PT-2023-35786 · Heif · Heif

Name of the Vulnerable Software and Affected Versions: heif affected versions not specified Description: A heap buffer overflow issue was identified, which can cause a crash. The issue occurs in the RegionItem::parse function, specifically when heif::HeifContext interprets a HEIF file or reads fr...

EulerOS 2.0 SP8 : httpd (EulerOS-SA-2023-1596)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header...

The vulnerability of TP-Link Archer AX21 (AX1800)’s microprogramming software allows a remote attacker to execute arbitrary code.

The vulnerability of TP-Link Archer AX21 AX1800 microprogramming software lies in reading data outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-22808

An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0...

CVE-2023-22808

An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0...

Design/Logic Flaw

An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0...

PT-2023-18708 · Arm · Arm Android Gralloc Module

Name of the Vulnerable Software and Affected Versions: Arm Android Gralloc Module versions r24p0 through r41p0 before r42p0 Description: An issue was discovered in the Arm Android Gralloc Module, allowing a non-privileged user to read a small portion of the allocator process memory...

CVE-2023-22808

The CVE-2023-22808 entry describes an improper memory access in the Arm Android Gralloc Module (Mali GPU Kernel Driver) where a non-privileged user can read a small portion of the allocator process memory. Affected are Arm Mali variants: Bifrost r24p0–r41p0 before r42p0, Valhall r24p0–r41p0 befor...

ARM Mali GPU Kernel Driver 缓冲区错误漏洞

ARM Mali GPU Kernel Driver is a driver for a graphics processor unit from ARM UK. A security vulnerability exists in the ARM Mali GPU Kernel Driver that originates from an unprivileged user being able to read a small portion of the allocator process memory...

CVE-2023-22808

An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0...

SUSE CVE-2023-1819

Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2023-1819

Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-1819

Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

Out-of-bounds

Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-1819

Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

Corel CorelDRAW Graphics Suite 缓冲区错误漏洞

Corel CorelDRAW Graphics Suite is a vector graphics editing software from Corel Digital Technology Canada. A buffer overflow vulnerability exists in Corel CorelDRAW Graphics Suite, which can be exploited by an attacker to read more than the end of the allocated object...

CVE-2023-25884

Adobe Dimension versions 3.4.7 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-2785)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2785 advisory. - There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in...

Oracle Linux 8 : openssl (ELSA-2023-12213)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12213 advisory. - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEMreadbioex Resolves: CVE-2022-4450 - Fixed...

PT-2023-8409 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 tvOS versions prior to 16.4 iOS versions prior to 16.4 iPadOS versions prior to 16.4 watchOS versions prior to 9.4 Description: The issue is related to an out-of-bounds read in memory, which may allow a remote...