GSD-2022-1001743 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.34 by commit...

GSD-2022-1001420 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.20 by commit...

GSD-2022-1001102 io_uring: bump poll refs to full 31-bits

iouring: bump poll refs to full 31-bits This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

GSD-2022-1001091 KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs

KVM: x86/svm: Clear reserved bits written to PerfEvtSeln MSRs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.3 by commit...

PT-2022-29375

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17 through v5.17.1 Description The issue is related to io uring, where poll refs are bumped to full 31-bits. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-30597

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue concerns the KVM x86/svm component, specifically with clearing reserved bits written to PerfEvtSeln MSRs. The actual impact and attack plausibility have not yet been proven...

PT-2022-30684

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue concerns the KVM x86/svm, where reserved bits written to PerfEvtSeln MSRs are not properly cleared. This is an automated ID intended to aid in the discovery of potential security...

PT-2022-30016

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue concerns the KVM x86/svm, where reserved bits written to PerfEvtSeln MSRs are not properly cleared. The actual impact and attack plausibility of this issue have not yet been proven...

PT-2022-30755

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue concerns the KVM x86/svm component, specifically with clearing reserved bits written to PerfEvtSeln MSRs. The actual impact and attack plausibility have not yet been proven...

CVE-2022-27831

Improper boundary check in sflvdrdbufbits of libsflvextractor prior to SMR Apr-2022 Release 1 allows attackers to read out of bounds memory...

PT-2022-18620

Name of the Vulnerable Software and Affected Versions libsflvextractor versions prior to SMR Apr-2022 Release 1 Description The issue is related to an improper boundary check in the sflvd rdbuf bits function of libsflvextractor. This allows attackers to read out of bounds memory. Recommendations...

PT-2022-36895

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: s RLE process, cmd put bits, and clist copy mono. No...

Integer overflow

An integer overflow could occur when OpenEXR processes a crafted file on systems where sizet 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths...

CVE-2021-3933: Integer Overflow or Wraparound

An integer overflow could occur when OpenEXR processes a crafted file on systems where sizet 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths...

CVE-2021-3933

An integer overflow could occur when OpenEXR processes a crafted file on systems where sizet 64 bits. This could cause an invalid bytesPerLine and maxBytesPerLine value, which could lead to problems with application stability or lead to other attack paths...

CVE-2021-45863

tsMuxer git-2678966 was discovered to contain a heap-based buffer overflow via the function HevcUnit::updateBits in hevc.cpp...

CVE-2021-45861

There is an Assertion num = INTBIT' failed at BitStreamReader::skipBits in /bitStream.h:132 of tsMuxer git-c6a0277...

Microsoft Windows Background Intelligent Transfer Service Privilege Escalation (CVE-2020-0787)

A privilege escalation exists in Microsoft Windows Background Intelligent Transfer Service. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability

Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges...

Apple macOS ImageIO DDS image out-of-bounds read vulnerability

Summary An out-of-bounds read vulnerability exists in the DDS image parsing functionality of ImageIO library on Apple macOS Big Sur 11.6.1 and iOS 15.1. A specially-crafted DDS file can disclose sensitive memory content which can aid in exploitation of other vulnerabilities. An attacker can deliv...