CVE-2022-33070: Undefined Security Weakness

Protobuf-c v1.4.0 was discovered to contain an invalid arithmetic shift via the function parsetagandwiretype in protobuf-c/protobuf-c.c. This vulnerability allows attackers to cause a Denial of Service DoS via unspecified vectors...

safeMath function being used without importing the safeMath library preventing contract compilation

Lines of code Vulnerability details Impact Contract NotionalTradeModule.sol will not compile due to an error caused by missing import of safeMath and the directive using for. Since safeMath is not imported and no using for directive, the contract would not even compile as it would throw an error ...

KVM DoS

The vulnerability of the KVM virtualization subsystem in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to trigger a service failure...

QA Report

Reinitalisation in BkdLocker.sol In the initialize function, the only check is made that the current startBoost value is zero, if zero is passed then this allows the function to be reinitialised and potentially modifying other variables which should remain constant. Consider making a check that t...

Vim Heap Buffer Overflow DoS

The vulnerability of the vimregexecstring function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to trigger a service failure using specially crafted input data...

EulerOS 2.0 SP3 : gnuplot (EulerOS-SA-2022-1725)

According to the versions of the gnuplot packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and...

njs_vmcode_array Heap Buffer Overflow DoS

The vulnerability of the njsvmcodearray component /src/njsvmcode.c. of the njs interpreter on the nginx server is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Vim Heap Buffer Overflow DoS

The vulnerability of the vimregexecstring function in the Vim text editor is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux map_get_next_key DoS

The vulnerability of the mapgetnextkey function in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Setting a high feeRate can block exercise or cause negative flow of funds

Lines of code Vulnerability details Impact When an admin intentionally or unintentionally sets a feeRate greater than 1e18 100%, The exercise function can fail with arithmetic operation underflow at line 289 In the case, when beneficiary is connected to multiple vaults, the exercise function will...

PHP phar_get_entry_data DoS

The vulnerability of the phargetentrydata function in the PHP language interpreter is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause service failures or potentially cause other adverse effects...

PHP exif_process_user_comment Heap Buffer Overflow DoS

The vulnerability of the exifprocessusercomment function ext/exif/exif.c in the PHP programming language is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PHP php_wddx_pop_element DoS

The vulnerability of the phpwddxpopelement function ext/wddx/wddx.c in the PHP programming language is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

PHP ext/wddx/wddx.c DoS

The vulnerability of the ext/wddx/wddx.c component of the PHP programming language interpreter is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service failures by sending invalid XML documents...

PHP ext/wddx/wddx.c DoS

The vulnerability of the ext/wddx/wddx.c component of the PHP interpreter is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service failures through a corrupted XML document...

PHP ext/standard/var.c DoS

The vulnerability of the ext/standard/var.c component of the PHP interpreter is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Linux SMB2 IOCTL DoS

The vulnerability of the smb2ioctlqueryinfo function fs/cifs/smb2ops.c in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the gcdatasegment function fs/f2fs/gc.c in the Linux operating system kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

GPAC MPEG-4 Decoder Confidential Data Access

The vulnerability of the CTS decoder used in MPEG-4 multimedia platform GPAC is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

SIX functional decoding system MPEG-4 Multimedia Platform DoS

The vulnerability of the SSIX decoder for MPEG-4 multimedia platform GPAC is related to incorrect checking of the result of an arithmetic operation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...