10205 matches found
Adobe Audition Buffer Overflow Info Disclosure
The vulnerability of Adobe Audition relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to access confidential information...
OpenCV Heap Buffer Overflow DoS
The vulnerability of the OptFeature function in the objdetect/src/cascadedetect.hpp component of the computer vision library OpenCV involves reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
Google Chrome Heap Buffer Overflow Info Disclosure
The vulnerability in the Google Chrome web browser relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data through a specially created HTML page...
Libstb Heap Buffer Overflow DoS
The vulnerability of the stbisetflipverticallyonload component in the C/C++ Libstb library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to access confidential data, as well as cause service interruptions through the use of a...
OpenCV predictOrdered() Buffer Overflow DoS
The vulnerability of the predictOrdered function in the objdetect/src/cascadedetect.hpp component of the computer vision library OpenCV involves reading data beyond the permissible buffer size. Exploiting this vulnerability could allow an attacker to gain access to confidential data, as well as...
OFono decode_deliver() Heap Buffer Overflow DoS
The vulnerability of the decodedeliver function in the OFono mobile communication interface is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service...
GNU Binutils Development Environment Heap Buffer Overflow DoS
The vulnerability of the gold/fileread.cc component in the GNU Binutils development environment relates to reading data from buffer files beyond their acceptable limits. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
OpenCV Header Decoder Buffer Overflow DoS
The vulnerability of the cv::HdrDecoder::checkSignature function in the imgcodecs/src/grfmthdr.cpp component of the OpenCV computer vision library is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability could allow an attacker to cause service failures...
GNU Binutils Heap Buffer Overflow DoS
The vulnerability of the dexpression1 function in the cp-demangle.c component of the GNU Binutils development environment is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
EulerOS 2.0 SP9 : ruby (EulerOS-SA-2024-2406)
According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and unge...
EulerOS 2.0 SP9 : ruby (EulerOS-SA-2024-2381)
According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A buffer-overread issue was discovered in StringIO 3.0.1, as distributed in Ruby 3.0.x through 3.0.6 and 3.1.x through 3.1.4. The ungetbyte and unge...
Huawei EulerOS: Security Advisory for openssl (EulerOS-SA-2024-2425)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2024-2406)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2024-2381)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
In Gluster GlusterFS 11.0 there is an xlators/mount/fuse/src/fuse-bridge.c notify stack-based buffer over-read.
...
Dell Precision Rack BIOS security vulnerabilities
Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products from Dell USA. An information disclosure vulnerability exists in the Dell Precision Rack BIOS that originates from accessing a memory location after the end of a buffer. A low-privileged attacker with local acces...
PT-2024-21853 · Samsung · Exynos 1330 +8
Name of the Vulnerable Software and Affected Versions: Samsung Mobile Processor Exynos versions Exynos 980, Exynos 850, Exynos 1080, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 1480, Exynos W920, Exynos W930 Description: An issue was discovered in the function slsi rx blockack ind, where there ...
RUSTSEC-2024-0443 webp crate may expose memory contents when encoding an image
Affected versions of this crate did not check that the input slice passed to "webp::Encoder::encode is large enough for the specified image dimensions. If the input slice is too short, the library will read out of bounds of the buffer and encode other memory contents as an image, resulting in...
OESA-2024-2089 nginx security update
NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module, which might allow an attacker to over-read NGINX worker memory resulting in its...
OESA-2024-2088 nginx security update
NGINX is a free, open-source, high-performance HTTP server and reverse proxy, as well as an IMAP/POP3 proxy server. Security Fixes: NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module, which might allow an attacker to over-read NGINX worker memory resulting in its...