flac:fuzzer_seek: Heap-buffer-overflow in process_page_

Detailed Report: https://oss-fuzz.com/testcase?key=4953351625703424 Project: flac Fuzzing Engine: afl Fuzz Target: fuzzerseek Job Type: aflasanflac Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x5220000437e0 Crash State: processpage FLACoggdecoderaspectskiplink...

DEBIAN-CVE-2024-46807

In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: Check tbo resource pointer Validate tbo resource pointer, skip if NULL...

UBUNTU-CVE-2024-46807

In the Linux kernel, the following vulnerability has been resolved: drm/amd/amdgpu: Check tbo resource pointer Validate tbo resource pointer, skip if NULL...

CVE-2024-46812: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration Why Coverity reports Memory - illegal accesses. How Skip inactive planes...

remoteproc: imx_rproc: Skip over memory region when node value is NULL

...

CVE-2024-43895

CVE-2024-43895 relates to the Linux kernel DRM/AMD display path, specifically a NULL pointer dereference when recomputing DSC parameters if no stream is on the link during MST+DSC setup. This can trigger a kernel oops/crash as described in vendor advisories. Connected sources show the issue is ad...

UBUNTU-CVE-2024-43860

In the Linux kernel, the following vulnerability has been resolved: remoteproc: imxrproc: Skip over memory region when node value is NULL In imxrprocaddrinit "nph = ofcountphandlewithargs" just counts number of phandles. But phandles may be empty. So ofparsephandle in the parsing loop 0 a nph may...

kernel: netfilter: nf_tables: do not compare internal table flags on updates

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags...

SUSE CVE-2024-42064

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip pipe if the pipe idx not set properly why Driver crashes when pipe idx not set properly how Add code to skip the pipe that idx not set properly...

CVE-2024-41256

Default configurations in the ShareProofVerifier function of filestash v0.4 causes the application to skip the TLS certificate verification process when sending out email verification codes, possibly allowing attackers to access sensitive data via a man-in-the-middle attack...

CVE-2024-41256

Default configurations in the ShareProofVerifier function of filestash v0.4 causes the application to skip the TLS certificate verification process when sending out email verification codes, possibly allowing attackers to access sensitive data via a man-in-the-middle attack...

DEBIAN-CVE-2024-42119

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip finding free audio for unknown engineid WHY ENGINEIDUNKNOWN = -1 and can not be used as an array index. Plus, it also means it is uninitialized and does not need free audio. HOW Skip and return NULL. This...

DEBIAN-CVE-2024-42064

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip pipe if the pipe idx not set properly why Driver crashes when pipe idx not set properly how Add code to skip the pipe that idx not set properly...

AZL-47094 CVE-2024-42064 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip pipe if the pipe idx not set properly why Driver crashes when pipe idx not set properly how Add code to skip the pipe that idx not set properly...

UBUNTU-CVE-2024-42064

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip pipe if the pipe idx not set properly why Driver crashes when pipe idx not set properly how Add code to skip the pipe that idx not set properly...

kernel: netfilter: nf_tables: do not compare internal table flags on updates

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags...

kernel: netfilter: nf_tables: do not compare internal table flags on updates

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a flaw in setSkipPrompt in AssociationRequest.java. An attacker can exploit this vulnerability to escalate privileges...

Ping Identity PingFederate PingOne MFA Integration Kit Security Vulnerability

Ping Identity PingFederate PingOne MFA Integration Kit is from Ping Identity This integration kit allows PingFederate to use the PingOne MFA service for multi-factor authentication MFA. A security vulnerability exists in Ping Identity PingFederate PingOne MFA Integration Kit versions prior to...

PT-2024-5206 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions 12 through 12L Description: The issue is related to errors in privilege management, specifically in the setSkipPrompt function of AssociationRequest.java. This could allow an attacker to establish a companion device associati...