The vulnerability of the `nsTArray_Impl::ReplaceElementsAt()` function in Thunderbird email clients, Firefox browsers, and Firefox ESR allows a malicious actor to execute arbitrary code.

The vulnerability of the nsTArrayImpl::ReplaceElementsAt function in Thunderbird email clients, Firefox browsers, and Firefox ESR browsers is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

GSD-2022-1004010 media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init

media: pvrusb2: fix array-index-out-of-bounds in pvr2i2ccoreinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003902 media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init

media: pvrusb2: fix array-index-out-of-bounds in pvr2i2ccoreinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003884 eth: tg3: silence the GCC 12 array-bounds warning

eth: tg3: silence the GCC 12 array-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003802 media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init

media: pvrusb2: fix array-index-out-of-bounds in pvr2i2ccoreinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003653 bpf: Fix potential array overflow in bpf_trampoline_get_progs()

bpf: Fix potential array overflow in bpftrampolinegetprogs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.120 by commit...

GSD-2022-1003606 media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init

media: pvrusb2: fix array-index-out-of-bounds in pvr2i2ccoreinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003583 eth: tg3: silence the GCC 12 array-bounds warning

eth: tg3: silence the GCC 12 array-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commit...

GSD-2022-1003445 usb: isp1760: Fix out-of-bounds array access

usb: isp1760: Fix out-of-bounds array access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003384 media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init

media: pvrusb2: fix array-index-out-of-bounds in pvr2i2ccoreinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003364 eth: tg3: silence the GCC 12 array-bounds warning

eth: tg3: silence the GCC 12 array-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

GSD-2022-1003171 usb: isp1760: Fix out-of-bounds array access

usb: isp1760: Fix out-of-bounds array access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1003064 eth: tg3: silence the GCC 12 array-bounds warning

eth: tg3: silence the GCC 12 array-bounds warning This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

GSD-2022-1002862 usb: isp1760: Fix out-of-bounds array access

usb: isp1760: Fix out-of-bounds array access This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

GSD-2022-1002857 bpf: Fix potential array overflow in bpf_trampoline_get_progs()

bpf: Fix potential array overflow in bpftrampolinegetprogs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.2 by commit...

GSD-2022-1002760 media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init

media: pvrusb2: fix array-index-out-of-bounds in pvr2i2ccoreinit This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

CVE-2021-40941

In Bento4 1.6.0-638, there is an allocator is out of memory in the function AP4Array::EnsureCapacity in Ap4Array.h:172, as demonstrated by GPAC. This can cause a denial of service DOS...

UBUNTU-CVE-2021-40941

In Bento4 1.6.0-638, there is an allocator is out of memory in the function AP4Array::EnsureCapacity in Ap4Array.h:172, as demonstrated by GPAC. This can cause a denial of service DOS...

Out-of-bound read data in function suggest_trie_walk() abusing array byts

Description Out-of-bound read data in function suggesttriewalk abusing array byts in line spellsuggest.c:1925 Tested version: v8.2.5166 commit f65cc665fa751bad3ffe75f58ce1251d6695949f HEAD - master, tag: v8.2.5166, origin/master, origin/HEAD Author: Bram Moolenaar Date: Sun Jun 26 18:17:50 2022...