The vulnerability in the implementation of the acrn_dev_ioctl() function of the ACRN hypervisor service module in Linux kernels allows a attacker to disclose sensitive information or cause service failures.

The vulnerability of the acrndevioctl function implementation in the ACRN HSM service module of Linux operating systems is related to memory release errors. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

Missing Release of Memory after Effective Lifetime

DCMTK through 3.6.6 does not handle memory free properly. The program malloc a heap memory for parsing data, but does not free it when error in parsing. Sending specific requests to the dcmqrdb program incur the memory leak. An attacker can use it to launch a DoS attack...

Adobe Illustrator 资源管理错误漏洞

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A resource management error vulnerability exists in Adobe Illustrator. The vulnerability stems from a mix-up in the program's instructions responsible for freeing memory. An attacker could...

The vulnerability of the ClamAV antivirus software, related to the repeated release of memory, allows a hacker to execute arbitrary code.

The vulnerability of the ClamAV antivirus software is related to repeated memory release. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially created file...

The vulnerability of the llcp_sock_connect() function in the NFC protocol of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the llcpsockconnect function in the NFC protocol of the Linux operating system’s kernel is related to improper memory release before deleting the last references. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Juniper Junos OS FPC Crash (JSA11229)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11229 advisory. A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on PTX Series allows an adjacent attacker...

The vulnerability of the ClamAV antivirus software library and the Cisco AMP security tool for end devices allows a perpetrator to trigger a service failure.

The vulnerability of the ClamAV antivirus software library and the Cisco AMP security tool for end devices is related to memory release errors during HTML file syntax analysis. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the rtrs_clt_dev_release function (drivers/infiniband/ulp/rtrs/rtrs-clt.c) in the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the rtrscltdevrelease function drivers/infiniband/ulp/rtrs/rtrs-clt.c in the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20220516-06

A vulnerability in the high-level Ruby programming language is related to a type conversion bug in the some conversion methods, such as KernelFloat and Stringtof. Exploitation of the vulnerability could allow an attacker acting remotely to pass specially crafted data to a vulnerable application,...

PT-2022-7668 · Realtek · Realtek Rtsuer Driver For Usb Card Reader +1

Name of the Vulnerable Software and Affected Versions: Realtek RtsPer driver for PCIe Card Reader versions prior to 10.0.22000.21355 Realtek RtsUer driver for USB Card Reader versions prior to 10.0.22000.31274 Description: The issue is related to memory release errors in the Realtek SD card reade...

The vulnerability of the zend_ts_hash_gracefuldestroy function (zend_ts_hash.c) in the PHP programming language allows a attacker to cause a service failure or potentially have other adverse effects.

The vulnerability of the zendtshashgracefuldestroy function zendtshash.c in the PHP programming language is related to the repeated release of memory. Exploiting this vulnerability may allow a remote attacker to cause service interruptions or potentially have other adverse effects...

The vulnerability in the function of drivers/bluetooth/virtio_bt.c in the Linux kernel allows a hacker to cause a service failure.

The vulnerability in the driver/bluetooth/virtiobt.c file of the Linux kernel is related to memory release errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Direct Memory Access (DMA) subsystem in Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Direct Memory Access DMA subsystem in Linux operating systems is related to memory release errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the drivers/hid/hid-elo.c component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/hid/hid-elo.c component in the Linux operating system is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2022-23159

Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE and ISIPRIVAUTHPROVIDERS privileges could exploit this vulnerability, leading to a Denial-Of-Service. This can...

Code injection

Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE and ISIPRIVAUTHPROVIDERS privileges could exploit this vulnerability, leading to a Denial-Of-Service. This can...

CVE-2022-23159

Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE and ISIPRIVAUTHPROVIDERS privileges could exploit this vulnerability, leading to a Denial-Of-Service. This can...

CVE-2022-23159

Technical details about CVE-2022-23159 are not publicly provided in the supplied documents; monitor for updates from Dell and CVE sources.

Huawei HarmonyOS DFX module post-release reuse vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A post-release reuse vulnerability exists in the Huawei HarmonyOS DFX module, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from a confusion in the DFX module's instructions for...

HUAWEI HarmonyOS 资源管理错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. A post-release reuse vulnerability exists in the Huawei HarmonyOS DFX module, which provides a microkernel-based, full-scenario distributed operating system. The vulnerability stems from a confusion in the DFX module's instructions for...