CVE-2021-26384

A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...

CVE-2021-26384

A malformed SMI System Management Interface command may allow an attacker to establish a corrupted SMI Trigger Info data structure, potentially leading to out-of-bounds memory reads and writes when triggering an SMI resulting in a potential loss of resources...

Out-Of-Bound Writes

SDLttf is vulnerable to out-of-bound writes. The vulnerability exists in TTFRenderTextSolid function which allows an attacker to cause out-of-bound writes via a crafted TTF file...

EulerOS Virtualization 2.10.0 : libxml2 (EulerOS-SA-2022-2093)

According to the versions of the libxml2 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In libxml2 before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer don't check for integer...

OESA-2022-1744 curl security update

Security Fixes: A vulnerability was found in curl. This issue occurs because it mishandles message verification failures when curl does FTP transfers secured by krb5. This flaw makes it possible for a Man-in-the-middle attack to go unnoticed and allows data injection into the client.CVE-2022-3220...

Google Android Remote Code Execution Vulnerability (CNVD-2022-57609)

Google Android System is a remote code execution vulnerability in Google Android System, a Linux-based open source operating system from Google, Inc. The vulnerability stems from a lack of boundary checking, which could lead to out-of-bounds writes. An attacker could exploit this vulnerability to...

EulerOS 2.0 SP9 : libxml2 (EulerOS-SA-2022-2002)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libxml2 before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer don't check for integer overflows. This can...

Multiple MediaTek Chip WLAN Driver Input Validation Error Vulnerability

MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...

EulerOS 2.0 SP9 : libxml2 (EulerOS-SA-2022-1972)

According to the versions of the libxml2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libxml2 before 2.9.14, several buffer handling functions in buf.c xmlBuf and tree.c xmlBuffer don't check for integer overflows. This can...

DEBIAN-CVE-2021-3697

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerabili...

CVE-2021-3697

A crafted JPEG image may lead the JPEG reader to underflow its data pointer, allowing user-controlled data to be written in heap. To a successful to be performed the attacker needs to perform some triage over the heap layout and craft an image with a malicious format and payload. This vulnerabili...

MediaTek 芯片缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in MediaTek's WLAN driver, which stems from a lack of boundary checking, leading to out-of-bounds writes. An attacker could exploit the vulnerability to escalate privileges...

The vulnerability of real-time operating system DHCP clients of Wind River VxWorks and industrial switches from Siemens (SCALANCE and Ruggedcom) allows a perpetrator to execute arbitrary code.

The vulnerability of real-time operating systems under DHCP clients in Wind River VxWorks, industrial switches from Siemens SCALANCE and Ruggedcom, lies in the fact that the operation data is written outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execut...

The vulnerability of the Item_field::fix_outer_field function in the MariaDB database management system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Itemfield::fixouterfield function in the MariaDB database management system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility ...

The vulnerability of the Authenticated Code Module (ACM) in Intel microprogramming system BIOS allows a hacker to enhance their privileges.

The vulnerability of the Authenticated Code Module ACM in Intel microprogramming system BIOS is related to data writing beyond the buffer. Exploiting this vulnerability can allow attackers to enhance their privileges...

GSD-2022-1002856 btrfs: fix deadlock between concurrent dio writes when low on free data space

btrfs: fix deadlock between concurrent dio writes when low on free data space This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. A buffer error vulnerability exists in versions prior to Vim 8.2, which stems from vim out-of-bounds writes...

UBUNTU-CVE-2022-2120

OFFIS DCMTK's All versions prior to 3.6.7 service class user SCU is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution...

Out-of-bound Writes

shim is vulnerable to Out-of-bound Writes. The vulnerability exists when the handling of EFI executables which allows an attacker to send a crafted EFI image and perform out-of-bounds writes...

CVE-2022-34177

Jenkins Pipeline: Input Step Plugin 448.v37cea9a10a70 and earlier archives files uploaded for file parameters for Pipeline input steps on the controller as part of build metadata, using the parameter name without sanitization as a relative path inside a build-related directory, allowing attackers...