11846 matches found
Memory corruption
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length...
Information disclosure
Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet...
EulerOS 2.0 SP8 : ppp (EulerOS-SA-2023-1605)
According to the versions of the ppp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component...
Linux Kernel udmabuf Improper Validation of Array Index Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within a fault handler. The...
Huawei EulerOS: Security Advisory for ppp (EulerOS-SA-2023-1605)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2023-9522 · Openlink +4 · Openlink Virtuoso-Opensource +4
Name of the Vulnerable Software and Affected Versions: openlink virtuoso-opensource version 7.2.9 Description: The issue in the chash array component of openlink virtuoso-opensource is related to the improper neutralization of special elements used in SQL commands, allowing attackers to cause a...
NewStart CGSL CORE 5.04 / MAIN 5.04 : sudo Vulnerability (NS-SA-2023-0029)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has sudo packages installed that are affected by a vulnerability: - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based...
PT-2025-53227
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds error exists in the BIOS parser within the DRM/AMD driver of the Linux kernel. The issue stems from a hardcoded array size of 8 in atomfirmware.h, which can be exceeded ...
CVE-2023-26066
Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index...
CVE-2023-26066
Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index...
Input validation
Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index...
CVE-2023-26066
Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index...
CVE-2023-26066
The CVE-2023-26066 issue affects Lexmark printers with the PostScript interpreter, where improper validation of the stack/array indices allows remote code execution. Technical details in connected data specify: affected devices are Lexmark printers through 2023-02-19; vulnerability arises from im...
CVE-2023-26066
Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index...
Lexmark 输入验证错误漏洞
Lexmark is a line of printers in the United States. A security vulnerability exists in Certain Lexmark devices version 2023-02-19 and prior versions, which stems from incorrect validation of array indexes by Lexmark devices...
PT-2023-20461 · Lexmark · Lexmark
Name of the Vulnerable Software and Affected Versions: Lexmark devices through 2023-02-19 Description: The issue is related to Improper Validation of an Array Index, which can lead to an Out-Of-Bounds Read and potentially allow Remote Code Execution. This was demonstrated in a real-world scenario...
CollectionBatchBuyOperator.sol: tokenIds array is not shortened properly which makes execute function revert when not all NFTs are purchased successfully
Lines of code Vulnerability details Impact The CollectionBatchBuyOperator contract allows parties to buy NFTs through proposals. The proposal specifies an nftContract and token IDs via the nftTokenIdsMerkleRoot parameter that can be bought. Allowed executors can then execute the actual purchase b...
CVE-2022-33302 Improper validation of array index in User Identity Module
Memory corruption due to improper validation of array index in User Identity Module when APN TLV length is greater than command length...
CVE-2022-33302
CVE-2022-33302 describes a memory corruption in the Qualcomm User Identity Module caused by improper validation of an array index when the APN TLV length exceeds the command length. Documents reference this vulnerability across multiple feeds (NVD, Red Hat, PRION, CNNVD, CVE list) with the same d...