The vulnerability of the gf_filter_pid_inst_swap function in the MP4Box multimedia platform GPAC allows a intruder to cause a service failure or execute arbitrary code.

The vulnerability of the gffilterpidinstswap function in the MP4Box multimedia platform of GPAC relates to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the gf_filter_pid_reconfigure_task_discard function in the MP4Box multimedia platform of GPAC allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the gffilterpidreconfiguretaskdiscard function in the MP4Box utility of the GPAC multimedia platform is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

Qwik 安全漏洞

Qwik is a micro web framework open-sourced by Qwik Dev. A security vulnerability exists in Qwik versions prior to 1.13.0, which stems from an unhandled invalid qfunc error that could cause the service to crash...

The vulnerability of the Blink rendering module in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Blink module in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure...

The vulnerability of the library for working with the DICOM format in DCMT, related to the occurrence of operations outside the buffer in memory, allows a malicious actor to trigger a service failure.

The vulnerability of the library for working with the DICOM format in DCMT is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created DICOM file...

The vulnerability of the built-in boa server (/boafrm/formIpv6Setup) of the TOTOLINK EX1200T router’s microprogramming software allows a intruder to cause a service failure.

The vulnerability of the built-in boa server /boafrm/formIpv6Setup of the TOTOLINK EX1200T router’s microprogramming software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the submit-url parameter. Exploiting this vulnerability allows a malicio...

The vulnerability of the sctp_rcv_ootb() function in the net/sctp/input.c module of the Linux operating system’s SCTP protocol implementation allows a attacker to cause a service failure.

The vulnerability of the sctprcvootb function in the net/sctp/input.c module of the Linux operating system’s SCTP protocol implementation is related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the set_cluster_dirty() function in the fs/f2fs/compress.c module of the F2FS file system support in Linux kernel allows a malicious actor to gain access to protected information or cause service failures.

The vulnerability of the setclusterdirty function in the fs/f2fs/compress.c module of the F2FS file system support in Linux kernel relates to incorrect input validation. Exploiting this vulnerability may allow an attacker to access protected information or cause service failures...

The vulnerability of the gfs2_scan_glock_lru() function in the fs/gfs2/glock.c module of the GFS2 file system support module for Linux’s operating system allows a hacker to cause a service failure.

The vulnerability of the gfs2scanglocklru function in the fs/gfs2/glock.c module of the GFS2 file system support in Linux’s operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the svc_create_socket() function in the net/sunrpc/svcsock.c module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.

The vulnerability of the svccreatesocket function in the net/sunrpc/svcsock.c module of the Linux operating system’s RPC implementation is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rpcrdma_reply_handler() function in the net/sunrpc/xprtrdma/rpc_rdma.c module of the Linux operating system’s RPC protocol implementation allows a attacker to cause a service failure.

The vulnerability of the rpcrdmareplyhandler function in the net/sunrpc/xprtrdma/rpcrdma.c module of the Linux operating system’s RPC protocol implementation is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cake_get_tcphdr() function in the net/sched/sch_cake.c module of the network scheduling subsystem of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the cakegettcphdr function in the net/sched/schcake.c module of the network scheduling subsystem of the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the hashmapsetwithhash function in the gumbo-parser/src/hashmap.c file. An attacker can cause a crash or disrupt service by providing crafted input. Note: According to the maintainer of the package the cod...

D-Link DIR-665 Buffer Overflow Vulnerability

The D-Link DIR-665 is a high-performance wireless router that belongs to D-Link's flagship product. A buffer overflow vulnerability exists in the D-Link DIR-665. The vulnerability stems from a stack buffer overflow in the function subAC78 in the HTTP POST Request Handler component, which can be...

The vulnerability of the sub_AC78() function in D-Link DIR-665 router software allows a hacker to induce a service failure.

The vulnerability of the subAC78 function in D-Link DIR-665 router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure by sending a specially crafted POST request...

D-Link DIR-665 安全漏洞

The D-Link DIR-665 is a high-performance wireless router that belongs to D-Link's flagship product. A buffer overflow vulnerability exists in the D-Link DIR-665. The vulnerability stems from a stack buffer overflow in the function subAC78 in the HTTP POST Request Handler component, which can be...

The vulnerability of the `mov_read_trak` function in the libavformat library, a multimedia library within FFmpeg, allows a attacker to cause a service failure.

The vulnerability of the movreadtrak function in the libavformat library, a multimedia library within FFmpeg, is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fromadvsetlanip() function (/goform/AdvSetLanip) in the Tenda AC15 router software allows a hacker to cause a service failure.

The vulnerability of the fromadvsetlanip function /goform/AdvSetLanip of the Tenda AC15 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the lanMask parameter. Exploiting this vulnerability could allow a remote...

Expired Pointer Dereference

Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Expired Pointer Dereference due to a null pointer dereference while processing XPath XML expressions. An attacker can cause a crash and disrupt service availability by sending...

The vulnerability of the built-in web server boa (/boafrm/formIpQoS) of TOTOLINK X15 router’s microprogramming software allows a intruder to execute arbitrary commands or cause a service failure.

The vulnerability of the built-in web server boa /boafrm/formIpQoS of TOTOLINK X15 router software is related to the issue of the operation exceeding the buffer in memory when processing the mac parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands or cau...