CVE-2020-10368: Insecure Storage of Sensitive Information

Certain Cypress and Broadcom Wireless Combo chips, when a January 2021 firmware update is not present, allow memory read access via a "Spectra" attack...

CVE-2020-10368

Certain Cypress (and Broadcom) Wireless Combo chips are vulnerable to memory read access via a "Spectra" attack . This issue affects hardware versions that lack the January 2021 firmware update . To mitigate this risk, users are urged to update to the latest firmware and apply all recommended pat...

pywasm3 has an Invalid Memory Read, Leading to DoS and Potential Code Execution

wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution...

GHSA-MHG9-MM8C-C683 pywasm3 has an Invalid Memory Read, Leading to DoS and Potential Code Execution

wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution...

PYSEC-2024-304

wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution...

PYSEC-2024-304

wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution...

CVE-2024-27528

wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to an invalid memory read operation. Remediation There is no fixed version for pywasm3. References - GitHub Gist - GitHub Issue Credit: Ziyi Guo...

EulerOS 2.0 SP9 : c-ares (EulerOS-SA-2024-2808)

According to the versions of the c-ares package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : c-ares is a C library for asynchronous DNS requests. aresreadline is used to parse local configuration files such as /etc/resolv.conf, /etc/...

CVE-2024-27528

wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution...

PT-2024-21934 · Wasm3 · Wasm3

Name of the Vulnerable Software and Affected Versions: wasm3 version 139076a Description: The issue is related to an Invalid Memory Read, which can lead to Denial of Service DoS and potentially allow for Code Execution. Recommendations: For wasm3 version 139076a, at the moment, there is no...

CVE-2024-27528

wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution...

CVE-2024-27528: Out-of-bounds Read

wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution...

OpenEXR: Heap Overflow in Scanline Deep Data Parsing

A vulnerability was found in the Academy Software Foundation OpenEXR and requires that a malicious EXR file image is parsed by the target device or environment using OpenEXR. This issue occurs due to a failure in validating the number of scanline samples of an OpenEXR file containing deep scanlin...

hw: cpu: intel: Native Branch History Injection (BHI)

A flaw was found in some Intel CPUs where mitigations for the Spectre V2/BHI vulnerability were incomplete. This issue may allow an attacker to read arbitrary memory, compromising system integrity and exposing sensitive information...

hw: cpu: intel: Native Branch History Injection (BHI)

A flaw was found in some Intel CPUs where mitigations for the Spectre V2/BHI vulnerability were incomplete. This issue may allow an attacker to read arbitrary memory, compromising system integrity and exposing sensitive information...

FreeBSD -- Multiple issues in the bhyve hypervisor

Problem Description: Several vulnerabilities were found in the bhyve hypervisor's device models. The NVMe driver function nvmeopcgetlogpage is vulnerable to a buffer over- read from a guest-controlled value. CVE-2024-51562 The virtiovqrecordon function is subject to a time-of-check to time-of-use...

Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2024-2714)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.12.0 : krb5 (EulerOS-SA-2024-2770)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending...

PYSEC-2024-294

A segmentation fault SEGV was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address 0x1000c9714971...