The vulnerability of the Snort module of the microprogramming software for Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to trigger a service failure.

The vulnerability of the Snort module of the microprogramming software for Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause...

PT-2025-7896

Name of the Vulnerable Software and Affected Versions X.Org and Xwayland affected versions not specified Description An out-of-bounds write flaw was found in the function GetBarrierDevice, which searches for the pointer device based on its device ID. If no matching device ID is found, the code...

CVE-2024-47892

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...

CVE-2024-47892 GPU DDK - UAF of kernel memory in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory (UMA)

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...

CVE-2024-47892

A Use After Free (UAF) vulnerability exists in the Imagination GPU Driver (specifically within the GPU DDK ). A non-privileged user can conduct GPU system calls to read and write freed physical memory from the GPU, specifically involving PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in s...

CVE-2024-46971

The Imagination GPU Driver is affected by a Use After Free (UAF) vulnerability. Software running as a non-privileged user can conduct GPU system calls to read and write freed physical memory from the GPU. This issue specifically involves the PMRUnlockSysPhysAddressesLocalMem function for on-deman...

CVE-2024-46971 GPU DDK - UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systems

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...

SUSE CVE-2024-47543

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemuxparsecontainer function within qtdemux.c. In the parent function qtdemuxparsenode, the value of length is not well checked. So, if length is big enough, it causes t...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-50148)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50148 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: fix wild-memory- access...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-47757)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47757 advisory. - In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-53063)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53063 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out o...

CVE-2024-47834

A flaw was found in the GStreamer library. A use-after-free in the Matroska demuxer can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash...

media: dvbdev: prevent the risk of out of memory access

...

RDMA/bnxt_re: Fix a bug while setting up Level-2 PBL pages

...

RDMA/mad: Improve handling of timed out WRs of mad agent

...

Bluetooth: bnep: fix wild-memory-access in proto_unregister

...

CVE-2024-47834

GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing of CodecPrivate elements in Matroska streams. In the GSTMATROSKAIDCODECPRIVATE case within the gstmatroskademuxparsestream function, a dat...

AZL-62402 CVE-2024-47834 affecting package gstreamer1 1.20.0-2

GStreamer is a library for constructing graphs of media-handling components. An Use-After-Free read vulnerability has been discovered affecting the processing of CodecPrivate elements in Matroska streams. In the GSTMATROSKAIDCODECPRIVATE case within the gstmatroskademuxparsestream function, a dat...

CVE-2024-47596

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemuxparsesvq3stsddata function within qtdemux.c. In the FOURCCSMI case, seqhsize is read from the input file without proper validation. If seqhsize is greater than the remaining...

DEBIAN-CVE-2024-47543

GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemuxparsecontainer function within qtdemux.c. In the parent function qtdemuxparsenode, the value of length is not well checked. So, if length is big enough, it causes t...