DEBIAN-CVE-2024-46812

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration Why Coverity reports Memory - illegal accesses. How Skip inactive planes...

CVE-2024-46802

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: added NULL check at start of dcvalidatestream Why prevent invalid memory access How check if dc and stream are NULL...

DEBIAN-CVE-2024-46802

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: added NULL check at start of dcvalidatestream Why prevent invalid memory access How check if dc and stream are NULL...

AZL-50047 CVE-2024-46802 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: added NULL check at start of dcvalidatestream Why prevent invalid memory access How check if dc and stream are NULL...

UBUNTU-CVE-2024-46802

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: added NULL check at start of dcvalidatestream Why prevent invalid memory access How check if dc and stream are NULL...

CVE-2024-46853 spi: nxp-fspi: fix the KASAN report out-of-bounds bug

In the Linux kernel, the following vulnerability has been resolved: spi: nxp-fspi: fix the KASAN report out-of-bounds bug Change the memcpy length to fix the out-of-bounds issue when writing the data that is not 4 byte aligned to TX FIFO. To reproduce the issue, write 3 bytes data to NOR chip. dd...

CVE-2024-46802 drm/amd/display: added NULL check at start of dc_validate_stream

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: added NULL check at start of dcvalidatestream Why prevent invalid memory access How check if dc and stream are NULL...

CVE-2024-46802

CVE-2024-46802 affects the Linux kernel’s DRM-AMD display path. The vulnerability is a NULL-dereference in drm/amd/display when validating a stream, caused by missing NULL checks for dc or stream. The fixed code adds a NULL check at the start of dc_validate_stream to prevent invalid memory access...

CVE-2024-46802 drm/amd/display: added NULL check at start of dc_validate_stream

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: added NULL check at start of dcvalidatestream Why prevent invalid memory access How check if dc and stream are NULL...

CVE-2024-46802 drm/amd/display: added NULL check at start of dc_validate_stream

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: added NULL check at start of dcvalidatestream Why prevent invalid memory access How check if dc and stream are NULL...

OESA-2024-2179 openssl security update

The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, fully featured, and Open Source toolkit implementing the Secure Sockets Layer SSL v2/v3 and Transport Layer Security TLS v1 protocols as well as a full-strength general purpose cryptography library. The project i...

Google Chrome Type Obfuscation Vulnerability (CNVD-2024-39739)

Google Chrome is a web browser from Google, an American company. A type obfuscation vulnerability exists in Google Chrome versions prior to 129.0.6668.70, which can be exploited by remote attackers to perform out-of-bounds memory access via a crafted HTML page...

Google Chrome Security Bypass Vulnerability (CNVD-2024-39738)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in versions of Google Chrome prior to 129.0.6668.70, which can be exploited by remote attackers to perform memory access via specially crafted Hypertext Markup Language pages...

AlmaLinux 9 : net-snmp (ALSA-2024:7260)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:7260 advisory. net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. CVE-2022-24805 : net-snmp: Imprope...

CVE-2024-46802: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: added NULL check at start of dcvalidatestream Why prevent invalid memory access How check if dc and stream are NULL...

Microsoft Edge (Chromium) < 128.0.2739.97 / 129.0.2792.65 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 128.0.2739.97 / 129.0.2792.65. It is, therefore, affected by multiple vulnerabilities as referenced in the September 26, 2024 advisory. - Use after free in Dawn in Google Chrome on Windows prior to 129.0.6668.70 allowe...

RHEL 9 : net-snmp (RHSA-2024:7260)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7260 advisory. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an...

Direct Memory Access (DMA) attacks. Risks, techniques, and mitigations in hardware hacking

TL;DR Direct Memory Access DMA attacks are a powerful class of attack that give read and write access to the memory of a target system, bypassing the main CPU to gain kernel privileges. We became interested in DMA attacks for expanding the toolkit for rooting embedded devices. A lot of embedded...

SUSE CVE-2024-9121

Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software, related to the occurrence of operations outside the buffer in memory, allows attackers to disclose protected information.

The vulnerability of PDF-XChange Editor’s PDF document viewing and editing software lies in the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created EMF file...