CVE-2023-22739 Discourse subject to Allocation of Resources Without Limits or Throttling

Discourse is an open source platform for community discussion. Versions prior to 3.0.1 stable, 3.1.0.beta2 beta, and 3.1.0.beta2 tests-passed are subject to Allocation of Resources Without Limits or Throttling. As there is no limit on data contained in a draft, a malicious user can create an...

PT-2023-1302 · Isc +9 · Bind 9 +9

Name of the Vulnerable Software and Affected Versions: BIND 9 versions 9.16.0 through 9.16.36 BIND 9 versions 9.18.0 through 9.18.10 BIND 9 versions 9.19.0 through 9.19.8 BIND 9 versions 9.16.8-S1 through 9.16.36-S1 Description: The issue is related to the allocation of large amounts of memory by...

PT-2023-13907 · Qt Company +1 · Qt +1

Name of the Vulnerable Software and Affected Versions: Qt versions 6.3.2 Description: An integer overflow issue exists in the QML QtScript Reflect API. This can be triggered by specially-crafted javascript code, leading to an integer overflow during memory allocation, which can result in arbitrar...

CVE-2022-3115

An issue was discovered in the Linux kernel through 5.16-rc6. malidpcrtcreset in drivers/gpu/drm/arm/malidpcrtc.c lacks check of the return value of kzalloc and will cause the null pointer dereference...

SUSE-SU-2022:3793-1 Security update for netty

This update for netty fixes the following issues: - CVE-2020-11612: The ZlibDecoders allow for unbounded memory allocation while decoding a byte stream bsc1168932 - CVE-2021-21290: Information disclosure via the local system temporary directory bsc1182103 - CVE-2021-37136: Bzip2Decoder doesn't...

CVE-2022-40885

CVE-2022-40885 affects Bento4 v1.6.0-639 and describes a memory allocation issue that can lead to denial of service. The NVD entry lists a MEDIUM base score (5.5) with local, low-attack-vector/access complexity, requiring user interaction, and HIGH impact on availability. Connected documents corr...

CVE-2022-40885

Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service...

SUSE-SU-2022:3617-1 Security update for netty

This update for netty fixes the following issues: - CVE-2020-11612: The ZlibDecoders allow for unbounded memory allocation while decoding a byte stream bsc1168932 - CVE-2021-21290: Information disclosure via the local system temporary directory bsc1182103 - CVE-2021-37136: Bzip2Decoder doesn't...

CVE-2022-36146

SWFMill commit 53d7690 was discovered to contain a memory allocation issue via operator new at asannewdelete.cpp...

CVE-2022-35009

PNGDec commit 8abf6be was discovered to contain a memory allocation problem via asanmalloclinux.cpp...

UBUNTU-CVE-2022-36146

SWFMill commit 53d7690 was discovered to contain a memory allocation issue via operator new at asannewdelete.cpp...

CVE-2022-36146

Technical details about CVE-2022-36146 are not publicly available in the provided connected documents. The description remains high level (memory allocation issue in SWFMill commit 53d7690). Monitor for updates.

CVE-2022-36155

CVE-2022-36155 affects tifig v0.2.2 with a resource allocation issue in asan_new_delete.cpp (operator new(unsigned long)). The CVE entry notes availability impact as HIGH while confidentiality and integrity remain NONE. Public details consistently describe the issue but do not provide exploit/vec...

CVE-2022-36155

tifig v0.2.2 was discovered to contain a resource allocation issue via operator newunsigned long at asannewdelete.cpp...

PT-2022-23227 · Swfmill +1 · Swfmill +1

Name of the Vulnerable Software and Affected Versions: SWFMill affected versions not specified Description: A memory allocation issue was discovered in SWFMill via the operator new at asan new delete.cpp. Recommendations: At the moment, there is no information about a newer version that contains ...

PNGDec 安全漏洞

PNGDec is an Arduino PNG image decoder library from the individual developer Larry Bank. A security vulnerability exists in PNGDec, which stems from a memory allocation issue in asanmalloclinux.cpp...

tifig 安全漏洞

tifig is a Monostream open source fast HEIF image converter for thumbnails. tifig v0.2.2 version of a security vulnerability , the vulnerability stems from its asannewdelete.cpp component in the new unsigned long has a resource allocation problem...

SUSE-SU-2022:1927-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.10.0 ESR MFSA 2022-21bsc1200027 - CVE-2022-31736: Cross-Origin resource's length leaked - CVE-2022-31737: Heap buffer overflow in WebGL - CVE-2022-31738: Browser window spoof using fullscreen mode -...

Mozilla: Register allocation problem in WASM on arm64

The Mozilla Foundation Security Advisory describes this flaw as: On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitable crash...

MGASA-2022-0191 Updated htmldoc packages fix security vulnerability

There is a vulnerability in htmldoc 1.9.16. In imageloadjpeg function image.cxx when it calls malloc,'img-width' and 'img-height' they are large enough to cause an integer overflow. So, the malloc function may return a heap blosmaller than the expected size, and it will cause a buffer...