SUSE CVE-2021-29606

TensorFlow is an end-to-end open source platform for machine learning. A specially crafted TFLite model could trigger an OOB read on heap in the TFLite implementation of...

SUSE CVE-2021-37659

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all binary cwise operations that don't require broadcasting e.g., gradients of binary cwise operations. The implementatio...

SUSE CVE-2022-21726

Tensorflow is an Open Source Machine Learning Framework. The implementation of Dequantize does not fully validate the value of axis and can result in heap OOB accesses. The axis argument can be -1 the default value for the optional argument or any other positive value at most the number of...

RHEL 7 : qemu-kvm-rhev bug fix update (Important) (RHSA-2020:2342)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2342 advisory. - QEMU: slirp: heap buffer overflow during packet reassembly CVE-2019-14378 - QEMU: slirp: OOB buffer access while emulating tcp protocols i...

RHEL 8 : virt:8.1 (RHSA-2020:1261)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1261 advisory. The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Re...

Update now! Two critical flaws in Git's code found, patched

In a sponsored security source code audit, security experts from X41 D-SEC GmbH Eric Sesterhenn and Markus Vervier and GitLab Joern Schneeweisz found two notable critical flaws in Git's code. A vulnerability on Git could generally compromise source code repositories and developer systems, but...

GSD-2023-1001641 hfs: Fix OOB Write in hfs_asc2mac

hfs: Fix OOB Write in hfsasc2mac This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.337 by commit 8399318b13dc9e0569dee07ba2994098926d4fb2, it...

GSD-2023-1001490 hfs: Fix OOB Write in hfs_asc2mac

hfs: Fix OOB Write in hfsasc2mac This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.163 by commit cff9fefdfbf5744afbb6d70bff2b49ec2065d23d, i...

GSD-2023-1001189 hfs: Fix OOB Write in hfs_asc2mac

hfs: Fix OOB Write in hfsasc2mac This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.86 by commit 7af9cb8cbb81308ce4b06cc7164267faccbf75dd, it...

GSD-2023-1000598 hfs: fix OOB Read in __hfs_brec_find

hfs: fix OOB Read in hfsbrecfind This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit e9e692917c6e10a7066c7a6d092dcdc3d4e329f3. For...

GSD-2023-1000375 iio: health: afe4403: Fix oob read in afe4403_read_raw

iio: health: afe4403: Fix oob read in afe4403readraw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.301 by commit...

GSD-2023-1000103 iio: health: afe4404: Fix oob read in afe4404_[read|write]_raw

iio: health: afe4404: Fix oob read in afe4404read|writeraw This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.12 by commit...

CVE-2022-32647

CVE-2022-32647 affects the ccu component and is described as an out-of-bounds write caused by improper input validation. The impact is local escalation of privilege with system execution privileges required, and exploitation is possible without user interaction. Remediation: patch identified as A...

CVE-2022-20554

In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-245770596...

Design/Logic Flaw

In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-245770596...

CVE-2022-20554

In removeEventHubDevice of InputDevice.cpp, there is a possible OOB read due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-245770596...

PT-2022-14766 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out-of-bounds OOB read due to a use after free in the removeEventHubDevice function of InputDevice.cpp. This could lead to local escalation of privilege, requiring...

CVE-2022-20554

CVE-2022-20554 affects Android 13 in Pixel devices. The vulnerability arises from an out-of-bounds read caused by a use-after-free in the function removeEventHubDevice within InputDevice.cpp. This leads to local elevation of privilege with System execution privileges required, and exploitation do...

CVE-2022-45313

Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process. This vulnerability allows attackers to execute arbitrary code via a crafted nova message...

ASB-A-242459126

In several functions that parse avrc response in avrcparsct.cc and related files, there are possible out of bounds reads due to integer overflows. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...