CVE-2022-34398: Time-of-check Time-of-use (TOCTOU) Race Condition

Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system...

CVE-2022-27538

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...

CVE-2022-27538

Summary of CVE-2022-27538 (HP BIOS TOCTOU): A TOCTOU vulnerability identified in the BIOS of certain HP PC products could allow arbitrary code execution, denial of service, and information disclosure. The impact and affected component are stated as BIOS-level for HP PCs, with a local attack vecto...

CVE-2022-27538: Time-of-check Time-of-use (TOCTOU) Race Condition

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...

PT-2023-12908

Name of the Vulnerable Software and Affected Versions HP PC products affected versions not specified Description A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in the BIOS for certain HP PC products, which may allow arbitrary code execution, denial of service, a...

FreeBSD : Plex Media Server -- security vulnerability (98f78c7a-a08e-11ed-946e-002b67dfc673)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 98f78c7a-a08e-11ed-946e-002b67dfc673 advisory. - An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker with a footho...

PT-2023-12790 · Razer +3 · Razer +3

Name of the Vulnerable Software and Affected Versions: Razer affected versions not specified EVGA affected versions not specified MSI affected versions not specified AMI affected versions not specified Description: The issue concerns multiple Time-of-Check-to-Time-of-Use TOCTOU vulnerabilities in...

CVE-2022-48191: Time-of-check Time-of-use (TOCTOU) Race Condition

A vulnerability exists in Trend Micro Maximum Security 2022 17.7 wherein a low-privileged user can write a known malicious executable to a specific location and in the process of removal and restoral an attacker could replace an original folder with a mount point to an arbitrary location, allowin...

CVE-2023-22397

An Allocation of Resources Without Limits or Throttling weakness in the memory management of the Packet Forwarding Engine PFE on Juniper Networks Junos OS Evolved PTX10003 Series devices allows an adjacently located attacker who has established certain preconditions and knowledge of the environme...

CVE-2023-22397: Allocation of Resources Without Limits or Throttling

An Allocation of Resources Without Limits or Throttling weakness in the memory management of the Packet Forwarding Engine PFE on Juniper Networks Junos OS Evolved PTX10003 Series devices allows an adjacently located attacker who has established certain preconditions and knowledge of the environme...

CVE-2023-22397

CVE-2023-22397 affects Juniper Networks Junos OS Evolved on PTX10003. The issue is an Allocation of Resources Without Limits or Throttling in the Packet Forwarding Engine (PFE) memory management, enabling an adjacent attacker to trigger a Time-of-check Time-of-use (TOCTOU) race that causes a memo...

CVE-2023-22397 Junos OS Evolved: PTX10003: An attacker sending specific genuine packets will cause a memory leak in the PFE leading to a Denial of Service

An Allocation of Resources Without Limits or Throttling weakness in the memory management of the Packet Forwarding Engine PFE on Juniper Networks Junos OS Evolved PTX10003 Series devices allows an adjacently located attacker who has established certain preconditions and knowledge of the environme...

CVE-2023-20523

TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service...

CVE-2021-46795

A TOCTOU time-of-check to time-of-use vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service...

Out-of-bounds

A TOCTOU time-of-check to time-of-use vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service...

Out-of-bounds

TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service...

CVE-2023-20523

TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service...

CVE-2023-20523

CVE-2023-20523 concerns TOCTOU in the AMD Secure Processor (ASP) that may allow a physical attacker to write beyond buffer bounds, potentially causing loss of integrity or denial of service. The issue is documented across multiple sources (NVD/NCSC/Dell AMD bulletins) with the ASP as the affected...

CVE-2021-46795

A TOCTOU time-of-check to time-of-use vulnerability exists where an attacker may use a compromised BIOS to cause the TEE OS to read memory out of bounds that could potentially result in a denial of service...

CVE-2021-46795

CVE-2021-46795 is a TOCTOU vulnerability where a compromised BIOS can trigger the TEE OS to read memory out-of-bounds, potentially causing a denial of service. Public details consistently describe the affected component as the TEE/ASP-SMU hardware stack in AMD platforms with BIOS-based mitigation...