368 matches found
libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend
A flaw was found in libssh when using the ChaCha20 cipher with the OpenSSL library. If an attacker manages to exhaust the heap space, this error is not detected and may lead to libssh using a partially initialized cipher context. This occurs because the OpenSSL error code returned aliases with th...
CVE-2025-9613
A vulnerability was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on tag reuse after completion timeouts may allow multiple outstanding Non-Posted Requests to share the same tag. This tag aliasing condition can result in completion...
The vulnerability of the Routing and Remote Access Service (RRAS) in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Routing and Remote Access Service RRAS in Windows operating systems is related to unreliable pointer aliasing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EUVD-2025-202314
A vulnerability was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on tag reuse after completion timeouts may allow multiple outstanding Non-Posted Requests to share the same tag. This tag aliasing condition can result in completion...
CVE-2025-9613
A vulnerability was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on tag reuse after completion timeouts may allow multiple outstanding Non-Posted Requests to share the same tag. This tag aliasing condition can result in completion...
CVE-2025-9613
A vulnerability exists in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification due to insufficient guidance on tag reuse following completion timeouts. This flaw allows multiple outstanding Non-Posted Requests to share the same tag, creating a tag aliasing condition. Consequen...
PT-2025-50218
A vulnerability was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on tag reuse after completion timeouts may allow multiple outstanding Non-Posted Requests to share the same tag. This tag aliasing condition can result in completion...
The vulnerability of the migrate_to_node() function in the mm/mempolicy.c module of the Linux kernel’s memory management subsystem allows a hacker to trigger a service failure.
The vulnerability of the migratetonode function in the mm/mempolicy.c file of the Linux kernel’s memory management subsystem is related to pointer aliasing. Exploiting this vulnerability could allow an attacker to trigger a service failure...
The vulnerability of the SetWLanRadioSettings function in D-Link DIR-823G A1 router microprogramming software, which allows a hacker to cause a service failure.
The vulnerability of the SetWLanRadioSettings function in D-Link DIR-823G A1 router microprogramming software is related to pointer aliasing errors. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through specially crafted HTTP requests...
Mozilla Firefox ESR < 60.0.2
The version of Firefox ESR installed on the remote Windows host is prior to 60.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-14 advisory. - A heap buffer overflow can occur in the Skia library when rasterizing paths using a maliciously crafted SVG file with...
Mozilla Firefox ESR < 52.8.1
The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.8.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-14 advisory. - A heap buffer overflow can occur in the Skia library when rasterizing paths using a maliciously crafted SVG file...
Mozilla Firefox < 60.0.2
The version of Firefox installed on the remote Windows host is prior to 60.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-14 advisory. - A heap buffer overflow can occur in the Skia library when rasterizing paths using a maliciously crafted SVG file with...
Mozilla Firefox < 60.0.2
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 60.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2018-14 advisory. - A heap buffer overflow can occur in the Skia library when rasterizing paths using a maliciously crafted SVG file wit...
The vulnerability of the Device Association Broker service for Windows operating systems allows attackers to exploit their privileges.
The vulnerability of the Device Association Broker service for Windows operating systems is related to unreliable pointer aliasing. Exploiting this vulnerability can allow attackers to gain increased privileges...
The vulnerability of the dcn20_program_pipe() function in the drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c driver module allows a hacker to cause a service failure in the AMD graphics card Direct Rendering Infrastructure (DRI) support driver for the Linux operating system.
The vulnerability of the dcn20programpipe function in the drivers/gpu/drm/amd/display/dc/dcn20/dcn20hwseq.c driver module related to the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems is associated with pointer aliasing. Exploiting this vulnerability could...
The vulnerability in the function dcn32_acquire_idle_pipe_pipe_for_head_pipe_in_layer(), located in the driver/gpu/drm/amd/display/dc/resource/dcn32/dcn32_resource.c file of the Direct Rendering Infrastructure (DRI) support driver for AMD graphics cards in Linux operating systems, allows a malicious actor to cause a service failure.
The vulnerability of the dcn32acquireidlepipepipeforheadpipeinlayer function in the driver/gpu/drm/amd/display/dc/resource/dcn32/dcn32resource.c file, a driver for AMD Direct Rendering Infrastructure DRI graphics cards in Linux operating systems, is related to pointer aliasing. Exploiting this...
The vulnerability of the dcn20_program_pipe() function in the drivers/gpu/drm/amd/display/dc/dcn20/dcn20_hwseq.c driver module allows a hacker to cause a service failure in the AMD graphics card Direct Rendering Infrastructure (DRI) support driver for the Linux operating system.
The vulnerability of the dcn20programpipe function in the drivers/gpu/drm/amd/display/dc/dcn20/dcn20hwseq.c driver module related to the Direct Rendering Infrastructure DRI of AMD graphics cards in Linux operating systems is associated with pointer aliasing. Exploiting this vulnerability could...
EUVD-2021-26653
Malware in sbrugna...