7174 matches found
PT-2022-25182 · Tenda · Tenda Ac21
Name of the Vulnerable Software and Affected Versions: Tenda AC21 version 16.03.08.15 Description: The issue is related to a Buffer Overflow that can occur via the /bin/httpd, specifically in the function formSetQosBand. This can be exploited through the API endpoint "/bin/httpd". The...
Adobe Bridge 缓冲区错误漏洞
Adobe Bridge is a file viewer from Adobe. Adobe Bridge is vulnerable to a buffer overflow vulnerability that stems from an out-of-bounds write vulnerability that could be exploited to execute arbitrary code in the context of the current user...
GSD-2022-1005499 net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions()
net: dsa: sja1105: fix buffer overflow in sja1105setupdevlinkregions This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.63 by commit...
CVE-2022-36402
An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of serviceDoS...
DEBIAN-CVE-2022-36402
An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of serviceDoS...
CVE-2022-36402
An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfxexecbuf.c in GPU component of Linux kernel with device file '/dev/dri/renderD128 or Dxxx'. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of serviceDoS...
CVE-2022-38402 Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Adobe InCopy version 17.3 and earlier and 16.4.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fil...
CVE-2022-38403 Adobe InCopy SVG File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
Adobe InCopy version 17.3 and earlier and 16.4.2 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious fil...
Nikon NIS-Elements Viewer 缓冲区错误漏洞
Nikon NIS-Elements Viewer is a free stand-alone program from Nikon Japan. It is used to view image files and data sets. A buffer error vulnerability exists in Nikon NIS-Elements Viewer version 1.2100.1483.0, which originates from the fact that an attacker can trigger a write operation beyond the...
The vulnerability of the sql_lex.cc component of the MariaDB database, which allows a hacker to cause a service failure.
The vulnerability of the sqllex.cc component of the MariaDB database is related to integer overflow. Exploiting this vulnerability allows an attacker to cause service failures...
The vulnerability of the Audio component in Qualcomm’s embedded software allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the Audio microprogramming component in Qualcomm’s embedded chips is related to a numerical overflow during the playback of WMA format files. Exploiting this vulnerability can allow an attacker to cause system failures or execute arbitrary code...
CVE-2022-36863
A heap-based overflow vulnerability in GetCorrectDbLanguageTypeEsPKc function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...
SUSE-SU-2022:3230-1 Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issues: - CVE-2021-44648: Fixed overflow vulnerability in lzw code size bsc1194633...
PT-2022-23664 · Samsung · Libsdkrecognitiontext.Spensdk.Samsung.So
Name of the Vulnerable Software and Affected Versions: libSDKRecognitionText.spensdk.samsung.so library affected versions not specified Description: A heap-based overflow vulnerability in the LoadEnvironment function allows an attacker to cause a memory access fault. The issue is present in...
SUSE-SU-2022:3191-1 Security update for libEMF
This update for libEMF fixes the following issues: - CVE-2020-13999: Fixed an integer overflow that could lead to denial of service via a crafted file bsc1173070...
SUSE-SU-2022:3153-1 Security update for gdk-pixbuf
This update for gdk-pixbuf fixes the following issues: Update to version 2.42.9: - CVE-2021-44648: Fixed overflow vulnerability in lzw code size bsc1194633. Bugfixes: - Fixed loading of larger images glgoGNOME/gdk-pixbuf216. - Avoided bashism in baselibs postscript bsc1195391...
SUSE-SU-2022:3138-1 Security update for ImageMagick
This update for ImageMagick fixes the following issues: - CVE-2021-20224: Fixed an integer overflow that could be triggered via a crafted file bsc1202800...
CVE-2022-37842
In TOTOLINK A860R V4.1.2cu.5182B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability...
SUSE-SU-2022:3088-1 Security update for the Linux Kernel (Live Patch 29 for SLE 15 SP2)
This update for the Linux Kernel 5.3.18-15020024126 fixes several issues. The following security issues were fixed: - CVE-2020-36516: Fixed an off-path attack via mixed IPID assignment method with the hash-based IPID assignment policy to inject data into a victim's TCP session or terminate that...
