PT-2021-25991

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.285 Description The issue concerns error handling in the mcb alloc bus function. It was introduced in version v4.7 and fixed in version v4.9.285. The actual impact and attack plausibility have not yet been...

PT-2021-26015

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.249 Description The issue concerns error handling in the mcb alloc bus function. It was introduced in version v4.7 and fixed in version v4.14.249. The actual impact and attack plausibility have not yet been...

PT-2021-30140

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.70 Description The issue concerns error handling in the mcb alloc bus function. It was introduced in version v4.7 and fixed in version v5.10.70. The actual impact and attack plausibility have not yet been...

The vulnerability in the implementation of the ti_sysbios_rts_MemAlloc_alloc() function (tirtos/packages/ti/sysbios/rts/MemAlloc.xdt) in the software development kit for microcontroller families SimpleLink, including CC13XX, CC26XX, CC32XX, and MSP432E4, allows a malicious actor to execute arbitrary code or cause a service failure.

The vulnerability of the tisysbiosrtsMemAllocalloc implementation tirtos/packages/ti/sysbios/rts/MemAlloc.xdt in the software development kit for microcontroller families SimpleLink, including CC13XX, CC26XX, CC32XX, and MSP432E4, is caused by a numerical overflow. Exploiting this vulnerability c...

PT-2024-11370

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential VPE leak on error has been resolved in the Linux kernel. The issue occurs in the its vpe irq domain alloc function when its vpe init returns an error, causing an off-by-one i...

PT-2021-22667

Name of the Vulnerable Software and Affected Versions: swftools versions through 20200710 Description: An issue was discovered in the function rfx alloc located in mem.c, which allows an attacker to cause code execution due to a stack-buffer-overflow. Recommendations: For versions through 2020071...

PT-2024-11358

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns error handling in the mcb alloc bus function. There are two bugs: 1 If ida simple get fails, the code calls put devicecarrier without previously calling get...

PT-2024-11461

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is a reference count leak in the kfree at end function of the Linux kernel. This occurs when the kunit alloc and get resource function is invoked, causing the returned resource...

PT-2021-4485

Name of the Vulnerable Software and Affected Versions libjpeg-turbo affected versions not specified Description The issue is related to the alloc large and alloc sarray functions in the libjpeg-turbo library, which has shortcomings in handling input values. This can be exploited by a remote...

CVE-2021-37646 Bad alloc in `StringNGrams` caused by integer conversion in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The...

PT-2021-29662

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.13.4 Description The issue is related to the initialization of a connection to the server in the nfs4 alloc client function. The actual impact and attack plausibility have not yet been proven. It was introduce...

PT-2021-29850

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to the initialization of a connection to the server in the nfs4 alloc client function. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2021-29792

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue is related to the initialization of a connection to the server in the nfs4 alloc client function. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-29735

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.8 through 5.10.51 Description The issue is related to the initialization of a connection to the server in the nfs4 alloc client function. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2021-25667

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.13.4 Description: The issue is related to the initialization of a connection to the server in the nfs4 alloc client function. The actual impact and attack plausibility have not yet been proven. It was...

PT-2021-25797

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue is related to the initialization of a connection to the server in the nfs4 alloc client function. The actual impact and attack plausibility have not yet been proven. Recommendations...

CVE-2021-36148

An issue was discovered in ACRN before 2.5. dmarfreeirte in hypervisor/arch/x86/vtd.c allows an irteallocbitmap buffer overflow...

PT-2021-21138

Name of the Vulnerable Software and Affected Versions: ACRN versions prior to 2.5 Description: An issue was discovered in the hypervisor component of ACRN, specifically in the dmar free irte function located in hypervisor/arch/x86/vtd.c. This issue allows an irte alloc bitmap buffer overflow...

PT-2021-29331

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.237 Description The issue is related to error handling of the scsi host alloc function in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kern...

PT-2021-25320

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.9.273 Description: The issue is related to error handling in the scsi host alloc function. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux Kernel versions prior...