43 matches found
CVE-2024-41149 block: avoid to reuse `hctx` not removed from cpuhp callback list
In the Linux kernel, the following vulnerability has been resolved: block: avoid to reuse hctx not removed from cpuhp callback list If the 'hctx' isn't removed from cpuhp callback list, we can't reuse it, otherwise use-after-free may be triggered...
ROS-20241218-01
Vulnerability of the kmallocreserve function in the net/core/skbuff.c module of the network subsystem of the Linux kernel is related to integer overflow. Linux kernel subsystem is related to integer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
Unspecified vulnerability in Linux kernel (CNVD-2024-46441)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a security vulnerability that stems from memory reuse after release. No details of the vulnerability are provided at this time...
The vulnerability of the hugetlb_fault() function in the Linux kernel’s memory management subsystem allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the hugetlbfault function in the mm/hugetlb.c module of the Linux kernel’s memory management subsystem is related to the repeated use of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
Foxit PDF Reader 安全漏洞
Foxit PDF Reader is a PDF reader from the Chinese company Foxit. A security vulnerability exists in Foxit PDF Reader, which originates from a post-release reuse issue in the AcroForm module that could result in remote code execution...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue...
Google Chrome Security Vulnerability
Google Chrome is a web browser from Google, Inc. A security vulnerability previously existed in Google Chrome version 122.0.6261.57, which stemmed from a post-release reuse issue in the Mojo module...
Linux kernel use-after-release vulnerability (CNVD-2024-1477221)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a use-after-free vulnerability, which stems from the presence of a memory reuse-after-free problem that can cause a system crash. An attacker could...
WhatsApp Competitive Conditions Issue Vulnerability
WhatsApp is a suite of mobile applications from the American company WhatsApp that use the Internet to send text messages. The application uses contact information in a smartphone to find contacts using the software to send text, images, etc. A security vulnerability exists in WhatsApp that stems...
PT-2023-8796
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the btrfs component of the Linux kernel, where a vulnerability in the btrfs insert delayed dir index function could lead to a denial of service. Instead of callin...
GPAC 资源管理错误漏洞
GPAC is an open source multimedia framework. A security vulnerability exists in GPAC v2.3, which originates from the inclusion of heap reuse after release via the gfbsalign function in bitstream.c, allowing an attacker to cause a denial of service DoS by supplying a crafted file...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. A security vulnerability previously existed in Google Chrome version 116.0.5845.110, which stemmed from a post-release reuse issue in the Loader module...
Mozilla Firefox 资源管理错误漏洞
Mozilla Firefox is an open source web browser from the Mozilla Foundation. A security vulnerability exists in Mozilla Firefox, which stems from a post-release reuse issue...
PT-2023-22170 · Malwarebytes · Malwarebytes Edr
Name of the Vulnerable Software and Affected Versions: Malwarebytes EDR version 1.0.11 Description: The issue allows bypassing detection layers that rely on inode identifiers. This is possible because an identifier may be reused when a file is replaced, and two files on different filesystems can...
CVE-2023-31287
An issue was discovered in Serenity Serene and StartSharp before 6.7.0. Password reset links are sent by email. A link contains a token that is used to reset the password. This token remains valid even after the password reset and can be used a second time to change the password of the...
Adobe Acrobat Reader Resource Management Error Vulnerability (CNVD-2023-55034)
Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader suffers from a resource management error vulnerability that stems from the presence of a post-release reuse issue, which can be exploited by an...
AZL-34606 CVE-2023-27536 affecting package cmake for versions less than 3.28.2-1
An authentication bypass vulnerability exists libcurl 8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPTGSSAPIDELEGATION option. This vulnerability affects...
CVE-2022-39393
Wasmtime is a standalone runtime for WebAssembly. Prior to versions 2.0.2 and 1.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator where when a linear memory is reused for another instance the initial heap snapshot of the prior instance can be visible, erroneously ...
MediaTek 芯片竞争条件问题漏洞
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in MediaTek vcu, which stems from a memory reuse after release issue...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc.V8 is an open source JavaScript engine. A resource management error vulnerability exists in Google Chrome that stems from the presence of a post-release reuse issue...