290 matches found
Ethereum Go-ethereum 资源管理错误漏洞
Ethereum Go-ethereum is a codebase from the Ethereum community that implements the ethereum protocol in the Go language. A resource management error vulnerability exists in Ethereum Go-Ethereum that stems from when sending 5,120 unfinished HFO transactions from an account that uses up the entire...
CVE-2021-26706
An issue was discovered in libmem.c in Micrium uC/OS uC/LIB 1.38.x and 1.39.00. The following memory allocation functions do not check for integer overflow when allocating a pool whose size exceeds the address space: MemPoolCreate, MemDynPoolCreate, and MemDynPoolCreateHW. Because these functions...
CVE-2021-26706
An issue was discovered in libmem.c in Micrium uC/OS uC/LIB 1.38.x and 1.39.00. The following memory allocation functions do not check for integer overflow when allocating a pool whose size exceeds the address space: MemPoolCreate, MemDynPoolCreate, and MemDynPoolCreateHW. Because these functions...
CVE-2021-26706
An issue was discovered in libmem.c in Micrium uC/OS uC/LIB 1.38.x and 1.39.00. The following memory allocation functions do not check for integer overflow when allocating a pool whose size exceeds the address space: MemPoolCreate, MemDynPoolCreate, and MemDynPoolCreateHW. Because these functions...
PT-2022-9788
Name of the Vulnerable Software and Affected Versions Micrium uC/OS uC/LIB versions 1.38.x through 1.39.00 Description An issue was discovered in the memory allocation functions Mem PoolCreate, Mem DynPoolCreate, and Mem DynPoolCreateHW in lib mem.c. These functions do not check for integer...
PT-2022-9972
Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description The issue is related to possible out of bound access due to improper validation of item size and DIAG memory pools data. This occurs when switching between USB and PCIE interface ...
Qualcomm 芯片缓冲区错误漏洞
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and are from time to time fabricated on the surface of semiconductor wafers. A buffer error vulnerability exists in multiple Qualcomm products...
GHSA-HF79-8HJP-RRVQ Use After Free in lucet
Impact There is a bug in the main branch of Lucet's lucet-runtime that allows a use-after-free in an Instance object that could result in memory corruption, data race, or other related issues. This bug was introduced early in the development of Lucet and is present in all releases. As a result of...
arrow:arrow-ipc-stream-fuzz: Segv on unknown address in arrow::DefaultBackend
Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=4757582821064704 Project: arrow Fuzzing Engine: libFuzzer Fuzz Target: arrow-ipc-stream-fuzz Job Type: libfuzzerasanarrow Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...
ezXML Out-of-Bounds Write Vulnerability
ezXML is a C library for parsing XML documents . An out-of-bounds write vulnerability exists in the ezxmlnew function in ezXML 0.8.6 and earlier. An attacker can exploit this vulnerability to cause an out-of-bounds write when opening an XML file after the memory pool has been exhausted...
ezXML out-of-bounds write vulnerability (CNVD-2021-11061)
ezXML is a C library for parsing XML documents . An out-of-bounds write vulnerability exists in the ezxmlnew function in ezXML 0.8.6 and earlier. An attacker can exploit this vulnerability to cause an out-of-bounds write when opening an XML file after the memory pool has been exhausted...
ezXML out-of-bounds write vulnerability (CNVD-2021-11062)
ezXML is a C library for parsing XML documents . An out-of-bounds write vulnerability exists in the ezxmltoxml function in ezXML 0.8.6 and earlier. An attacker can exploit this vulnerability to cause an out-of-bounds write when opening an XML file after the memory pool has been exhausted...
Cesanta Mongoose out-of-bounds write vulnerability (CNVD-2021-12086)
Mongoose is a C/C++ network library. An out-of-bounds write vulnerability exists in the mgtlsinit function in Cesanta Mongoose 7.0, 6.7-6.18. An attacker can exploit this vulnerability via a connection request to cause an out-of-bounds write after the memory pool is exhausted...
Cesanta Mongoose out-of-bounds write vulnerability (CNVD-2021-12087)
Mongoose is a C/C++ network library. An out-of-bounds write vulnerability exists in the mghttpservefile function in Cesanta Mongoose 7.0. An attacker can exploit this vulnerability via a connection request to cause an out-of-bounds write after the memory pool is exhausted...
Cesanta Mongoose Out-of-Bounds Write Vulnerability
Mongoose is a C/C++ network library. An out-of-bounds write vulnerability exists in the mgtlsinit function in Cesanta Mongoose 7.0. An attacker can exploit this vulnerability via a connection request to cause an out-of-bounds write after the memory pool is exhausted...
DEBIAN-CVE-2021-26220
The ezxmltoxml function in ezxml 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool...
DEBIAN-CVE-2021-26529
The mgtlsinit function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 compiled with mbedTLS support is vulnerable to remote OOB write attack via connection request after exhausting memory pool...
CVE-2021-26528
The mghttpservefile function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool...