GHSA-GP3W-2V2M-P686 Vyper's external calls can overflow return data to return input buffer

Summary When calls to external contracts are made, we write the input buffer starting at byte 28, and allocate the return buffer to start at byte 0 overlapping with the input buffer. When checking RETURNDATASIZE for dynamic types, the size is compared only to the minimum allowed size for that typ...

The vulnerability of the amdgpu_cs_wait_all_fences() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c driver for AMD Radeon graphics cards in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the amdgpucswaitallfences function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c driver for AMD Radeon graphics cards in the Linux operating system is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability...

The vulnerability of the IGMPv2 protocol implementation in the Linux operating system allows a hacker to gain access to protected information.

The vulnerability of the IGMPv2 protocol implementation in Linux operating systems is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the wb inode_writeback_end() function in the mm/page-writeback.c module of the Linux kernel’s memory management subsystem allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the wb inodewritebackend function in the mm/page-writeback.c module of the Linux kernel’s memory management subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the do_vcc_ioctl() function in the net/atm/ioctl.c module, which implements the ATM network protocol in the Linux operating system’s kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dovccioctl function in the net/atm/ioctl.c module, which implements the ATM network protocol in the Linux operating system, is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attack...

The vulnerability of the atalk_ioctl() function in the net/appletalk/ddp.c module, which is part of the AppleTalk protocol implementation in the Linux kernel, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the atalkioctl function in the net/appletalk/ddp.c module, which implements the Appletalk protocol in the Linux kernel, is related to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to...

UBUNTU-CVE-2024-0217

A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any...

The vulnerability of the igmp_start_timer() function in the net/ipv4/igmp.c module of the Linux operating system’s IGMP protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, thereby increasing their privileges within the system.

The vulnerability of the igmpstarttimer function in the net/ipv4/igmp.c module, which is part of the IGMP protocol implementation in Linux kernel, relates to the reutilization of previously freed memory due to competitive access to resources i.e., during a “race condition”. Exploiting this...

PT-2023-8473 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A race condition was found in the Linux Kernel, related to the reuse of previously freed memory due to concurrent access to a resource in the fib6 add function in the net/ipv6/ip6 fib....

ARM Mali GPU Driver Resource Management Error Vulnerability

ARM Mali GPU Driver is an email driver from ARM UK. A security vulnerability exists in ARM Mali GPU Driver that stems from the presence of a memory reuse after release issue. An attacker can exploit the vulnerability to perform incorrect GPU processing operations to gain access to freed memory. T...

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome version 119.0.6045.199 and prior versions, which stems from a memory reuse after release issue in the libavif module...

Linux kernel use-after-release vulnerability (CNVD-2024-1477221)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a use-after-free vulnerability, which stems from the presence of a memory reuse-after-free problem that can cause a system crash. An attacker could...

Vim Resource Management Error Vulnerability

Vim is a cross-platform text editor. A resource management error vulnerability exists in Vim versions prior to 9.0.2121, which stems from memory reuse after release...

The vulnerability in the implementation of the J1939 network protocol of the Linux operating system allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the implementation of the J1939 network protocol in Linux operating systems relates to the reutilization of memory previously released by the j1939netdevstart function in the net/can/j1939/main.c module. This occurs due to concurrent access to ndev-mlpriv-j1939priv race...

The vulnerability of the nft_trans_gc_catchall() function in the net/netfilter/nf_tables_api.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, or to enhance their privileges.

The vulnerability of the nfttransgccatchall function in the net/netfilter/nftablesapi.c module of the Linux operating system is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

The vulnerability of the `qxl_gem_object_create_with_handle()` function in the `drivers/gpu/drm/qxl/qxl_gem.c` file of the Linux operating system’s kernel driver QXL allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qxlgemobjectcreatewithhandle function in the drivers/gpu/drm/qxl/qxlgem.c driver of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to...

Liblisp Security Vulnerabilities

Liblisp is James personal developer of a lisp interpreter. The library can be written in c99. Liblisp has a security vulnerability that stems from a memory reuse after release problem...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that originates from memory reuse after release, leading to a system crash. An attacker can exploit the vulnerability to...

xorg-x11-server Resource Management Error Vulnerability

xorg-x11-server is an X Window System display server from the X.org Foundation. A security vulnerability exists in xorg-x11-server-Xvfb, which stems from the presence of a memory reuse after release issue...

xorg-x11-server Resource Management Error Vulnerability

xorg-x11-server is an X Window System display server from the X.org Foundation. A security vulnerability exists in xorg-x11-server that stems from the presence of a memory reuse after release issue...