CVE-2021-27417

The CVE-2021-27417 entry affects eCosCentric eCosPro RTOS, versions 2.0.1 through 4.5.3. Affected component: calloc (memory allocation) implementation; root cause is integer wraparound in calloc resulting in unverified memory allocation, which can cause a heap-based buffer overflow. Impact: poten...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the stbijpegdecodeblockprogdc function. Remediation There is no fixed version for stb. References - GitHub Issue - GitHub PR Credit: Pietro Borrello...

CVE-2022-0913

Integer Overflow or Wraparound in GitHub repository microweber/microweber prior to 1.3...

Siemens SIMOTICS CONNECT 400

1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMOTICS CONNECT 400 Vulnerabilities: Type Confusion, Improper Validation of Specified Quantity in Input, Wrap or Wraparound, Improper Handling of Inconsistent Structural Elements 2...

PT-2022-11591 · Noise · Noise

Name of the Vulnerable Software and Affected Versions: github.com/flynn/noise versions prior to v1.0.0 Description: The Noise protocol implementation has weakened cryptographic security after encrypting 2^64 messages and is vulnerable to a potential denial of service attack. After 2^64 messages a...

CVE-2021-44711

CVE-2021-44711 affects Adobe Acrobat Reader DC and related components (versions 21.007.20099 and earlier; 20.004.30017 and earlier; 17.011.30204 and earlier) with an Integer Overflow/Wraparound in annotation gestures that can lead to arbitrary code execution under the current user. Exploitation r...

CVE-2021-37065

There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Confidentiality or Availability impacted...

Integer overflow

A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting...

CVE-2021-22455

HarmonyOS CVE-2021-22455 is described in connected sources as an integer overflow/vulnerability in HarmonyOS prior to version 2.0. The issue can allow a local attacker to cause memory-related problems (memory not released). The exact affected subcomponent and a fixed version are not provided in t...

CVE-2021-22451

A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting...

Exploit for Integer Overflow or Wraparound in Haproxy

C...

CVE-2021-22684

Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functionscalloc and mmzalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash...

CVE-2021-31292

A flaw was found in exiv2. A integer wraparound in the CrwMap:encode0x1810 function leads to memcpy call with a very large size allowing an attacker, who can provide a malicious image, to crash an application which uses the exiv2 library. The highest threat from this vulnerability is to service...

CVE-2021-22418

Technical details about CVE-2021-22418 are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories.

CVE-2021-22422

A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting...

CVE-2021-22379

Huawei Smartphones (EMUI/Magic UI) are affected by CVE-2021-22379 due to an Integer Underflow/Wraparound in the Samgr component. Exploitation could lead to denial of service on the device. The Red Hat and CNVD entries corroborate this issue with the same description. The public documents do not p...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound tinyexr 0.9.5 has a integer overflow over-write in tinyexr::DecodePixelData in tinyexr.h, related to OpenEXR code. Remediation There is no fixed version for tinyexr. References - GitHub Commit - GitHub Iss...

CVE-2021-3624

There is a flaw in dcraw. An attacker who is able to convince a victim to open a crafted file with dcraw could trigger an unsigned integer wraparound, leading to out-of-bounds write. The greatest impact from this flaw is to system availability, data integrity, and data confidentiality...

NTP < 4.0 Integer Overflow or Wraparound Vulnerability

Integer overflow in the NTP daemon NTPd before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced...

AZL-7285 CVE-2018-10195 affecting package lrzsz 0.12.20-50

lrzsz before version 0.12.21rc can leak information to the receiving side due to an incorrect length check in the function zsdata that causes a sizet to wrap around...