CVE-2022-27492

An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file...

CVE-2022-27492

An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file...

CVE-2022-27492

CVE-2022-27492 is an integer underflow in WhatsApp’s Video File Handler that could lead to remote code execution when a crafted video file is received. The vulnerability is one of multiple fixes addressed in WhatsApp’s September 2022 security advisory; affected versions include WhatsApp for Andro...

PT-2022-18452 · Meta · Whatsapp

Name of the Vulnerable Software and Affected Versions: WhatsApp affected versions not specified Description: An integer underflow in WhatsApp could have caused remote code execution when receiving a crafted video file. Recommendations: At the moment, there is no information about a newer version...

EulerOS Virtualization 2.9.0 : grub2 (EulerOS-SA-2022-2381)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to...

The amountRemaining in withdrawAdmin() Function is Underflow

Lines of code Vulnerability details Impact allocatedTokens can get messed up when the amountRemaining in the withdrawAdmin function is underflowed in rare cases. This will make numTokensReservedForVesting will have a larger amount of funds compared to the funds in the token. This will make it...

THE amountRemaining IN withdrawAdmin() IS UNDERFLOW

Lines of code Vulnerability details Impact Allocated tokens can get messed up when the amountRemaining in the withdrawAdmin function is underflowed in rare cases. This will make 'numTokensReservedForVesting' will have a larger amount of funds compared to the funds in the token. This will make it...

WhatsApp 数字错误漏洞

WhatsApp is a suite of mobile applications from the American company WhatsApp that use the Internet to send text messages. The application uses the contact information in a smartphone to find contacts using the program to send texts, pictures, etc. WhatsApp suffers from a numeric error...

Wrong accounting logic when syncRewards() is called within beforeWithdraw makes withdrawals impossible

Lines of code Vulnerability details Impact sfrxETH.beforeWithdraw first calls the beforeWithdraw of xERC4626, which decrements storedTotalAssets by the given amount. If the timestamp is greater than the rewardsCycleEnd, syncRewards is called. However, the problem is that the assets have not been...

EulerOS Virtualization 2.9.1 : grub2 (EulerOS-SA-2022-2345)

According to the versions of the grub2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to...

PT-2024-8457 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an integer underflow in the nf tables addchain function, which can lead to a denial of service. The problem occurs because nf tables chain destroy after nft...

Denial Of Service (DoS)

fis-gtm is vulnerable to denial of service. The vulnerability exists due to an integer underflow of the size of calls to memset in opfnj3 in srport/opfnj3.c which allows an attacker to cause a segmentation fault and crash the application using crafted input...

Mageia: Security Advisory (MGASA-2022-0337)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GSD-2022-1005785 drm/sun4i: dsi: Prevent underflow when computing packet sizes

drm/sun4i: dsi: Prevent underflow when computing packet sizes This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.138 by commit...

GSD-2022-1005721 drm/amd/display: clear optc underflow before turn off odm clock

drm/amd/display: clear optc underflow before turn off odm clock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.141 by commit...

PT-2022-33752 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue is related to preventing underflow when computing packet sizes in the drm/sun4i dsi component. The actual impact and attack plausibility have not yet been proven. Recommendations:...

PT-2022-33763 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: The issue concerns a possible module reference underflow in the error path of nf tables in netfilter. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2022-33979 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.141 Description: The issue is related to the drm/amd/display component, specifically with clearing optc underflow before turning off the odm clock. The actual impact and attack plausibility have not yet be...

PT-2022-34183 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.212 Description: The issue is related to the drm/amd/display component, where an optc underflow is not properly cleared before turning off the odm clock. The actual impact and attack plausibility have not y...

GSD-2022-1005411 drm/amd/display: clear optc underflow before turn off odm clock

drm/amd/display: clear optc underflow before turn off odm clock This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.65 by commit...