172 matches found
AFD
AFD CVE-2022-24494 이 취약점은 임의 메모리 읽기arbitrary memory read입니다. 근본 원인은 사용자 영역user-land에서 제공된 메모리 주소에 대한 검증이 없다는 점이며, 이 주소는 memcpy 작업에서 해당 메모리 주소의 데이터를 풀 메모리pool memory로 복사하는 데 사용됩니다. 검사가 누락된 위치는 Afd!AfdTliIoControl+0x40B 입니다. 위 스크린샷에서 볼 수 있듯이, 사용자 영역 메모리 주소는 InputBuffer+0x20에서 처음 복사될 때...
CVE-2021-28476
CVE-2021-28476: уязвимость удаленного выполнения кода от гостя к хосту «Microsoft Hyper-V Remote Code Execution Vulnerability» в vmswitch.sys. Это доказательство концепции для CVE-2021-28476 «Уязвимость удаленного выполнения кода Hyper-V», произвольное чтение памяти в vmswitch.sys провайдер сетев...
CVE-2024-2887
CVE-2024-2887 Это краткое описание CVE-2024-2887, которое я использовал для получения V8CTF M123. При определении большего количества типов, чем kV8MaxWasmTypes, что может быть достигнуто путем добавления большего количества типов в RecGroup, индекс типов может превышать 20 бит и затем...
GHSA-9W56-46F6-3QHX asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter
Summary With its default configuration numpy enabled, import disabled, asteval's Interpreter lets an attacker-controlled expression obtain a raw arbitrary process-memory read and write primitive, without using import, any dunder attribute, or eval/exec/getattr. Arbitrary in-process read/write is...
CVE-2025-29937
An out of bounds read within the AMD Platform Management Framework PMF could allow an attacker to trigger a read of an arbitrary memory location potentially resulting in loss of availability or confidentiality...
ruby: Arbitrary memory address read vulnerability with Regex search
A flaw was found in Ruby. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings...
AZL-81104 CVE-2026-34353 affecting package ocaml for versions less than 5.1.1-1
In OCaml through 4.14.3, Bigarray.reshape allows an integer overflow, and resultant reading of arbitrary memory, when untrusted data is processed...
CVE-2026-3437
An Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Portwell Engineering Toolkits version 4.8.2 could allow a local authenticated attacker to read and write to arbitrary memory via the Portwell Engineering Toolkits driver. Successful exploitation of this...
CVE-2025-33192
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-33192
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-33192
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-33192
CVE-2025-33192 affects NVIDIA DGX Spark GB10 via a vulnerability in the SROOT firmware that could allow an attacker with local access to perform an arbitrary memory read, potentially causing a denial of service. The impact is described as local, with availability as the primary concern; no exploi...
NVIDIA DGX Spark 安全漏洞
The NVIDIA DGX Spark is a personal AI computer from NVIDIA, USA. A security vulnerability exists in NVIDIA DGX Spark GB10, which stems from an arbitrary memory read in the SROOT firmware that could lead to a denial of service...
PT-2025-48053
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause an arbitrary memory read. A successful exploit of this vulnerability might lead to denial of service...
CVE-2025-55080
The vulnerability CVE-2025-55080 affects Eclipse ThreadX prior to version 6.4.3. Root cause: memory protection enabled, syscall parameter verification is insufficient, enabling an attacker to obtain an arbitrary memory read/write. Affected component: ThreadX RTOS (pre-6.4.3). Impact: arbitrary me...
PT-2025-42235
In Eclipse ThreadX before 6.4.3, when memory protection is enabled, syscall parameters verification wasn't enough, allowing an attacker to obtain an arbitrary memory read/write...
EUVD-2019-11960
Malware in sbrugna...
EUVD-2017-12036
Malware in sbrugna...