The vulnerability of the DIAG Mode implementation in Qualcomm’s embedded software allows a perpetrator to execute arbitrary code or cause malfunctions during maintenance operations.

The vulnerability of the DIAG Mode implementation in Qualcomm’s embedded software lies in the lack of checks for buffer size during array indexing. Exploiting this vulnerability can allow attackers to execute arbitrary code or cause system failures...

PT-2021-7598 · Cgal +1 · Cgal +1

Name of the Vulnerable Software and Affected Versions: CGAL versions prior to 5.1.1 CGAL libcgal version 5.1.1 Description: The issue is related to unverified array indexing in the SNC io parser::read vertex function of the Nef S2/SNC io parser.h component in the CGAL library. This can be exploit...

PT-2021-7610 · Cgal +1 · Cgal +1

Name of the Vulnerable Software and Affected Versions: CGAL versions prior to 5.1.1 Description: The issue is related to unverified array indexing in the SNC io parser::read vertex function of the Nef S2/SNC io parser.h component in the CGAL library. This can be exploited by a remote attacker usi...

The vulnerability of the nsDirIndexParser::ParseFormat method (netwerk\streamconv\converters\nsDirIndexParser.cpp) in browsers such as Firefox, Firefox ESR, and the email client Thunderbird arises from the lack of checks during array-based indexing. This allows an attacker to gain access to protected information.

The vulnerability of the nsDirIndexParser::ParseFormat method netwerk\streamconv\converters\nsDirIndexParser.cpp in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to the lack of checks during array indexing. Exploiting this vulnerability can allow an attacker,...

libsixel unvalidated array indexing vulnerability

libsixel is a SIXEL encoder/decoder implementation. libsixel 1.8.6 is vulnerable to an unvalidated array indexing vulnerability. An attacker could exploit this vulnerability to cause out-of-bounds access to the gifoutcode function in fromgif.c...

libsixel 缓冲区错误漏洞

libsixel is a SIXEL encoder/decoder implementation. libsixel 1.8.6 is vulnerable to an unvalidated array indexing vulnerability. An attacker could exploit this vulnerability to cause out-of-bounds access to the gifoutcode function in fromgif.c...

CVE-2020-15211

In TensorFlow Lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, saved models in the flatbuffer format use a double indexing scheme: a model has a set of subgraphs, each subgraph has a set of operators and each operator has a set of input/output tensors. The flatbuffer format uses indice...

CVE-2020-15211

In TensorFlow Lite before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1, saved models in the flatbuffer format use a double indexing scheme: a model has a set of subgraphs, each subgraph has a set of operators and each operator has a set of input/output tensors. The flatbuffer format uses indice...

MikroTik RouterOS Resource Management Error Vulnerability (CNVD-2020-52205)

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. A resource management error vulnerability exists in MikroTik RouterOS versions 6.41.3 through 6.46.5 and 7, which...

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists through multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mo...

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists as multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mov fil...

Arbitrary Code Execution

gstreamer-plugins-good is vulnerable to arbitrary code execution. The vulnerability exists as multiple heap buffer overflows and an array indexing error were found in the GStreamer's QuickTime media file format decoding plugin. An attacker could create a carefully-crafted QuickTime media .mov fil...

The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks allows a attacker to trigger a service failure.

The vulnerability of IGMPv3 protocols in real-time operating systems like Wind River VxWorks is related to an array indexing error. Exploiting this vulnerability could allow a malicious actor to cause service failure by renaming “NULL” as IGMP...

Huawei EulerOS: Security Advisory for libpng12 (EulerOS-SA-2019-1391)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the microprogramming software in Huawei Nova 5i pro and Nova 5 mobile phones, related to unverified array indexing, allows attackers to execute arbitrary code.

The vulnerability of the microprogramming software in Huawei Nova 5i pro and Nova 5 mobile phones is related to unverified array indexing. Exploiting this vulnerability could allow a hacker to execute arbitrary code through a specially created application...

In-depth exploration found in the wild iOS exploit chain III-vulnerability warning-the black bar safety net

Overview This article exploits the chain's target is iOS 11-11. 4. 1, spanning nearly 10 months. This is what we observed first having a separate sandbox escape exploits chain. The sandbox escape vulnerability is libxpc in more serious security problem, wherein the reconstruction will lead to a W...

Foxit PhantomPDF < 8.3.11 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 8.3.11. It is, therefore affected by multiple vulnerabilities: - An uninitialized pointer flaw exists when calling xfa.event.rest XFA JavaScript that can cause the...

EulerOS Virtualization for ARM 64 3.0.1.0 : libpng12 (EulerOS-SA-2019-1391)

According to the versions of the libpng12 package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - An array-indexing error was discovered in the pngconverttorfc1123 function of libpng. An attacker could possibly use...

WebKit JavaScriptCore - 'createRegExpMatchesArray' Type Confusion

/ Prerequisites ------------- In JavaScriptCore, JSObjects have an associated Structure: an object describing various aspects of the JSObject such as its type, its properties, and the type of elements being stored e.g. unboxed double or JSValues. Whenever a property is added to an object or some...

The vulnerability of the SNMP NAT module in Linux operating systems allows attackers to increase their privileges or cause service failures.

The vulnerability of the SNMP NAT module net/ipv4/netfilter/nfnatsnmpbasicmain.c in the Linux operating system is due to indexing errors in the array. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service failures...