3921 matches found
DEBIAN-CVE-2022-49740
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads This patch fixes slab-out-of-bounds reads in brcmfmac that occur in brcmfconstructchaninfo and brcmfenablebw402g when the count value of channel...
UBUNTU-CVE-2022-49740
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads This patch fixes slab-out-of-bounds reads in brcmfmac that occur in brcmfconstructchaninfo and brcmfenablebw402g when the count value of channel...
CVE-2022-49740 wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads
In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Check the count value of channel spec to prevent out-of-bounds reads This patch fixes slab-out-of-bounds reads in brcmfmac that occur in brcmfconstructchaninfo and brcmfenablebw402g when the count value of channel...
CVE-2022-49740
CVE-2022-49740 concerns the Linux kernel brcmfmac driver. The vulnerability arises when the device-provided channel spec count exceeds the allocated list length in brcmf_construct_chaninfo() and brcmf_enable_bw40_2g(), causing slab-out-of-bounds reads. The patch adds bounds checks so these functi...
RUSTSEC-2025-0033 Public API without sufficient bounds checking
Match::get and Match::ptr lack sufficient bounds checks, leading to potential out of bounds reads...
The vulnerability of the vorbis_analysis_wrote() function in the libsndfile library for reading and writing audio files allows a hacker to execute arbitrary code.
The vulnerability of the vorbisanalysiswrote function in the libsndfile library, a library for reading and writing audio files, is related to reading values outside of the allowed range. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the target system...
The vulnerability of the KVM kernel component in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the kvmvcpuonspin function in the Linux kernel-based KVM component is related to read misses beyond the boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...
ATOPHTTPD 安全漏洞
ATOPHTTPD is a library by the individual developer zhenwei pi. A security vulnerability exists in ATOPHTTPD version 2.8.0, which stems from a difference-one error that could lead to out-of-bounds reads...
Open Asset Import Library（assimp） 缓冲区错误漏洞
Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A buffer error vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from the presence of out-of-bounds reads...
Relative Path Traversal
mlflow is vulnerable to Relative Path Traversal. The vulnerability is due to improper URL handling due to the dbfs service concatenating URLs directly into the file protocol, allowing arbitrary file reads when the service is mounted to a local directory...
Composio 安全漏洞
Composio is a production-ready toolset for AI agents open-sourced by Composio. A security vulnerability exists in Composio version 0.4.3 that stems from a filetools operation that does not validate file paths, which could lead to arbitrary file reads and writes...
MLflow 安全漏洞
MLflow is an open source platform from MLflow that simplifies machine learning development, including tracking experiments, packaging code into repeatable runs, and sharing and deploying models. A security vulnerability exists in MLflow version 2.15.1, which stems from a misconfiguration of the...
AgentScope 跨站请求伪造漏洞
AgentScope is a ModelScope open source application. Build LLM-based multi-intelligence applications more simply. AgentScope suffers from a cross-site request forgery vulnerability that stems from the CORS header on the AgentScope Studio backend server being configured too loosely to allow...
USN-7358-1 postgresql-9.5 vulnerabilities
Wolfgang Walther discovered that PostgreSQL incorrectly tracked tables with row security. A remote attacker could possibly use this issue to perform forbidden reads and modifications. CVE-2024-10976 Jacob Champion discovered that PostgreSQL clients used untrusted server error messages. An attacke...
Applio 信息泄露漏洞
Applio is an open source AI speech conversion tool from Spanish AI Hispano. An information disclosure vulnerability exists in Applio 3.2.8-bugfix and earlier versions, which stems from an arbitrary file read issue in the exportindex function of train.py, which could lead to the reading of arbitra...
Linux FUSE Uninitialized Memory Read
FUSE on Linux has an issue where a page is marked uptodate while actually containing uninitialized data beyond EOF, so uninitialized memory can be read via mmap on systems without init-on-alloc...
The vulnerability of the TIFF Image development platform QNX SDP allows attackers to disclose protected information.
The vulnerability of the TIFF Image development platform QNX SDP relates to reading data beyond the permitted range of memory. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-53150)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53150 advisory. - In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads...
GPT Academic Backlink Vulnerability
GPT Academic is an interface that provides pragmatic interactions for LLM large language models such as GPT/GLM. GPT Academic suffers from a back-linking vulnerability that stems from not properly handling soft links, which can be exploited by an attacker to cause arbitrary file reads...