CVE-2024-1654

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal system identifier and details of another valid user to exploit this...

Google Android elevation of privilege vulnerability (CNVD-2024-24424)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by out-of-bounds writes in multiple locations. An attacker can exploit this vulnerability to escalate privileges...

CVE-2024-0162

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM...

CVE-2024-0161

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM...

CVE-2024-0161

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM...

CVE-2024-0161

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM...

kernel: UAF in nftables when nft_set_lookup_global triggered after handling named and anonymous sets in batch requests

A use-after-free flaw was found in the Netfilter subsystem of the Linux kernel when processing named and anonymous sets in batch requests, which can lead to performing arbitrary reads and writes in kernel memory. This flaw allows a local user with CAPNETADMIN capability to crash or potentially...

PHOENIX CONTACT CHARX SEC Buffer Error Vulnerability

The PHOENIX CONTACT CHARX SEC is a series of AC charge controllers from PHOENIX CONTACT, Germany. An input validation error vulnerability exists in Phoenix Contact CHARX SEC-3000 versions prior to v1.5.1, which stems from incorrect input validation and could allow an unauthenticated, remote...

Google Pixel Security Breach

Google Pixel is a smartphone from Google Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the strncpy method of the strncpy.c file, which may result in out-of-bounds writes...

National Instruments LabVIEW Security Vulnerability

National Instruments LabVIEW NI LabVIEW is a graphical program compilation platform from National Instruments. A security vulnerability exists in National Instruments LabVIEW that stems from a lack of boundary checking, which results in out-of-bounds writes. An attacker could exploit the...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a heap buffer overflow in the TBD module, which may result in out-of-bounds writes...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the initdata method of the TBD module, which may result in out-of-bounds writes...

National Instruments LabVIEW Security Vulnerability

National Instruments LabVIEW NI LabVIEW is a graphical program compilation platform from National Instruments. A security vulnerability exists in National Instruments LabVIEW that stems from a lack of boundary checking, which results in out-of-bounds writes. An attacker could exploit the...

PT-2024-15324 · Softmpeg4 · Softmpeg4

Name of the Vulnerable Software and Affected Versions: SoftMPEG4 affected versions not specified Description: In the onQueueFilled function of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. Google Pixel suffers from a security vulnerability that stems from a missing bounds check in the tmusetpi method of the tmu.c file, which may result in out-of-bounds writes...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which is caused by out-of-bounds writes in multiple locations. An attacker can exploit this vulnerability to escalate privileges...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a heap buffer overflow in the TBD module, which may result in out-of-bounds writes...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the updatepolicydata method of the TBD module, which may result in out-of-bounds writes...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from the presence of a missing bounds check in the TBD module, which may result in out-of-bounds writes...

BIT-TENSORFLOW-2022-23560 Read and Write outside of bounds in TFLite

Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would allow limited reads and writes outside of arrays in TFLite. This exploits missing validation in the conversion from sparse tensors to dense tensors. The fix is included in TensorFlow 2.8.0. We...