 for Rust. Window may read from uninitialized memory locations...

CVE-2021-45692

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializeextensionothers may read from uninitialized memory locations...

CVE-2021-45703

An issue was discovered in the tectonicxdv crate before 0.1.12 for Rust. XdvParser::::process may read from uninitialized memory locations...

Rust rdiff crate 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. rust rdiff crate has a security vulnerability in versions prior to 2021-02-03, which can be exploited to read data from uninitialized memory locations...

CVE-2020-36514

The CVE-2020-36514 issue affects the acc_reader crate for Rust (through 2020-12-27). The vulnerability is that fill_buf (and related read_up_to paths) may read from uninitialized memory, allowing potential memory exposure. Multiple connected advisories (OSV GHSA entries, Red Hat and CNVD entries,...

CVE-2021-45690

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializebinary may read from uninitialized memory locations...

ROS-2-2005

2.2005 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 Vulnerability in the Exim message forwarding agent, related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

CVE-2021-38421

Fuji Electric V-Server Lite and Tellus Lite V-Simulator prior to v4.0.12.0 is vulnerable to an out-of-bounds read, which may allow an attacker to read sensitive information from other memory locations or cause a crash...

postgresql: memory disclosure in certain queries

A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can complete this attack at will. The attack does not require the ability to create objects. If server settings include...

UBUNTU-CVE-2021-0961

In quotaprocwrite of xtquota2.c, there is a possible way to read kernel memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2021-38917

IBM PowerVM Hypervisor FW860, FW940, and FW950 could allow an attacker that gains service access to the FSP can read and write arbitrary host system memory through a series of carefully crafted service procedures. IBM X-Force ID: 210018...

CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...

Security Bulletin: Publicly disclosed vulnerabilities from Kernel affect IBM Netezza Host Management

Summary Kernel is used by IBM Netezza Host Management. This bulletin provides mitigation for the reported CVEs. Vulnerability Details CVEID: CVE-2021-3772 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by improper validation of integrity check value by the Linux SCTP stack...

Bentley ContextCapture 缓冲区错误漏洞

Bentley ContextCapture is a 3D reality modeling software. A buffer error vulnerability exists in Bentley ContextCapture that stems from a boundary condition when parsing an OBJ file. A remote attacker could create a specially crafted file, trick the victim into opening it, trigger an out-of-bound...

SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:3655-1)

The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3655-1 advisory. The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. NOTE: This update was retracted due to a...

openSUSE 15 Security Update : kernel (openSUSE-SU-2021:3655-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3655-1 advisory. The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. NOTE: This update was retracted due to a NFS...