PT-2021-9241

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue is related to an out of bound memory read in the Data modem while unpacking data. This occurs due to a lack of offset length check in various Snapdragon product...

kernel: use-after-free in read in vt_do_kdgkb_ioctl

A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality...

UBUNTU-CVE-2020-1918

In-memory file operations ie: using fopen on a data URI did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory buffer. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, a...

CVE-2020-1918

In-memory file operations ie: using fopen on a data URI did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory buffer. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, a...

CVE-2021-21190

Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

OESA-2021-1048 gstreamer-plugins-good security update

GStreamer is a pipeline-based multimedia framework that links together a wide variety of media processing systems to complete complex workflows, based on graphs of filters which operate on media data. GStreamer supports a wide variety of media-handling components, such as real-time sound processi...

CVE-2021-28030

An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::takebytes...

CVE-2021-28029: Use of Uninitialized Resource

An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read the contents of uninitialized memory locations...

CVE-2021-28030: Use of Uninitialized Resource

An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::takebytes...

PT-2021-14345 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 89.0.4389.72 Description: The issue allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. This was due to an out of bounds read in the WebUI Settings in Google Chrome. The...

nats:fuzz_conf: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5945090507931648 Project: nats Fuzzing Engine: libFuzzer Fuzz Target: fuzzconf Job Type: libfuzzerasannats Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00002dd92ac1 Crash State: NULL Sanitizer: address ASAN Recommended Security...

QNAP NAS devices buffer error vulnerability

A buffer error vulnerability exists in QNAP NAS devices that originates when a network system or product performs an operation in memory without properly validating data boundaries, resulting in an incorrect read or write operation being performed to an associated other memory location. An attack...

Redis ziplist Heap Buffer Overflow DoS

The vulnerability of the ziplist.c component in the Redis database management system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to read a piece of memory and trigger a service failure in the Redis database server using...

Intel XTU Security Vulnerability

A buffer error vulnerability exists in Intel XTU that originates when a networked system or product performs an operation in memory without properly validating the data boundaries, resulting in incorrect read and write operations being performed to other memory locations in the association. An...

cryptofuzz:cryptofuzz-libressl: Crash in _gcry_sha256_transform_amd64_avx2

Detailed Report: https://oss-fuzz.com/testcase?key=4576343276781568 Project: cryptofuzz Fuzzing Engine: libFuzzer Fuzz Target: cryptofuzz-libressl Job Type: libfuzzerasancryptofuzz Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x60e0008c0000 Crash State: gcrysha256transformamd64avx2...

OESA-2021-1029 libtomcrypt security update

LibTomCrypt is a fairly comprehensive, modular and portable cryptographic toolkit that provides developers with a vast array of well known published block ciphers, one-way hash functions, chaining modes, pseudo-random number generators, public key cryptography and a plethora of other routines...

OESA-2021-1023 hunspell security update

Hunspell is a free spell checker and morphological analyzer library and command-line tool, licensed under LGPL/GPL/MPL tri-license.\r\n\r\n Security Fixes:\r\n\r\n Hunspell 1.7.0 has an invalid read operation in SuggestMgr::leftcommonsubstring in suggestmgr.cxx.CVE-2019-16707\r\n\r\n...

Apple FairPlay Buffer Error Vulnerability

Apple FairPlay is a core component of Apple Inc. that is used to provide media playback capabilities to devices. Apple FairPlay suffers from a buffer error vulnerability that exists due to a boundary condition within the FairPlay component in macOS. A native application can trigger an out-of-boun...

Apple macOS Buffer Error Vulnerability

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS that originates from a boundary condition when handling USB files in the Model I / O component of macOS. A local user can insert a specially crafted USB drive to...

Apple CoreMedia Buffer Error Vulnerability

Apple CoreMedia is an Apple Inc. core component used in mobile devices for processing media data. Apple CoreMedia suffers from a buffer error vulnerability that exists due to a boundary condition within the CoreMedia component in macOS. A remote attacker could create a specially crafted image and...