Lucene search
+L

596 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/09/08 12:00 a.m.•8 views

CVE-2020-3666: Out-of-bounds Write

u'Out of bounds memory access during memory copy while processing Host command' in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrago...

7.8CVSS5.8AI score0.00212EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2020/08/12 11:45 a.m.•24 views

kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c

A flaw was found in the Linux kernel. The Marvell mwifiex driver allows a remote WiFi access point to trigger a heap-based memory buffer overflow due to an incorrect memcpy operation. The highest threat from this vulnerability is to data integrity and system availability...

7.1CVSS6.7AI score0.01218EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/07/29 9:38 p.m.•30 views

kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c

A flaw was found in the Linux kernel. The Marvell mwifiex driver allows a remote WiFi access point to trigger a heap-based memory buffer overflow due to an incorrect memcpy operation. The highest threat from this vulnerability is to data integrity and system availability...

7.1CVSS6.7AI score0.01218EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/07/29 7:40 p.m.•29 views

kernel: heap-based buffer overflow in mwifiex_ret_wmm_get_status function in drivers/net/wireless/marvell/mwifiex/wmm.c

A flaw was found in the Linux kernel. The Marvell mwifiex driver allows a remote WiFi access point to trigger a heap-based memory buffer overflow due to an incorrect memcpy operation. The highest threat from this vulnerability is to data integrity and system availability...

7.1CVSS6.7AI score0.01218EPSS
SaveExploits0References4
NVD
NVD
•added 2020/06/04 4:15 p.m.•27 views

CVE-2020-13765

romcopy in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation...

6.8CVSS6.1AI score0.02398EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2020/06/04 4:15 p.m.•44 views

CVE-2020-13765

romcopy in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation...

5.6CVSS6.9AI score
SaveExploits0References7
osv_debian
osv_debian
•added 2020/06/04 4:15 p.m.•13 views

DEBIAN-CVE-2020-13765

romcopy in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation...

5.6CVSS6.8AI score0.02398EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2020/06/04 4:15 p.m.•39 views

CVE-2020-13765

romcopy in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation...

6.8CVSS6.9AI score0.02398EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2020/06/04 4:15 p.m.•11 views

UBUNTU-CVE-2020-13765

romcopy in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation...

5.6CVSS6.9AI score0.02398EPSS
SaveExploits0References5
Prion
Prion
•added 2020/06/04 4:15 p.m.•31 views

Design/Logic Flaw

romcopy in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation...

6.8CVSS5.2AI score0.02398EPSS
SaveExploits0References7Affected Software3
Cvelist
Cvelist
•added 2020/06/04 3:26 p.m.•38 views

CVE-2020-13765

romcopy in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation...

6.2AI score0.02398EPSS
SaveExploits0References7
Mend
Mend
•added 2020/06/04 3:26 p.m.•2 views

CVE-2020-13765

romcopy in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation...

6.8CVSS0.02398EPSS
SaveExploits0References12
CVE
CVE
•added 2020/06/04 3:26 p.m.•249 views

CVE-2020-13765

CVE-2020-13765 affects QEMU 4.0 and 4.1.0, where rom_copy() in hw/core/loader.c does not validate the relationship between two addresses, enabling an out-of-bounds memory copy and potentially code execution. Public advisories (e.g., Oracle Linux ELSA entries and MiracleLinux AXSA-2021-1371) indic...

6.8CVSS5.7AI score0.02398EPSS
SaveExploits0References7Affected Software1
AlpineLinux
AlpineLinux
•added 2020/06/04 3:26 p.m.•55 views

CVE-2020-13765

romcopy in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation...

6.8CVSS6.1AI score0.02398EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/04 12:00 a.m.•5 views

CVE-2020-13765: Out-of-bounds Write

romcopy in hw/core/loader.c in QEMU 4.0 and 4.1.0 does not validate the relationship between two addresses, which allows attackers to trigger an invalid memory copy operation...

6.8CVSS5.8AI score0.02398EPSS
SaveExploits0References2
NVD
NVD
•added 2020/06/02 3:15 p.m.•34 views

CVE-2020-3616

Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017,...

7.8CVSS7.9AI score0.00226EPSS
SaveExploits0References1
Prion
Prion
•added 2020/06/02 3:15 p.m.•35 views

Buffer overflow

Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017,...

7.2CVSS7.8AI score0.00226EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/06/02 3:05 p.m.•50 views

CVE-2020-3616

Buffer overflow in display function due to memory copy without checking length of size using strcpy function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8017,...

7.9AI score0.00226EPSS
SaveExploits0References1
Veracode
Veracode
•added 2020/04/10 12:22 a.m.•41 views

Information Disclosure

kernel is vulnerable to information disclosure. A security flaw was found in the Linux kernel memory copy routines, when running on certain AMD64 systems. If an unsuccessful attempt to copy kernel memory from source to destination memory locations occurred, the copy routines did not zero the...

4.9CVSS2AI score0.0057EPSS
SaveExploits1References20Affected Software1
CNVD
CNVD
•added 2020/04/08 12:00 a.m.•16 views

Samsung Mobile Device Buffer Overflow Vulnerability (CNVD-2020-31531)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. A buffer overflow vulnerability exists in the 'memcpy' function of the OTP service in Samsung mobile devices powered by the Exynos AP chipset, which stems from a failure to perform...

9.8CVSS7.8AI score0.0044EPSS
SaveExploits0References1
Rows per page
Query Builder