CVE-2021-30501

An assertion abort was found in upx MemBuffer::alloc in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service abort via a crafted file...

CVE-2021-30501: Improper Input Validation

An assertion abort was found in upx MemBuffer::alloc in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service abort via a crafted file...

GHSA-3WCQ-X3MQ-6R9P Potential memory exposure in dns-packet

This affects the package dns-packet before versions 1.3.2 and 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over unencrypted network when querying crafted invalid domain names...

Remote Memory Exposure

Overview dns-packet is an An abstract-encoding compliant module for encoding / decoding DNS packets Affected versions of this package are vulnerable to Remote Memory Exposure. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose interna...

PT-2024-11149

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak has been resolved in the Linux kernel. The issue occurred in the uio hv generic module, where memory allocated by vmbus alloc ring at the beginning of the probe function wa...

PT-2021-4215 · Texas Instruments · Ti-Rtos

Name of the Vulnerable Software and Affected Versions: Texas Instruments TI-RTOS affected versions not specified Description: The issue is related to an integer overflow vulnerability in the HeapMem allocUnprotected function. This vulnerability can be triggered when the malloc function returns a...

PT-2021-3967

Name of the Vulnerable Software and Affected Versions TencentOS-tiny version 3.1.0 Description The issue is related to an integer overflow in the tos mmheap alloc function of the TencentOS real-time operating system. This can lead to improper memory allocation, resulting in unexpected behavior su...

PT-2021-18570

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is a Null Pointer Dereference in the gf filter pck new alloc internal function, located in filter core/filter pck.c. This occurs because the ctx.opid may be NULL, causing a crash. The pid is derived fro...

The vulnerability in the implementation of the soundtriggereventalloc function of the Audio Server component in Android operating systems allows a hacker to escalate their privileges.

The vulnerability of the soundtriggereventalloc function implementation in the Audio Server component of Android operating systems is related to writing data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability in the implementation of the dev_map_init_map and sock_map_alloc functions in the Linux kernel allows a hacker to trigger a system crash or enhance their privileges.

The vulnerability of the devmapinitmap and sockmapalloc functions in the Linux kernel exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause the system to crash or increase their privileges...

A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.

...

DEBIAN-CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls devmapinitmap or sockmapalloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from thi...

DEBIAN-CVE-2020-25639

A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRMIOCTLNOUVEAUCHANNELALLOC. This flaw allows a local user to crash the system...

PT-2021-4229 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.9.x through 5.11.3 Description: The issue relates to misuse of guest physical addresses when a configuration has CONFIG XEN UNPOPULATED ALLOC but not CONFIG XEN BALLOON MEMORY HOTPLUG, allowing an x86 PV guest OS user ...

PT-2021-2482

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a heap buffer overflow in the sound trigger event alloc function of the Android kernel's Audio Server component. This could lead to a local escalation of privilege with no additional executi...

An issue was discovered in the Linux kernel 4.18 through 5.10.16 as used by Xen. The backend allocation (aka be-alloc) mode of the drm_xen_front drivers was not meant to be a supported configuration but this wasn't stated accordingly in its support status entry.

...

DEBIAN-CVE-2021-26934

An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation aka be-alloc mode of the drmxenfront drivers was not meant to be a supported configuration, but this wasn't stated accordingly in its support status entry...

CVE-2021-26934: Undefined Security Weakness

An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation aka be-alloc mode of the drmxenfront drivers was not meant to be a supported configuration, but this wasn't stated accordingly in its support status entry...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a code issue vulnerability that can be exploited by an attacker to trigger a denial of service by forcing a null pointer dereference via...

PT-2021-2371

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12-rc1 Description The issue is related to a NULL pointer dereference flaw in the Linux kernel's GPU Nouveau driver. This flaw can be exploited by a local user to crash the system by calling the ioctl function...