UBUNTU-CVE-2026-28418

Vim is an open source, command line text editor. Prior to version 9.2.0074, a heap-based buffer overflow out-of-bounds read exists in Vim's Emacs-style tags file parsing logic. When processing a malformed tags file, Vim can be tricked into reading up to 7 bytes beyond the allocated memory boundar...

CVE-2023-31365

CVE-2023-31365 describes an integer overflow in the System Management Unit (SMU) that could allow a privileged, local attacker to write memory beyond the end of the reserved dRAM area, potentially causing loss of integrity or availability. CVSS3.1 metrics from AMD indicate a Low base score (3.9) ...

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA GPUs allows a hacker to trigger a service failure.

The vulnerability of the cuobjdump software tool for parallel computing on NVIDIA CUDA GPUs involves reading data beyond the allowable range in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the IOMobileFrameBuffer component in operating systems such as MacOs, tvOs, watchOs, iPadOs, and iOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the IOMobileFrameBuffer component in operating systems such as MacOs, tvOS, watchOS, iPadOS, and iOS lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and...

The vulnerability of the toshiba_acpi driver (driver/platform/x86/toshiba_acpi.c) in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the toshibaacpi driver driver/platform/x86/toshibaacpi.c in the Linux kernel is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the Linux operating system’s kernel phy component, which allows a hacker to access confidential information

The vulnerability of the Linux operating system’s kernel phy component is related to reading beyond the memory boundaries. Exploiting this vulnerability can allow an attacker to access confidential information...

The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment, related to reading beyond the acceptable range in memory, allows a hacker to execute arbitrary code within the context of the current process.

The vulnerability of the Teamcenter Visualization lifecycle management system and the Siemens Tecnomatix Plant Simulation software environment related to simulation modeling involves reading data beyond the acceptable range in memory. Exploiting this vulnerability could allow an attacker to execu...

The vulnerability of Linux operating system’s DRM/AMDGPU cores allows a hacker to trigger a service failure.

The vulnerability of DRM/AMDGPU cores in the Linux operating system is related to errors in reading data beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the ODBC library for UNIX systems, related to the pointer displacement beyond the allocated memory range, allows attackers to access confidential data and also trigger a service failure.

The vulnerability of the ODBC library for UNIX systems is related to the pointer shifting beyond the allocated memory range. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service failures...

CVE-2024-21920

A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-service condition. To trigger this, the...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

AMD CPUs缓冲区错误漏洞

AMD CPUs are a family of CPUs from AMD U.S.A. A denial of service vulnerability exists in AMD CPUs, which stems from insufficient boundary checking in the SMU mailbox registers. An attacker could exploit the vulnerability to read content outside of the SRAM address range resulting in a potential...

The vulnerability of the software for working with animations in Adobe Character Animator lies in the recording of data beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Character Animator software for animation processing is related to the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Intel WIFI drivers, related to operations beyond the buffer in memory, allows attackers to escalate their privileges, cause service failures, and expose sensitive information.

The vulnerability of Intel WIFI drivers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, and expose sensitive information...

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to read data beyond the memory limit of the application.

The vulnerability of Google Chrome’s Blink engine is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to read data beyond the application’s memory boundary using a specially crafted HTML page...

The vulnerability of Google Chrome’s browser auto-filling mechanism, which allows a hacker to perform reading beyond the memory limit

The vulnerability of the browser-based credit card data filling mechanism in Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to read data beyond the memory limit, using a specially crafted HTML page...