1472 matches found
CVE-2021-27203
CVE-2021-27203 affects Dekart Private Disk 2.15, where invalid use of the Type3 user buffer for IOCTL codes using METHOD_NEITHER leads to arbitrary memory dereferencing. The description notes a memory corruption type vulnerability with local impact (attack vector likely local). The Connected docu...
PT-2021-17320
Name of the Vulnerable Software and Affected Versions: Dekart Private Disk version 2.15 Description: The issue arises from the invalid use of the Type3 user buffer for IOCTL codes using METHOD NEITHER, leading to arbitrary memory dereferencing. Recommendations: For Dekart Private Disk version 2.1...
CVE-2021-27203: NULL Pointer Dereference
In Dekart Private Disk 2.15, invalid use of the Type3 user buffer for IOCTL codes using METHODNEITHER results in arbitrary memory dereferencing...
CVE-2020-27259
The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remotely execute arbitrary code...
CVE-2020-27259 Omron CX-One
The Omron CX-One Version 4.60 and prior may allow an attacker to supply a pointer to arbitrary memory locations, which may allow an attacker to remotely execute arbitrary code...
Qualcomm Video Input Validation Error Vulnerability
Qualcomm Video is a Qualcomm Incorporated USA video component used in Qualcomm products. A security vulnerability exists in Qualcomm Video that stems from an arbitrary memory write issue in the video driver when setting internal buffers...
CVE-2021-25904
An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault...
CVE-2021-25904: NULL Pointer Dereference
An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault...
RUSTSEC-2021-0007 `Frame::copy_from_raw_parts` can lead to segfault without `unsafe`
fn Frame::copyfromrawparts is a safe API that can take a raw pointer and dereference it. It is possible to read arbitrary memory address with an arbitrarily fed pointer. This allows the safe API to access & read arbitrary address in memory. Feeding an invalid memory address pointer to the API may...
`Frame::copy_from_raw_parts` can lead to segfault without `unsafe`
fn Frame::copyfromrawparts is a safe API that can take a raw pointer and dereference it. It is possible to read arbitrary memory address with an arbitrarily fed pointer. This allows the safe API to access & read arbitrary address in memory. Feeding an invalid memory address pointer to the API may...
PT-2021-16835
Name of the Vulnerable Software and Affected Versions av-data crate versions prior to 0.3.0 Description An issue in the av-data crate allows a raw pointer to be dereferenced, leading to a read of an arbitrary memory address. This can sometimes cause a segfault. The fn Frame::copy from raw parts...
Memory corruption
An attacker could send a specially crafted message to Crimson 3.1 Build versions prior to 3119.001 that could leak arbitrary memory locations...
CVE-2020-27283: Improper Resource Shutdown or Release
An attacker could send a specially crafted message to Crimson 3.1 Build versions prior to 3119.001 that could leak arbitrary memory locations...
Exploit for CVE-2021-26943
SmmExploit This is a report and an exploit of CVE-2021-26943...
CVE-2020-8940
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to encuntrustedrecvmsg using an attacker controlled result parameter. The parameter size is unchecked allowing the attacker to read memory locations outside of the intended buffer size...
CVE-2020-8937
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to encuntrustedcreatewaitqueue that uses a pointer queue that relies on UntrustedLocalMemcpy, which fails to validate where the pointer is located. This allows an attacker to write...
CVE-2020-8936
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall failed to validate the buffer range within sgxparams and allowed the host to return a pointer that was an address within the enclave memory. This allowe...
CVE-2020-8942
An arbitrary memory read vulnerability in Asylo versions up to 0.6.0 allows an untrusted attacker to make a call to encuntrustedread whose return size was not validated against the requrested size. The parameter size is unchecked allowing the attacker to read memory locations outside of the...
CVE-2020-8936
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to UntrustedCall. UntrustedCall failed to validate the buffer range within sgxparams and allowed the host to return a pointer that was an address within the enclave memory. This allowe...
CVE-2020-8937
An arbitrary memory overwrite vulnerability in Asylo versions up to 0.6.0 allows an attacker to make a host call to encuntrustedcreatewaitqueue that uses a pointer queue that relies on UntrustedLocalMemcpy, which fails to validate where the pointer is located. This allows an attacker to write...