The vulnerability in the implementation of the ti_sysbios_rts_MemAlloc_alloc() function (tirtos/packages/ti/sysbios/rts/MemAlloc.xdt) in the software development kit for microcontroller families SimpleLink, including CC13XX, CC26XX, CC32XX, and MSP432E4, allows a malicious actor to execute arbitrary code or cause a service failure.

The vulnerability of the tisysbiosrtsMemAllocalloc implementation tirtos/packages/ti/sysbios/rts/MemAlloc.xdt in the software development kit for microcontroller families SimpleLink, including CC13XX, CC26XX, CC32XX, and MSP432E4, is caused by a numerical overflow. Exploiting this vulnerability c...

CVE-2021-37646 Bad alloc in `StringNGrams` caused by integer conversion in TensorFlow

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the implementation of tf.rawops.StringNGrams is vulnerable to an integer overflow issue caused by converting a signed integer value to an unsigned one and then allocating memory based on this value. The...

CVE-2021-36148

An issue was discovered in ACRN before 2.5. dmarfreeirte in hypervisor/arch/x86/vtd.c allows an irteallocbitmap buffer overflow...

UVI-2021-1000300 KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit

KVM: x86/mmu: Alloc page for PDPTEs when shadowing 32-bit NPT with 64-bit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.4 by commit...

CVE-2021-30501

CVE-2021-30501 concerns UPX 4.0.0, where an assertion abort in MemBuffer::alloc() (mem.cpp) can be triggered by a crafted file, potentially causing a denial of service. Connected sources confirm the affected component and root cause. OpenSUSE/SUSE advisories (openSUSE-SU-2023:0088-1) and OSV entr...

CVE-2021-30501

An assertion abort was found in upx MemBuffer::alloc in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service abort via a crafted file...

GHSA-3WCQ-X3MQ-6R9P Potential memory exposure in dns-packet

This affects the package dns-packet before versions 1.3.2 and 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over unencrypted network when querying crafted invalid domain names...

Remote Memory Exposure

Overview dns-packet is an An abstract-encoding compliant module for encoding / decoding DNS packets Affected versions of this package are vulnerable to Remote Memory Exposure. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose interna...

PT-2024-11149 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak has been resolved in the Linux kernel. The issue occurred in the uio hv generic module, where memory allocated by vmbus alloc ring at the beginning of the probe function...

PT-2021-4215 · Texas Instruments · Ti-Rtos

Name of the Vulnerable Software and Affected Versions: Texas Instruments TI-RTOS affected versions not specified Description: The issue is related to an integer overflow vulnerability in the HeapMem allocUnprotected function. This vulnerability can be triggered when the malloc function returns a...

The vulnerability in the implementation of the soundtriggereventalloc function of the Audio Server component in Android operating systems allows a hacker to escalate their privileges.

The vulnerability of the soundtriggereventalloc function implementation in the Audio Server component of Android operating systems is related to writing data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability in the implementation of the dev_map_init_map and sock_map_alloc functions in the Linux kernel allows a hacker to trigger a system crash or enhance their privileges.

The vulnerability of the devmapinitmap and sockmapalloc functions in the Linux kernel exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause the system to crash or increase their privileges...

A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.

...

DEBIAN-CVE-2021-20268

An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls devmapinitmap or sockmapalloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from thi...

DEBIAN-CVE-2020-25639

A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRMIOCTLNOUVEAUCHANNELALLOC. This flaw allows a local user to crash the system...

PT-2021-4229 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.9.x through 5.11.3 Description: The issue relates to misuse of guest physical addresses when a configuration has CONFIG XEN UNPOPULATED ALLOC but not CONFIG XEN BALLOON MEMORY HOTPLUG, allowing an x86 PV guest OS user ...

An issue was discovered in the Linux kernel 4.18 through 5.10.16 as used by Xen. The backend allocation (aka be-alloc) mode of the drm_xen_front drivers was not meant to be a supported configuration but this wasn't stated accordingly in its support status entry.

...

DEBIAN-CVE-2021-26934

An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation aka be-alloc mode of the drmxenfront drivers was not meant to be a supported configuration, but this wasn't stated accordingly in its support status entry...

Linux kernel 代码问题漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a code issue vulnerability that can be exploited by an attacker to trigger a denial of service by forcing a null pointer dereference via...

PolyAsciiShellGen

It is an offensive tool for x86 platforms. The primary CVE ID present in the provided context is not explicitly stated, but the tool is related to bypassing MSB data filters for buffer overflow exploits on Intel x86 platforms, as described in the paper "Bypassing MSB Data Filters for Buffer...