Design/Logic Flaw

Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service...

CVE-2022-22558

Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service...

PT-2022-15526 · Dell · Dell Precision Workstation 7910 Bios +2

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Workstation 7910 BIOS affected versions not specified Dell Precision Workstation 7920 Rack BIOS affected versions not specified Description: The issue is related to an...

Slackware: Security Advisory (SSA:2013-290-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the imagetruecolortopalette function in the PHP programming language allows a perpetrator to trigger a service failure or potentially cause other effects.

The vulnerability of the imagetruecolortopalette function ext/gd/gd.c in the PHP programming language is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability may allow a remote attacker to cause a service failure or potentially have other adverse effects...

Samsung SMR Input Validation Error Vulnerability (CNVD-2022-63660)

Samsung SMR is a system patch package from South Korea's Samsung Samsung. Samsung SMR Apr-2022 Release 1 is vulnerable to an input validation error, which can be exploited by attackers for out-of-bounds writes...

Samsung SMR Input Validation Error Vulnerability (CNVD-2022-63630)

Samsung SMR is a system patch package from South Korea's Samsung Samsung. Samsung SMR is vulnerable to an input validation error, which can be exploited by attackers for out-of-bounds writes...

Samsung SMR null pointer dereference vulnerability

Samsung SMR is a system patch package from South Korea's Samsung Samsung. Samsung SMR is vulnerable to a null pointer dereference vulnerability that can be exploited by attackers to cause out-of-bounds writes...

Samsung SMR null pointer dereference vulnerability (CNVD-2022-63657)

Samsung SMR is a system patch package from South Korea's Samsung Samsung. Samsung SMR is vulnerable to a null pointer dereference vulnerability that can be exploited by attackers to cause out-of-bounds writes...

expat: Integer overflow in storeRawNames()

An integer overflow was found in expat. The issue occurs in storeRawNames by abusing the mbuffer expansion logic to allow allocations very close to INTMAX and out-of-bounds heap writes. This flaw can cause a denial of service or potentially arbitrary code execution...

多款 MediaTek 产品缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in multiple MediaTek products that stems from a lack of boundary checking in the preloader partitioning, which may result in out-of-bounds writes...

Samsung SMR 输入验证错误漏洞

Samsung SMR is a system patch package from South Korea's Samsung Samsung. The Samsung SMR DSP driver is vulnerable to an input validation error, which can be exploited by attackers to perform out-of-bounds writes via integer overflow...

Samsung Flow 安全漏洞

Samsung flow is an application for Samsung Samsung mobile devices, a software used to connect Samsung to Win10-based computers for a seamless, secure, and connected experience.An access control error vulnerability exists in versions prior to Samsung Flow 4.8.06.5, which stems from a lack of prope...

PT-2022-19224 · Samsung · Samsung Flow

Name of the Vulnerable Software and Affected Versions: Samsung Flow versions prior to 4.8.06.5 Description: The issue is related to improper access control, allowing an attacker to write files without the necessary Samsung Flow permission. Recommendations: For versions prior to 4.8.06.5, update t...

MediaTek 芯片输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in multiple MediaTek products that stems from an integer overflow in ged, which may result in out-of-bounds writes...

多款 MediaTek 产品缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in several MediaTek products, which stems from a lack of boundary checking in atf spm, which may result in out-of-bounds writes...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of boundary checking in the wifi service, which may result in out-of-bounds writes...

Apple iOS和Apple iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. A buffer error vulnerability exists in Apple iOS and Apple iPadOS. A local attacker can run a specially crafted...

CVE-2022-22558

Dell PowerEdge Server BIOS and Dell Precision Workstation 7910 and 7920 Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A Local High Privileged attacker could potentially exploit this vulnerability leading to arbitrary writes or denial of service...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from a lack of boundary checking in NFC, which could lead to out-of-bounds writes. An attacker could exploit this vulnerability to cause a...