The vulnerability of the build_insn() function in the arch/loongarch/net/bpf_jit.c module of the Linux operating system’s BPF component allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the buildinsn function in the arch/loongarch/net/bpfjit.c module of the Linux kernel’s BPF component involves reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

The vulnerability of the formSetDeviceName function in the microprogramming software for Tenda AC10U allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetDeviceName function in the Tenda AC10U router’s microprogramming software relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the Substance 3D Stager software lies in its ability to read data beyond the buffer boundaries, allowing attackers to exploit this to disclose protected information.

The vulnerability of the Substance 3D Stager software-related 3D design software is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the Zabbix universal monitoring system, related to logging beyond buffer boundaries, allows a intruder to trigger a service failure.

The vulnerability of the Zabbix universal monitoring system is related to logging beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

The software’s vulnerability related to creating secure connections to corporate networks via SSL VPN SecuExtender SSL VPN Client. This vulnerability stems from data writing beyond the buffer in memory, allowing attackers to exploit their privileges.

The vulnerability of the software for creating secure connections to corporate networks via SSL VPN SecuExtender SSL VPN Client lies in the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to enhance their privileges...

The vulnerability of the Adobe Photoshop graphic editor, related to reading beyond the buffer in memory, allows a hacker to bypass the ASLR protection mechanism.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection mechanism...

The vulnerability in Adobe Dimension’s 3D design software relates to reading beyond the buffer limit, allowing an attacker to bypass the ASLR protection mechanism.

The vulnerability of Adobe Dimension’s 3D design software relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to bypass the ASLR protection mechanism...

The vulnerability of Adobe Dimension’s 3D design software, related to reading beyond the buffer limit, allows a hacker to execute arbitrary code.

The vulnerability of Adobe Dimension’s 3D design software relates to reading beyond the buffer limit. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability in the Firefox web browser, related to writing beyond the buffer, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability in the Firefox web browser is related to writing beyond the buffer limit. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptions...

The vulnerability of the Fortinet FortiOS operating system, related to reading data beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Fortinet FortiOS operating system is related to reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-0200

NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffers end, which may lead to code execution, escalation of privileges, denial of service, and information disclosure...

Sonos One Speaker 缓冲区错误漏洞

Sonos One Speaker is a smart speaker from Sonos USA. Sonos One Speaker version 70.3-35220 suffers from a buffer error vulnerability that stems from a lack of proper validation of user-supplied data, which could result in a read beyond the end of the allocated buffer, which could be exploited by a...

The vulnerability of the Exiv2 metadata management library, related to reading beyond the allowed buffer data limits, allows a hacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through the use of a specially created image file...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer during the processing of HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

SUSE CVE-2019-14513

Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation beyond the buffer allocated for the packet, a different vulnerability than CVE-2017-14491...

CVE-2023-20523

TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service...

OESA-2022-1757 Open-iSCSI security update

The Open-iSCSI project is a high-performance, transport independent, multi-platform implementation of RFC3720 iSCSI. Security Fixes: An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore th...

Adobe InCopy 缓冲区错误漏洞

Adobe InCopy is a text editing software for creative writing from Adobe, USA. Adobe InCopy suffers from a buffer overflow vulnerability that stems from a lack of proper validation of user-supplied data, which can be exploited by an attacker to cause a read to exceed the end of an allocated buffer...

The vulnerability of the FreeRDP remote desktop protocol lies in the reading of data beyond the allowed buffer limits, which allows a hacker to cause a service failure.

The vulnerability of the FreeRDP remote desktop protocol lies in the reading of data beyond the acceptable buffer limit. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...