UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a logical error in the camera service that results in reuse after release...

U-tec Ultraloq UL3 Security Breach

The U-tec Ultraloq UL3 is a series of smart door locks from U-tec. A security vulnerability exists in the U-tec Ultraloq UL3 version 02.27.0012, which stems from a session mismanagement and credential reuse issue in the stack, allowing an attacker to sniff the unlock code and unlock the device...

ARM Mali GPU Driver Resource Management Error Vulnerability

ARM Mali GPU Driver is an email driver from ARM UK. A security vulnerability exists in ARM Mali GPU Driver that stems from the presence of a memory reuse after release issue. An attacker can exploit the vulnerability to perform incorrect GPU processing operations to gain access to freed memory. T...

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome version 119.0.6045.199 and prior versions, which stems from a post-release reuse issue in the libavif module...

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome version 119.0.6045.199 and prior versions, which stems from a memory reuse after release issue in the libavif module...

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome version 119.0.6045.199 and prior versions, which stems from a post-release reuse issue in the WebAudio module...

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google Inc. in the United States. A security vulnerability exists in Google Chrome version 119.0.6045.199 and prior versions, which stems from a post-release reuse issue in the Mojo module...

DEBIAN-CVE-2023-45286

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

AZL-32050 CVE-2023-45286 affecting package packer for versions less than 1.8.7-1

A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same bytes.Buffer more than once, when request retries are enabled and a retry occurs. The call to sync.Pool.Get will then return a bytes.Buff...

BusyBox Security Breach

BusyBox is a suite of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian individual developer. A security vulnerability exists in BusyBox version v.1.36.1, which stems from the presence of a post-release reuse vulnerability...

BusyBox Security Breach

BusyBox is a suite of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian individual developer. A security vulnerability exists in BusyBox version v.1.36.1, which stems from the presence of a post-release reuse vulnerability that allows an attacker to cause a...

BusyBox Security Breach

BusyBox is a suite of applications containing several linux commands and tools by Denis Vlasenko, a Ukrainian individual developer. A security vulnerability exists in BusyBox version v.1.36.1, which stems from the presence of a post-release reuse vulnerability...

CVE-2023-49312

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

CVE-2023-49312

Precision Bridge PrecisionBridge.exe aka the thick client before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address...

PT-2023-31162 · Unknown · Precision Bridge

Name of the Vulnerable Software and Affected Versions: Precision Bridge PrecisionBridge.exe versions prior to 7.3.21 Description: The issue allows for an integrity violation where the same license key can be used on multiple systems. This is achieved through vectors involving a Process Hacker...

Precision Bridge Security Vulnerability

Precision Bridge is a data migration and synchronization software from Precision Bridge. Precision Bridge A security vulnerability exists in PrecisionBridge.exe versions prior to 7.3.21, which stems from the use of the same license key on multiple systems via vectors involving Process Hacker memo...

Linux kernel use-after-release vulnerability (CNVD-2024-1477221)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a use-after-free vulnerability, which stems from the presence of a memory reuse-after-free problem that can cause a system crash. An attacker could...

Vim Resource Management Error Vulnerability

Vim is a cross-platform text editor. A resource management error vulnerability exists in Vim versions prior to 9.0.2121, which stems from memory reuse after release...

The vulnerability in the implementation of the J1939 network protocol of the Linux operating system allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the implementation of the J1939 network protocol in Linux operating systems relates to the reutilization of memory previously released by the j1939netdevstart function in the net/can/j1939/main.c module. This occurs due to concurrent access to ndev-mlpriv-j1939priv race...

The vulnerability of the `qxl_gem_object_create_with_handle()` function in the `drivers/gpu/drm/qxl/qxl_gem.c` file of the Linux operating system’s kernel driver QXL allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qxlgemobjectcreatewithhandle function in the drivers/gpu/drm/qxl/qxlgem.c driver of the Linux operating system is related to the reutilization of previously freed memory due to concurrent access to resources. Exploiting this vulnerability could allow an attacker to...