86 matches found
PT-2022-37433 · Mimalloc · Mimalloc
Name of the Vulnerable Software and Affected Versions: mimalloc affected versions not specified Description: The issue arises from a change in the mimalloc allocator's logic, which broke a promise regarding alignments. This change caused the crate to return memory with incorrect alignment for...
PT-2022-32846
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.10.132 Description The issue is related to the alignment and advancement of the IT state after emulating a Thumb instruction. The actual impact and potential for attack have not been proven yet. Recommendations...
PT-2022-29439
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.2 Description The issue is related to the fix of the fd table size alignment in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...
crossbeam-utils Unsoundness of AtomicCell<{i,u}64> arithmetics on 32-bit targets that support Atomic{I,U}64
Impact The affected versions of this crate incorrectly assumed that the alignment of i,u64 was always the same as AtomicI,U64. However, the alignment of i,u64 on a 32-bit target can be smaller than AtomicI,U64. This can cause the following problems: - Unaligned memory accesses - Data race Crates...
AZL-61381 CVE-2022-23639 affecting package rust for versions less than crossbeam_utils-0.8.7
crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to version 0.8.7 incorrectly assumed that the alignment of i,u64 was always the same as AtomicI,U64. However, the alignment of i,u64 on a...
AZL-41454 CVE-2022-23639 affecting package librsvg2 for versions less than 2.58.1-1
crossbeam-utils provides atomics, synchronization primitives, scoped threads, and other utilities for concurrent programming in Rust. crossbeam-utils prior to version 0.8.7 incorrectly assumed that the alignment of i,u64 was always the same as AtomicI,U64. However, the alignment of i,u64 on a...
GHSA-9HFG-PXR6-Q4VP Use of a Broken or Risky Cryptographic Algorithm in crypto2
The implementation does not enforce alignment requirements on input slices while incorrectly assuming 4-byte alignment through an unsafe call to std::slice::fromrawpartsmut, which breaks the contract and introduces undefined behavior. This affects Chacha20 encryption and decryption in crypto2...
PT-2025-40770
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.21-1-lts 1 Description A flaw exists in the Linux kernel's ALSA subsystem, specifically within the ymfpci driver. A BUG ON condition in the snd ymfpci create function did not properly account for the aligned...
Buffer overflow
Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure an...
CVE-2021-1974
Possible buffer over read due to lack of alignment between map or unmap length of IPA SMMU and WLAN SMMU in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure an...
CVE-2020-36433
An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement...
Design/Logic Flaw
An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement...
CVE-2020-36433
An issue was discovered in the chunky crate through 2020-08-25 for Rust. The Chunk API does not honor an alignment requirement...
CVE-2020-36433
The CVE-2020-36433 entry concerns the chunky crate for Rust. The vulnerability is described as: the Chunk API does not honor an alignment requirement, allowing the creation of unaligned references and resulting in undefined behavior. This issue affects the chunky crate up to 2020-08-25 and has an...
DEBIAN-CVE-2020-25576
An issue was discovered in the randcore crate before 0.4.2 for Rust. Casting of byte slices to integer slices mishandles alignment constraints...
PT-2020-16212
Name of the Vulnerable Software and Affected Versions sized-chunks crate versions through 0.6.2 Description An issue was discovered in the sized-chunks crate, where the array size is not checked when constructed with unit and pair in the Chunk implementation. Additionally, the array size is not...
PT-2020-16216
Name of the Vulnerable Software and Affected Versions sized-chunks crate versions through 0.6.2 Description An issue in the sized-chunks crate for Rust can lead to memory-safety problems. Specifically, in the Chunk implementation, the array size is not checked when constructed with unit, pair, or...
CVE-2020-15564
An issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a missing alignment check in VCPUOPregistervcpuinfo. The hypercall VCPUOPregistervcpuinfo is used by a guest to register a shared region with the hypervisor. The region will be mapped...