26 matches found
PT-2026-102764
Name of the Vulnerable Software and Affected Versions NetX RTSP Server affected versions not specified Description An unauthenticated client can cause a denial of service by draining the RTSP server's packet pool. This occurs when requests are sent containing a Session header that the parser cann...
PT-2026-66662
Uint::overflowing shl/overflowing shr returned false-negative overflow flags. overflowing shl missed bits shifted above BITS but within the top limb non-limb-aligned widths such as U160, and limbs wholly discarded by shifts = 64; overflowing shr missed wholly discarded low limbs. Shifted values...
CVE-2026-23456
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntrackh323: fix OOB read in decodeint CONS case In decodeint, the CONS case calls getbitsbs, 2 to read a length value, then calls getuintbs, len without checking that len bytes remain in the buffer. The existing...
OSV-2026-2 Heap-buffer-overflow in cmt_mpack_consume_uint_tag
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=472785094 Crash type: Heap-buffer-overflow WRITE 8 Crash state: cmtmpackconsumeuinttag cmtmpackunpackarray cmtmpackunpackmap...
Siemens SIMATIC S7-1500 Integer Overflow or Wraparound (CVE-2024-42131)
In the Linux kernel, the following vulnerability has been resolved: mm: avoid overflows in dirty throttling logic The dirty throttling logic is interspersed with assumptions that dirty limits in PAGESIZE units fit into 32-bit so that various multiplications fit into 64-bits. If limits end up bein...
CVE-2023-31921
Jerryscript 3.0 commit 05dbbd1 was discovered to contain an Assertion Failure via the ecmabiguintdivmod at jerry-core/ecma/operations/ecma-big-uint.c...
Cross-Chain Token Cap Disparity
Lines of code Vulnerability details Impact Potential loss of token value when minted values exceed the uint capacity of target chains, leading to incorrect token representation and financial discrepancies. Proof of Concept This function mints tokens or at least a representation of other chain...
PT-2023-23522
Name of the Vulnerable Software and Affected Versions Jerryscript version 3.0 commit 05dbbd1 Description An Assertion Failure was discovered in Jerryscript via the ecma big uint div mod function at jerry-core/ecma/operations/ecma-big-uint.c. Recommendations For Jerryscript version 3.0 commit...
JerryScript 安全漏洞
JerryScript is a lightweight JavaScript engine Jerryscript project . A denial of service vulnerability exists in the JerryScript ecmabiguintdivmod function, which can be exploited by an attacker to cause a denial of service...
Upgraded Q -> 3 from #222 [1683017474019]
Judge has assessed an item in Issue 222 as 3 risk. The relevant finding follows: L-02 Downcasting uint or int may result in overflow Consider using OpenZeppelin's SafeCast library to prevent unexpected overflows. Instances: 2 File: src/PrivatePool.sol 231: virtualNftReserves -= uint128weightSum;...
Uint underflow issue
Lines of code Vulnerability details Impact Potential underflow if shares is greater than totalSupply Proof of Concept Tools Used Manual review Recommended Mitigation Steps Before the following line, check if totalSupply is greater or equal to shares --- The text was updated successfully, but thes...
Type Error
Lines of code Vulnerability details Impact Type Error Proof of Concept Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant proof that illustrates the concept. Tools Used Foundry - Forge Recommended Mitigation Steps Consider changing uint to int and ...
StakerVault.unstake(), StakerVault.unstakeFor() would revert with a uint underflow error of StakerVault.strategiesTotalStaked, StakerVault._poolTotalStaked.
Lines of code Vulnerability details Impact StakerVault.unstake, StakerVault.unstakeFor would revert with a uint underflow error of StakerVault.strategiesTotalStaked, StakerVault.poolTotalStaked. Proof of Concept Currently it saves totalStaked for strategies and non-strategies separately. uint...
CVE-2021-43083
Affected software : Apache PLC4X – PLC4C (C language implementation). Issue : unsigned integer underflow vulnerability in the TCP transport. Root cause : underflow within the C implementation when handling crafted responses from a malicious device. Impact and scope : requires an attacker to activ...
PT-2021-22664
Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710 Description: An issue exists in the function pool lookup uint located in pool.c, which allows an attacker to cause Denial of Service due to a NULL pointer dereference. Recommendations: For versions through...
Swftools 代码问题漏洞
SWFTools is a suite of open source software tools for creating and manipulating SWF files. a null pointer dereference vulnerability exists in the poollookupuint function in SWFTools pool.c. An attacker could exploit this vulnerability to cause a denial of service...
PT-2021-22492
Name of the Vulnerable Software and Affected Versions Zint Barcode Generator versions prior to 2.10.0 Description The issue is related to a one-byte buffer over-read in the Zint Barcode Generator. This is connected to the is last single ascii function in code1.c and the rs encode uint function in...
uint(-1) index for not found
Handle paulius.eth Vulnerability details Impact functions getTokenConfigBySymbolHash, getTokenConfigByCToken and getTokenConfigByUnderlying check returned index against max uint: index != uint-1 -1 should indicate that the index is not found, however, a default value for an uninitialized uint is ...
PT-2021-28104
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the dissect vjc uncomp, call dissector work, and dissector try uint functions. No...
