The vulnerability of the ff_hevc_put_hevc_epel_pixels_8_sse function (sse-motion.cc) in the h.265 Libde265 video codec implementation allows a attacker to cause a service failure.

The vulnerability of the ffhevcputhevcepelpixels8sse function sse-motion.cc in the H.265 Libde265 video codec implementation is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...

Low: protobuf-c

Issue Overview: A flaw was found in protobuf-c. The issue occurs due to an invalid arithmetic shift via the parsetagandwiretype in the protobuf-c/protobuf-c.c function. This flaw allows attackers to cause a denial of service DoS via unspecified vectors. CVE-2022-33070 Affected Packages: protobuf-...

Incorrect calculation of gasToPay due to dividing before multiplying, rounding error.

Lines of code Vulnerability details Impact In Solidity, it is an error to divide before multiplying because of lots of rounding errors that can come from that. In this case: uint256 pubdataLen; unchecked pubdataLen = message.length + 31 / 32 32 + 64; uint256 gasToPay = pubdataLen...

The vulnerability in the implementation of the TIPC protocol (Transparent Inter-Process Communication) in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the TIPC protocol’s implementation in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in the `net/unix/diag.c` component of the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the net/unix/diag.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ZERO TRUNCATION COULD LEAD TO UNEXPECTED RESULTS

Lines of code Vulnerability details Impact Precision issue leading to zero truncation due to numerator smaller than denominator in a ratio or a division happens readily in Solidity if extra cares have not been given to it. Arithmetic operations running into this incident are typically associated...

The vulnerability of the ufs_mtk_init_va09_pwr_ctrl() function (drivers/scsi/ufs/ufs-mediatek.c) in the Linux operating system’s UFS driver allows a hacker to cause a service failure.

The vulnerability of the ufsmtkinitva09pwrctrl function drivers/scsi/ufs/ufs-mediatek.c in the Linux operating system’s UFS driver is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the memory_tier_init() function (mm/memory-tiers.c) in the Linux kernel’s memory management subsystem allows a attacker to trigger a service failure.

The vulnerability of the memorytierinit function mm/memory-tiers.c in the Linux kernel’s memory management subsystem is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

SWC-101 Artihmetic Overflow test/LotteryInvariantChecks.t.sol testBuyClaimFinalize()

Lines of code Vulnerability details Impact Integer overflow on finalizeDraw function. Failing tests: Encountered 1 failing test in test/LotteryInvariantChecks.t.sol:LotteryInvariantChecksTest FAIL. Reason: Arithmetic over/underflow Counterexample:...

Debian: Security Advisory (DLA-120)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Windows Media Player media player on the Windows operating system, which allows a hacker to execute arbitrary code.

The vulnerability of Windows Media Player, a component of the Windows operating system, arises due to a loss of precision in integer arithmetic. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Security Bulletin: IBM b-type SAN switches and directors affected by Open Source OpenSSL Vulnerabilities (CVE-2016-2177, CVE-2016-2178).

Summary IBM b-type SAN switches and directors addressing Open Source OpenSSL Vulnerabilities CVE-2016-2177, CVE-2016-2178. Vulnerability Details Relevant CVE Information: CVEID: CVE-2016-2177 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by the incorrect use of pointer...

SUSE-SU-2023:0522-1 Security update for the Linux Kernel (Live Patch 26 for SLE 15 SP3)

This update for the Linux Kernel 5.3.18-15030059101 fixes several issues. The following security issues were fixed: - CVE-2022-3564: Fixed use-after-free in l2capcore.c of the Bluetooth component bsc1206314. - CVE-2023-0179: Fixed incorrect arithmetics when fetching VLAN header bits bsc1207139...

K48187630: Multiple grub2 vulnerabilities

Security Advisory Description CVE-2020-14308 In grub2 versions before 2.06 the grub memory allocator doesn't check for possible arithmetic overflows on the requested allocation size. This leads the function to return invalid memory allocations which can be further used to cause possible integrity...

K43030517: Linux kernel BPF vulnerability CVE-2019-7308

Security Advisory Description kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks...

K70992015: Linux kernel vulnerabilty CVE-2021-33200

Security Advisory Description kernel/bpf/verifier.c in the Linux kernel through 5.12.7 enforces incorrect limits for pointer arithmetic operations, aka CID-bb01a1bba579. This can be abused to perform out-of-bounds reads and writes in kernel memory, leading to local privilege escalation to root. I...

CVE

CMS source code url: https://www.sourcecodester.com/php/16166/on...

SUSE CVE-2006-3464

TIFF library libtiff before 3.8.2 allows context-dependent attackers to pass numeric range checks and possibly execute code, and trigger assert errors, via large offset values in a TIFF directory that lead to an integer overflow and other unspecified vectors involving "unchecked arithmetic...

SUSE CVE-2007-4661

The chunksplit function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing integer arithmetic with floating point numbers, which has unknown attack vectors and impact, possibly resulting in a heap-based buffer overflow. NOTE: this is...

SUSE CVE-2008-1685

gcc 4.2.0 through 4.3.0 in GNU Compiler Collection, when casts are not used, considers the sum of a pointer and an int to be greater than or equal to the pointer, which might lead to removal of length testing code that was intended as a protection mechanism against integer overflow and buffer...