22 matches found
CVE-2026-89612
CVE-2026-89612 affects the Linux kernel NTFS filesystem driver . The root cause is a type mismatch in parse_ntfs_boot_sector(): MFT and MFTMirr locations are stored as unsigned 64-bit LCNs in the NTFS boot sector but decoded into an s64 , allowing a crafted high-bit value to become negative and b...
PT-2026-81215
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An integer overflow exists in the WebRTC component. The issue occurs in the RTCRtpSender.setParameters path, where a WebIDL unsigned long maxBitrate is converted into a signed C++ int,...
HID: core: clamp report_size in s32ton() to avoid undefined shift
...
RLSA-2026:2182 Important: libsoup3 security update
Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. libsoup uses the Glib main loop and is designed to work well with GTK applications...
EUVD-2023-58494
Malicious code in bioql PyPI...
kernel: xsk: fix OOB map writes when deleting elements
In the Linux kernel, the following vulnerability has been resolved: xsk: fix OOB map writes when deleting elements Jordy says: " In the xskmapdeleteelem function an unsigned integer map-maxentries is compared with a user-controlled signed integer k. Due to implicit type conversion, a large unsign...
CVE-2023-5184
Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers...
PT-2024-14913 · Espressif · Esp32 Ipm Send
Name of the Vulnerable Software and Affected Versions: esp32 ipm send affected versions not specified Description: The issue involves a signed to unsigned conversion in the esp32 ipm send function. This could potentially lead to unexpected behavior or errors. No information is provided about the...
CVE-2023-33034 Signed-to-unsigned conversion error in Audio
Memory corruption while parsing the ADSP response command...
SUSE CVE-2013-0211
Integer signedness error in the archivewritezipdata function in archivewritesetformatzip.c in libarchive 3.1.2 and earlier, when running on 64-bit machines, allows context-dependent attackers to cause a denial of service crash via unspecified vectors, which triggers an improper conversion between...
USN-5015-1 linux-oem-5.10 vulnerabilities
It was discovered that the virtual file system implementation in the Linux kernel contained an unsigned to signed integer conversion error. A local attacker could use this to cause a denial of service system crash or execute arbitrary code. CVE-2021-33909 Michael Brown discovered that the Xen...
CVE-2020-13545
An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...
CVE-2020-13545
An exploitable signed conversion vulnerability exists in the TextMaker document parsing functionality of SoftMaker Office 2021’s TextMaker application. A specially crafted document can cause the document parser to miscalculate a length used to allocate a buffer, later upon usage of this buffer th...
CVE-2020-13545
CVE-2020-13545 affects SoftMaker Office TextMaker 2021. The TALOS analysis details a signed/unsigned conversion issue in TextMaker’s document parsing that can cause heap-based memory corruption when loading a crafted TextMaker Document (.tmd). The root cause involves miscalculation of a length us...
FreeBSD 10.2 amd64 Kernel - amd64_set_ldt Heap Overflow
Exploit for freebsd platform in category dos / poc / 1. Advisory Information Title: FreeBSD Kernel amd64setldt Heap Overflow Advisory ID: CORE-2016-0005 Advisory URL: http://www.coresecurity.com/content/freebsd-kernel-amd64setldt-heap-overflow Date published: 2016-03-16 Date of last update:...
[CORE-2015-0003] - FreeBSD Kernel Multiple Vulnerabilities
Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ FreeBSD Kernel Multiple Vulnerabilities 1. Advisory Information Title: FreeBSD Kernel Multiple Vulnerabilities Advisory ID: CORE-2015-0003 Advisory URL: http://www.coresecurity.com/content/freebsd-kernel-multiple-vulnerabilities...
FreeBSD Kernel Multiple Vulnerabilities
1. Advisory Information Title: FreeBSD Kernel Multiple Vulnerabilities Advisory ID: CORE-2015-0003 Advisory URL: www.coresecurity.com/core-labs/advisories/freebsd-kernel-multiple-vulnerabilities Date published: 2015-01-27 Date of last update: 2015-01-27 Vendors contacted: FreeBSD Release mode:...
up-imapproxy multiple bugs
Signed/unsigned conversion and memory management bugs...