Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in TensorFlow

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of TensorFlow. Vulnerability Details CVEID: CVE-2022-29210 DESCRIPTION: TensorFlow is vulnerable to a denial of service, caused by a heap-based buffer overflow in the TensorKey hash function. A local authenticat...

CVE-2021-3431 BT: Assertion failure on repeated LL_FEATURE_REQ

Assertion reachable with repeated LLFEATUREREQ. Zephyr versions = v2.5.0 contain Reachable Assertion CWE-617. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-7548-5m6f-mqv9...

CVE-2021-3430 BT: Assertion failure on repeated LL_CONNECTION_PARAM_REQ

Assertion reachable with repeated LLCONNECTIONPARAMREQ. Zephyr versions = v1.14 contain Reachable Assertion CWE-617. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-46h3-hjcq-2jjr...

GNU LibreDWG Denial of Service Vulnerability (CNVD-2022-52259)

GNU LibreDWG is a GNU community library for processing DWG files in C. A denial of service vulnerability exists in GNU LibreDWG, which stems from an assertion failure in the program. A remote attacker could exploit this vulnerability to cause a denial of service...

CVE-2022-33069

Ethereum Solidity v0.8.14 contains an assertion failure via SMTEncoder::indexOrMemberAssignment at SMTEncoder.cpp...

CVE-2022-33069

Ethereum Solidity v0.8.14 contains an assertion failure via SMTEncoder::indexOrMemberAssignment at SMTEncoder.cpp...

CVE-2022-33024

There is an Assertion int decodepreR13entitiesBITCODERL, BITCODERL, unsigned int, BITCODERL, BITCODERL, BitChain , DwgData ' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608...

CVE-2022-33024

There is an Assertion int decodepreR13entitiesBITCODERL, BITCODERL, unsigned int, BITCODERL, BITCODERL, BitChain , DwgData ' failed at dwg2dxf: decode.c:5801 in libredwg v0.12.4.4608...

Authentication flaw

Ethereum Solidity v0.8.14 contains an assertion failure via SMTEncoder::indexOrMemberAssignment at SMTEncoder.cpp...

libredwg 安全漏洞

GNU LibreDWG is a GNU community library for processing DWG files in C. A denial of service vulnerability exists in GNU LibreDWG, which stems from an assertion failure in the program. A remote attacker could exploit this vulnerability to cause a denial of service...

CVE-2022-31009: Reachable Assertion

wire-ios is an iOS client for the Wire secure messaging application. Invalid accent colors of Wire communication partners may render the iOS Wire Client partially unusable by causing it to crash multiple times on launch. These invalid accent colors can be used by and sent between Wire users. The...

CVE-2022-33024

The CVE-2022-33024 entry involves the GNU LibreDWG library (libredwg). A denial-of-service condition exists due to an assertion failure in the decode_preR13_entities path within dwg2dxf (decode.c:5801) in libredwg v0.12.4.4608. A remote attacker could trigger the assertion, potentially exhausting...

CVE-2022-33069

Ethereum Solidity v0.8.14 contains an assertion failure via SMTEncoder::indexOrMemberAssignment at SMTEncoder.cpp...

CVE-2022-33069

CVE-2022-33069 pertains to Ethereum Solidity v0.8.14, where an assertion failure occurs in SMTEncoder::indexOrMemberAssignment() (SMTEncoder.cpp). This description is consistently stated across sources and is the core concrete detail: the vulnerability arises from an assertion failure in the SMT ...

CVE-2022-33069

Ethereum Solidity v0.8.14 contains an assertion failure via SMTEncoder::indexOrMemberAssignment at SMTEncoder.cpp...

CVE-2022-33069: Reachable Assertion

Ethereum Solidity v0.8.14 contains an assertion failure via SMTEncoder::indexOrMemberAssignment at SMTEncoder.cpp...

CVE-2022-34000

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

CVE-2022-34000

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

Design/Logic Flaw

libjxl 0.6.1 has an assertion failure in LowMemoryRenderPipeline::Init in renderpipeline/lowmemoryrenderpipeline.cc...

CVE-2022-34000

CVE-2022-34000 affects the JPEG XL reference implementation libjxl 0.6.1, with an assertion failure in LowMemoryRenderPipeline::Init() located in render_pipeline/low_memory_render_pipeline.cc. The issue is described as a potential denial of service against the libjxl process when processing craft...