Null pointer dereference

An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges...

Null pointer dereference

An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to...

CVE-2021-41839

CVE-2021-41839 affects the InsydeH2O/ NvmExpressDxe driver in kernel versions 5.0–5.5. The root cause is an Untrusted Pointer Dereference that can corrupt SMM memory (SMRAM), enabling a local attacker to escalate privileges to System Management Mode. Public records describe the issue as a SMM mem...

CVE-2021-41837

An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to...

CVE-2021-41837

CVE-2021-41837 affects InsydeH2O’s AhciBusDxe driver in kernel versions 5.0–5.5. The flaw stems from an Untrusted Pointer Dereference that can corrupt SMM memory (SMRAM) and enable a local attacker to escalate privileges to System Management Mode. Public documentation (NVD/Tenable, Binarly/CERT a...

PT-2022-11495

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O kernel versions 5.0 through 5.5 Description An issue was discovered in NvmExpressDxe due to an Untrusted Pointer Dereference, causing SMM memory corruption. This allows an attacker to write fixed or predictable data to SMRAM,...

CVE-2021-41837: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to...

CVE-2021-41839: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges...

PT-2022-11493

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O kernel versions 5.0 through 5.5 Description An issue was discovered in AhciBusDxe due to an Untrusted Pointer Dereference, causing SMM memory corruption. This allows an attacker to write fixed or predictable data to SMRAM,...

CVE-2021-46243

An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5Odtypedecodehelper at hdf5/src/H5Odtype.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46237

An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfnodeunregister at scenegraph/basescenegraph.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46237

An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfnodeunregister at scenegraph/basescenegraph.c. This vulnerability can lead to a Denial of Service DoS...

DEBIAN-CVE-2021-46243

An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5Odtypedecodehelper at hdf5/src/H5Odtype.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46243

An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5Odtypedecodehelper at hdf5/src/H5Odtype.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46243

An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5Odtypedecodehelper at hdf5/src/H5Odtype.c. This vulnerability can lead to a Denial of Service DoS...

Null pointer dereference

An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gfnodeunregister at scenegraph/basescenegraph.c. This vulnerability can lead to a Denial of Service DoS...

UBUNTU-CVE-2021-46243

An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5Odtypedecodehelper at hdf5/src/H5Odtype.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46243

CVE-2021-46243 is an untrusted pointer dereference in HDF5 v1.13.1-1, triggered via H5O__dtype_decode_helper in hdf5/src/H5Odtype.c, which can lead to a Denial of Service. The description across sources consistently identifies the root cause as an untrusted pointer dereference and indicates DoS i...

CVE-2021-46237

GPAC vulnerability CVE-2021-46237 involves an untrusted pointer dereference in gf_node_unregister() at scenegraph/base_scenegraph.c, leading to a Denial of Service. Affected software is GPAC v1.1.0; the root cause is a pointer dereference in the scenegraph module. Impact, per sources, is DoS with...

PT-2022-7549 · Hdf5 +2 · Hdf5 +2

Name of the Vulnerable Software and Affected Versions: HDF5 version 1.13.1-1 Description: The issue is related to an untrusted pointer dereference vulnerability in the function H5O dtype decode helper at hdf5/src/H5Odtype.c in the HDF5 library. This vulnerability can lead to a Denial of Service D...