CVE-2021-46702

CVE-2021-46702 描述： Windows 10 build 10586 上的 Tor 浏览器 9.0.7 存在信息泄露漏洞。这可能允许本地攻击者绕过预期的匿名功能，并获取有关本地用户访问过的洋葱服务的信息。即使在本地用户使用该产品数小时后，也可以通过分析 RAM 内存来实现这一点。发生这种情况是因为该产品未能正确释放内存。 测试版本： Tor 浏览器 - 9.0.7 产品供应商 https://www.torproject.org/ 攻击类型 本地 影响 信息泄露 参考...

CVE-2026-45908

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix memory leak in amdxdnaubufmap The amdxdnaubufmap function allocates memory for sg and internal sg table structures, but it fails to free them if subsequent operations sgalloctablefrompages or dmamapsgtable fail...

CVE-2018-25153

...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that originates from module removal or unfree memory in the wrong path, which could lead to a memory leak...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from unfreed memory in a key-limit allocation error path, which could lead to a memory leak...

Improper Resource Shutdown or Release

Overview Affected versions of this package are vulnerable to Improper Resource Shutdown or Release via the H5FLmalloc function. An attacker can cause resource exhaustion by repeatedly triggering memory allocations that are not properly freed. Remediation A fix was pushed into the master branch bu...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from unfree memory in octepdevicesetup, which could lead to a memory leak...

OpenHarmony 安全漏洞

OpenHarmony is an open source project of a kind of Hongmeng operating system from the China OpenAtom OpenAtom Foundation. A security vulnerability exists in OpenHarmony v5.0.2 and earlier versions, which originates from a local attacker who can cause a denial of service via unfreed memory...

OpenHarmony 缓冲区错误漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom OpenAtom Foundation. A buffer error vulnerability exists in OpenHarmony v5.0.2 and earlier versions, which originates from a local attacker who can cause a denial of service via unfreed memory...

CVE-2024-56643

In the Linux kernel, the following vulnerability has been resolved: dccp: Fix memory leak in dccpfeatchangerecv If dccpfeatpushconfirm fails after new value for SP feature was accepted without reconciliation 'entry == NULL' branch, memory allocated for that value with dccpfeatclonespval is never...

SUSE CVE-2017-1000369

Exim supports the use of multiple "-p" command line arguments which are malloc'ed and never free'ed, used in conjunction with other issues allows attackers to cause arbitrary code execution. This affects exim version 4.89 and earlier. Please note that at this time upstream has released a patch...

bottlerocket dependency openssl provides streaming of ASN.1 data via a BIO

An OpenSSL public API provides streaming of ASN.1 data via a BIO. It is possible for a malicious third party to use the BIO to access unfreed memory pointers that are not cleaned up after execution of the API. Freeing these memory pointers will result in a crash. Agents and clients compiled with...

GHSA-J79X-VVGM-W73W bottlerocket dependency openssl provides streaming of ASN.1 data via a BIO

An OpenSSL public API provides streaming of ASN.1 data via a BIO. It is possible for a malicious third party to use the BIO to access unfreed memory pointers that are not cleaned up after execution of the API. Freeing these memory pointers will result in a crash. Agents and clients compiled with...