PT-2024-3023 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a memory boundary read and can allow an attacker to disclose protected information. There is no information provided about the estimated number of potentially affect...

The vulnerability of the fromNatStaticSetting() function (/goform/NatStaticSetting) in the Tenda AC18 router software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromNatStaticSetting function /goform/NatStaticSetting in the Tenda AC18 router’s microprogramming system is related to the operation that occurs outside the buffer in memory when processing the page parameter. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the ICMP and ICMPv6 analysis functions of the protocol generator stack used in uC/OS and uC/TCP-IP allows a attacker to cause service interruptions.

The vulnerability of the ICMP and ICMPv6 analysis functions of the ISN stack generator used in uC/OS and uC/TCP-IP is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service failures...

ROS-2-1759

2.1759 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

ROS-2-1374

2.1374 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

ROS-2-1966

2.1966 Multiple vulnerabilities of libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

ROS-2-931

2.931 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

ROS-2-490

2.490 Multiple vulnerabilities of libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

The vulnerability of the kmem_cachedestroy function in the lib/listdebug.c library of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the kmemcachedestroy function in the lib/listdebug.c library of the Linux operating system’s kernel is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cipso_v4_map_lvl_valid function in Linux kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cipsov4maplvlvalid function in Linux kernel relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the ImageIO component in iOS, watchOS, macOS, and iPadOS systems allows attackers to disclose sensitive information that is protected by these systems.

The vulnerability of the ImageIO component in iOS, watchOS, macOS, and iPadOS systems relates to reading beyond the memory boundary. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to reading beyond the memory boundary, allowing a malicious actor to execute arbitrary code.

The vulnerability of Siemens Solid Edge software for design and simulation tools is related to reading beyond the memory limit. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the ff_hevc_put_weighted_pred_avg_8_sse() function in the h.265 Libde265 implementation allows a hacker to cause a service failure.

The vulnerability of the ffhevcputweightedpredavg8sse function in the h.265 Libde265 implementation is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures through the use of a...

The vulnerability of the kernel of operating systems such as Mac OS, tvOS, watchOS, iOS, and iPadOS allows attackers to escalate their privileges, execute arbitrary code, or cause system failures.

The vulnerability of the kernel of operating systems such as Mac OS, tvOS, watchOS, iOS, and iPadOS is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges, execute arbitrary code, or cause...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

Citrix Systems ADC and NetScaler Gateway 缓冲区错误漏洞

NetScaler Gateway is an access gateway with an SSL VPN solution that provides single sign-on and authentication for remote end-users of network assets.NetScaler ADC is an application delivery controller. Both are Citrix products. A denial of service vulnerability exists in Citrix NetScaler ADC an...

The vulnerability of the libavcodec/rpzaenc.c component in the FFmpeg multimedia library allows a perpetrator to gain access to confidential data and also trigger a service failure.

The vulnerability of the libavcodec/rpzaenc.c component in the FFmpeg multimedia library relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain access to confidential data, as well as cause service...

The vulnerability of the fastScanName() function in the QXmlStreamReader class, a cross-platform framework for Qt software development, allows a attacker to cause a service failure.

The vulnerability of the fastScanName function in the QXmlStreamReader class, a cross-platform framework for Qt software development, relates to the issue of operations going beyond the buffer boundaries in memory when processing XML files. Exploiting this vulnerability could allow an attacker to...

The vulnerability in the kernel of operating systems macOS, iOS, iPadOS, tvOS, and watchOS allows a hacker to bypass security restrictions.

The vulnerability in the kernels of operating systems such as macOS, iOS, iPadOS, tvOS, and watchOS relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to circumvent security restrictions...

The vulnerability of the fromAddressNat function in the Tenda AC500 router software allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the fromAddressNat function in Tenda AC500 router microprogramming software is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...