CVE-2021-41751

Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function ecmabuiltinarrayprototypeobjectslice in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021...

JerryScript security vulnerabilities

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript that originates from a buffer overflow in file ecma-builtin-array-prototype.c:909 in function ecmabuiltinarrayprototypeobjectslice...

PT-2022-11475

Name of the Vulnerable Software and Affected Versions Jerryscript versions prior to commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 Description A buffer overflow vulnerability exists in the file ecma-builtin-array-prototype.c, specifically in the function ecma builtin array prototype object slice...

CVE-2021-41751: Buffer Copy without Checking Size of Input

Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function ecmabuiltinarrayprototypeobjectslice in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021...

tinyexr::SaveEXR DoS

The vulnerability of the tinyexr::SaveEXR component in the OpenEXR Tinyexr processing library is related to an error in the array indexing mechanism. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

DataTables Table Processing XSS

The vulnerability of the DataTables table processing plugin is related to incorrect handling of arrays in the input data. Exploiting this vulnerability allows an attacker to compromise the integrity of the data...

Improper Validation of Array Index

This vulnerability is of type Improper Validation of Array Index. The bug exists in latest stable release radare2-5.6.6 and lastest master branch 8317a34b7e4ab731e230dcdd81adc9323c5b518b, updated in April 03, 2022. Specifically, the vulnerable code located at libr/bin/format/ne/ne.c and the bug's...

(0Day) Array Networks MotionPro Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Array Networks MotionPro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Function getUserPastLock may return incorrect values

Lines of code Vulnerability details Impact userLocks array can contain elements with the same fromBlock properties, but different total locked amounts. This edge case is not considered in the implementation of getUserPastLock function, which returns a value as soon as it finds a UserLock with...

tinyexr::DecodeEXRImage DoS

The vulnerability of the tinyexr::DecodeEXRImage component in the OpenEXR Tinyexr processing library is related to an error in the array indexing mechanism. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

CVE-2021-39739

In ArrayMap, there is a possible leak of the content of SMS messages due to log information disclosure. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...

USN-5313-2: OpenJDK 11 regression

USN-5313-1 fixed vulnerabilities and added features in OpenJDK. Unfortunately, that update introduced a regression in OpenJDK 11 that could impact interoperability with some popular HTTP/2 servers making it unable to connect to said servers. This update fixes the problem. We apologize for the...

Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability

OleAut32.dll in OLE in Microsoft Windows allows remote attackers to remotely execute code via a crafted web site...

PT-2025-7983

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null-pointer dereference issue exists due to the potential null return of kmalloc array. This can lead to a null-pointer dereference in event waitersi.wait. The issue arises because...

numpy: buffer overflow in the array_from_pyobj() in fortranobject.c

Buffer overflow in the arrayfrompyobj function of fortranobject.c in NumPy 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative values. NOTE: The vendor does not agree this is a vulnerability; the negative dimensions can only be...

Citrix Xenserver 7.1CU2 to Citrix Hypervisor 8.2 upgrade gets stuck at Boot Screen for servers with HPE Smart Array

After the Host is booted into the installer kernel it gets stuck at following screen...

PT-2022-3358

Name of the Vulnerable Software and Affected Versions Nginx NJS version 0.7.2 Description The issue is related to a buffer overflow in the njs array prototype sort function of the njs interpreter in the nginx server. This can be exploited by a remote attacker to cause a denial of service...

GSD-2022-1000799 iio: adc: tsc2046: fix memory corruption by preventing array overflow

iio: adc: tsc2046: fix memory corruption by preventing array overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.26 by commit...

GSD-2022-1000731 iio: adc: tsc2046: fix memory corruption by preventing array overflow

iio: adc: tsc2046: fix memory corruption by preventing array overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.12 by commit...

PT-2022-29005

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.14 through v5.16.11 Description The issue is related to memory corruption caused by array overflow in the tsc2046 driver. It was introduced in version v5.14 and fixed in version v5.16.12. The actual impact and attack...