Bytecode Alliance wasmtime numerical error vulnerability

A security vulnerability exists in Bytecode Alliance wasmtime versions prior to 36.0.19 and from 37.0.0 up to versions prior to 43.0.0. This vulnerability stems from the bitpacking of SSA value indices by the backend of the Cranelift compiler. When compiling sufficiently large or specially crafte...

Zimbra Collaboration Suite digital error vulnerability

Versions 10.1.16 and 10.1.20 of the Zimbra Collaboration Suite contain a numerical error vulnerability. This vulnerability stems from improper handling of mailbox quotas; when creating shared files, the document size is included in the total mailbox usage. Upon revocation, only the record is...

Bytecode Alliance wasmtime numeric error vulnerability

Bytecode Alliance: Versions prior to 36.0.16, versions 37.0.0 through 48.0.3, and versions 49.0.0 through 49.0.1 contain a numerical error vulnerability. This vulnerability arises when wasmtime-wasi processes filesystem timestamps; the subsecond field of the atim or mtim value overflows into the...

Vyper numeric error vulnerability

A numerical error vulnerability exists in Vyper versions 0.3.4 through 0.5.0b1. It arises because the createfromblueprint function calculates the remaining blueprint size via a uint256 subtraction without first checking whether codeoffset is smaller than the blueprint’s code size. As a result, a...

Cisco Open Source Snort3 numerical error vulnerability

Multiple versions of Cisco Open Source Snort3, Cisco Secure Firewall Threat Defense FTD software, and Cisco UTD SNORT IPS Engine software contain a numerical error vulnerability. This vulnerability stems from incomplete error checks during Snort 3’s parsing of GRE packet data. It could allow...

Cisco Cyber Vision Digital Error Vulnerability

Cisco Cyber Vision has a numerical error vulnerability, which stems from incorrect calculations and may lead to denial-of-service attacks...

IBM MQ Operator numerical error vulnerability

IBM MQ Operator versions 2.0.0 through 2.0.29, 3.2.0 through 3.2.29, 3.3.0 through 3.4.0 excluding versions prior to 3.4.1, 3.4.1, 3.5.0 through 3.5.3, 3.6.0 through 3.6.4, 3.7.0 through 3.7.2, 3.8.0 through 3.8.1, 3.9.0 through 3.9.2, and 4.0.0 through 4.0.4 contain a numerical error...

Mzanzi Open Source Solutions schroedinger numerical error vulnerability

Mzanzi Open Source Solutions’ schroedinger 1.0.11 and earlier versions have a numerical error vulnerability. This vulnerability arises when slicebytesdenom or the slice count is zero in the Dirac stream. Attackers can exploit this vulnerability by triggering SIGFPE with...

Grigory Chudov: A bug related to numerical errors

Grigory Chudov’s libtta versions 2.3 and earlier have a numerical error vulnerability. This vulnerability stems from the fact that the ttadecoderinitgetinfo function does not validate the zero sampling rate. An attacker can create a .tta file with a recalculated header CRC32, triggering SIGFPE an...

Bytedeco JavaCV numerical error vulnerability

Bytedeco JavaCV versions prior to 1.5.14 have a numerical error vulnerability. This vulnerability stems from IPCameraFrameGrabber not checking for overflow or limiting the Content-Length when doubling the 32-bit buffer capacity. Malicious camera endpoints or tampered plaintext streams can return ...

Microsoft Office Word numerical error vulnerability

Microsoft Office Word has a numerical error vulnerability, which stems from the rounding error in Microsoft Office Word. This vulnerability could allow unauthorized attackers to execute code via the network...

Telegram numerical error vulnerability

Telegram version 6.6.2 has a numerical error vulnerability, which stems from the rlottie library’s numerical truncation errors. There is a lack of proper validation of the data provided by users. This can lead to data being written before the allocated buffer starting position. Attackers can...

Nick James Kirkby iso14229 Digital Error Vulnerability

Nick James Kirkby’s version of iso14229 0.10.1 and earlier contains a numerical error vulnerability. This vulnerability stems from an integer wrap around issue in Handle0x38RequestFileTransfer. Unauthenticated attackers can bypass the file path length check by sending a RequestFileTransfer SID 0x...

Mozilla Firefox Digital Error Vulnerability

Versions of Mozilla Firefox prior to 153 contain a numerical error vulnerability, which stems from an integer overflow issue in the Audio/Video component...

Microsoft Windows Performance Monitor numerical error vulnerability

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. The Microsoft Windows Performance Monitor has a numerical error vulnerability. Attackers can exploit this vulnerability to execute code. The following products and versions are affected: Windows 1...

Wireapp wire-ios numerical error vulnerability

wire-ios is the client layer that handles all data displayed in mobile applications. Versions of wire-ios prior to 4.16.0 have a numerical error vulnerability, which stems from a lack of length checking. This vulnerability may lead to crashes when receiving specially crafted malicious Proteus...

Intel QAT software drivers for Windows – Digital error vulnerabilities

Intel QAT software drivers for Windows are a set of encryption and compression hardware acceleration drivers for the Windows platform developed by Intel Corporation. Versions of Intel QAT software drivers for Windows prior to version 1.13 contain a numerical error vulnerability. This vulnerabilit...

Modsecurity numerical error vulnerabilities

Modsecurity is an open-source web traffic security processing library developed by OWASP ModSecurity. Versions of Modsecurity from 3.0.0 to 3.0.15 contained a numerical error vulnerability. This vulnerability stemmed from an unsigned integer underflow, which led to unhandled exceptions and could...

bettercap: Numerical error vulnerability

Bettercap is an open-source framework for network attacks and security testing developed by Bettercap. Versions of Bettercap 2.41.5 and earlier contained a numerical error vulnerability. This vulnerability stemmed from an integer coercion conversion error in the ippReadChunkedBody function within...

bettercap: Numerical error vulnerability

Bettercap is an open-source framework for network attacks and security testing developed by Bettercap. Versions of Bettercap 2.41.5 and earlier contain a numerical error vulnerability. This vulnerability stems from an unknown function in the modules/mysqlserver/mysqlserver.go file of the MySQL...