172 matches found
AFD
AFD CVE-2022-24494 この脆弱性は任意のメモリ読み取りです。根本原因は、ユーザーランドから提供されたメモリアドレスの検証が欠如しており、そのアドレスが memcpy 操作で使用されてプールメモリにデータをコピーすることにあります。 チェックの欠如はアドレス Afd!AfdTliIoControl+0x40B にあります。 上のスクリーンショットの通り、ユーザーランドのメモリアドレスは InputBuffer+0x20 から一度目は MmUserProbeAddress...
CVE-2021-28476
CVE-2021-28476: vmswitch.sys의 게스트-호스트 "Microsoft Hyper-V 원격 코드 실행 취약점" 이것은 CVE-2021-28476 "Hyper-V 원격 코드 실행 취약점"에 대한 개념 증명PoC으로, 2021년 5월 Microsoft가 패치한 vmswitch.sys네트워크 가상화 서비스 제공자의 임의 메모리 읽기 취약점입니다. 이 취약점은 @australeo, @ergot86, @peleghd 및 @OphirHarpaz에 의해 발견되었습니다. 게스트 가상 머신이 VMBus를 통해 악의적인 RNDI...
CVE-2024-2887
CVE-2024-2887 これは、V8CTF M123 をクレームするために使用した CVE-2024-2887 の簡単な解説です。 kV8MaxWasmTypes よりも多くの型を定義する場合（RecGroup 内に型を追加することで実現可能）、型インデックスが 20 ビットを超えてオーバーフローする可能性があります。その結果、同じ heaptype を持つ 2 つの型が同一と見なされる可能性があります。 ref オブジェクトを持つ配列を作成し、float64 配列を介して読み取ることで addrof プリミティブを実現できます。また、float64...
GHSA-9W56-46F6-3QHX asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter
Summary With its default configuration numpy enabled, import disabled, asteval's Interpreter lets an attacker-controlled expression obtain a raw arbitrary process-memory read and write primitive, without using import, any dunder attribute, or eval/exec/getattr. Arbitrary in-process read/write is...
CVE-2025-29937
An out of bounds read within the AMD Platform Management Framework PMF could allow an attacker to trigger a read of an arbitrary memory location potentially resulting in loss of availability or confidentiality...
ruby: Arbitrary memory address read vulnerability with Regex search
A flaw was found in Ruby. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings...
AZL-81104 CVE-2026-34353 affecting package ocaml for versions less than 5.1.1-1
In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed...
CVE-2026-3437
An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Portwell Engineering Toolkits version 4.8.2 could allow a local authenticated attacker to read and write to arbitrary memory via the Portwell Engineering Toolkits driver. Successful exploitation of this...
CVE-2025-33192
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-33192
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-33192
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-33192
CVE-2025-33192 affects NVIDIA DGX Spark GB10 via a vulnerability in the SROOT firmware that could allow an attacker with local access to perform an arbitrary memory read, potentially causing a denial of service. The impact is described as local, with availability as the primary concern; no exploi...
NVIDIA DGX Spark 安全漏洞
The NVIDIA DGX Spark is a personal AI computer from NVIDIA, USA. A security vulnerability exists in NVIDIA DGX Spark GB10, which stems from an arbitrary memory read in the SROOT firmware that could lead to a denial of service...
PT-2025-48053
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-55080
The vulnerability CVE-2025-55080 affects Eclipse ThreadX prior to version 6.4.3. Root cause: memory protection enabled, syscall parameter verification is insufficient, enabling an attacker to obtain an arbitrary memory read/write. Affected component: ThreadX RTOS (pre-6.4.3). Impact: arbitrary me...
PT-2025-42235
In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...
EUVD-2019-11960
Malware in sbrugna...
EUVD-2017-12036
Malware in sbrugna...