Lucene search
+L

643 matches found

Prion
Prion
added 2024/02/20 6:15 p.m.22 views

Integer overflow

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

6.8AI score0.01397EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2024/02/20 6:15 p.m.32 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.9AI score0.01397EPSS
SaveExploits1References3
OSV
OSV
added 2024/02/20 6:15 p.m.8 views

UBUNTU-CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.9AI score0.01397EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/02/20 12:00 a.m.34 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

6.8AI score0.01397EPSS
SaveExploits1References4
OSV
OSV
added 2024/02/20 12:00 a.m.32 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.5AI score
SaveExploits0References6
Cvelist
Cvelist
added 2024/02/20 12:00 a.m.61 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

7.2AI score0.01397EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2024/02/20 12:00 a.m.104 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.5AI score0.01397EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2024/01/26 12:00 a.m.9 views

PT-2024-13319 · Minizinc +1 · Minizinc +1

Name of the Vulnerable Software and Affected Versions: MiniZinc versions prior to 2.8.0 Description: The issue allows a NULL pointer dereference via ti expr in a crafted .mzn file. This is disputed because there is no common libminizinc use case in which an unattended process is supposed to run...

5.5CVSS6.7AI score0.0028EPSS
SaveExploits0References16
Openbugbounty
Openbugbounty
added 2023/12/22 8:56 p.m.10 views

ti-wag.de Improper Access Control vulnerability OBB-3820466

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
CVE
CVE
added 2023/11/21 5:41 p.m.64 views

CVE-2021-27502

CVE-2021-27502 affects Texas Instruments TI-RTOS when using the HeapMem heap (default). The issue: malloc can return a pointer to a small buffer for extremely large values, triggering an integer overflow in HeapMem_allocUnprotected and potentially enabling code execution. Multiple Red Hat/NVD ent...

7.8CVSS8AI score0.00279EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/21 5:41 p.m.50 views

CVE-2021-27502 Texas Instruments TI-RTOS Integer Overflow or Wraparound

Texas Instruments TI-RTOS, when configured to use HeapMem heapdefault, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMemallocUnprotected' and result in code execution...

7.4CVSS8.1AI score0.00279EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/20 7:15 p.m.34 views

CVE-2021-27429

Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrackalloc' and result in code execution...

7.8CVSS0.00276EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/20 7:15 p.m.23 views

Integer overflow

Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrackalloc' and result in code execution...

4.3CVSS7.9AI score0.00276EPSS
SaveExploits0References2Affected Software3
Prion
Prion
added 2023/11/20 7:15 p.m.30 views

Integer overflow

Texas Instruments TI-RTOS, when configured to use HeapMem heapdefault, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMemallocUnprotected' and result in code execution...

4.3CVSS7.9AI score0.00276EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
added 2023/11/20 7:02 p.m.49 views

CVE-2021-22636 Texas Instruments TI-RTOS Integer Overflow or Wraparound

Texas Instruments TI-RTOS, when configured to use HeapMem heapdefault, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMemallocUnprotected' and result in code execution...

7.4CVSS8.1AI score0.00276EPSS
SaveExploits0References2
CVE
CVE
added 2023/11/20 7:02 p.m.52 views

CVE-2021-22636

CVE-2021-22636 involves Texas Instruments TI-RTOS where, when using the HeapMem heap, malloc can return a pointer to a small buffer for extremely large values, triggering an integer overflow in HeapMem_allocUnprotected and potentially enabling code execution. Connected documents corroborate the T...

7.8CVSS8AI score0.00276EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/11/20 7:00 p.m.47 views

CVE-2021-27429

TI-RTOS (including TI-RTOS-MCU) is associated with CVE-2021-27429, which describes an integer overflow in HeapTrack_alloc that can return a pointer to a small buffer when extremely large values are processed. This can lead to code execution. Public sources in the connected data indicate TI-RTOS T...

7.8CVSS8AI score0.00276EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/20 7:00 p.m.29 views

CVE-2021-27429 Texas Instruments TI-RTOS Integer Overflow or Wraparound

Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrackalloc' and result in code execution...

7.4CVSS8.1AI score0.00276EPSS
SaveExploits0References2
CVE
CVE
added 2023/08/14 12:00 a.m.66 views

CVE-2023-29468

The vulnerability CVE-2023-29468 affects TI WiLink WL18xx MCP driver in WILINK8-WIFI-MCP8 versions 8.5_SP3 and earlier. The root cause is that the driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_EXT_2_IE_ID parsed in a management frame, allowing a spe...

9.8CVSS9.8AI score0.10927EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/06/07 2:15 a.m.28 views

Design/Logic Flaw

The TI WooCommerce Wishlist and TI WooCommerce Wishlist Pro plugins for WordPress are vulnerable to an Options Change vulnerability in versions up to, and including, 1.21.11 and 1.21.4 via the 'ti-woocommerce-wishlist/includes/export.class.php' file. This makes it possible for authenticated...

5.5CVSS7.9AI score0.01147EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder