PT-2022-33612 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue concerns an out of bound read for SMB2 WRITE. It was introduced in version v5.15 and fixed in Linux Kernel version v5.19.2. Recommendations: For Linux Kernel versions prior to...

CVE-2022-36854

Out of bound read in libapexjni.media.samsung.so prior to SMR Sep-2022 Release 1 allows attacker access unauthorized information...

Design/Logic Flaw

Out of bound read in libapexjni.media.samsung.so prior to SMR Sep-2022 Release 1 allows attacker access unauthorized information...

CVE-2022-36854

Out of bound read in libapexjni.media.samsung.so prior to SMR Sep-2022 Release 1 allows attacker access unauthorized information...

CVE-2022-36854

The CVE-2022-36854 issue affects the library libapexjni.media.samsung.so (Samsung), with an out-of-bounds read that could allow an attacker to access unauthorized information. Connected documents consistently identify the vulnerable component as libapexjni.media.samsung.so and cite the root cause...

PT-2022-23658 · Samsung · Libapexjni.Media.Samsung.So

Name of the Vulnerable Software and Affected Versions: libapexjni.media.samsung.so versions prior to SMR Sep-2022 Release 1 Description: The issue is related to an out of bound read in the libapexjni.media.samsung.so library, which allows an attacker to access unauthorized information...

Memory corruption

Memory corruption due to out of bound read while parsing a video file in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

Out-of-bound Read

vim is vulnerable to out-of-bound read vulnerability. The vulnerability exists in the checkvim9unlet function in src/vim9cmds.c which allows a malicious attacker to read sensitive data in the system...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists due to the out of bound read in the Dawn, allowing an attacker to crash the application by providing a maliciously crafted HTML page...

FreeBSD : FreeBSD -- Out of bound read in elf_note_prpsinfo() (5028c1ae-1890-11ed-9b22-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5028c1ae-1890-11ed-9b22-002590c1f29c advisory. - When dumping core and saving process information, procgetargv might return an sbuf which have a sbufl...

FreeBSD-SA-22:09.elf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:09.elf Security Advisory The FreeBSD Project Topic: Out of bound read in elfnoteprpsinfo Category: core Module: kernel Announced: 2022-08-09 Credits: Josef...

FreeBSD -- Out of bound read in elf_note_prpsinfo()

Problem Description: When dumping core and saving process information, procgetargv might return an sbuf which have a sbuflen of 0 or -1, which is not properly handled. Impact: An out-of-bound read can happen when user constructs a specially crafted psstring, which in turn can cause the kernel to...

CLSA-2022-1658172267 Fix CVE(s): CVE-2022-2206, CVE-2022-2257, CVE-2022-2286, CVE-2022-2285, CVE-2022-2284, CVE-2022-2287, CVE-2022-2264

SECURITY UPDATE: Out-of-bound read in function msgouttransattr - debian/patches/CVE-2022-2206.patch: Adjust cmdlinerow and msgrow to the value of Rows. - CVE-2022-2206 SECURITY UPDATE: Heap-based buffer overflow in function utfcptr2len - debian/patches/CVE-2022-2284.patch: Stop Visual mode when...

Out-of-bound read in function msg_outtrans_special

Description Out-of-bound read in function msgouttransspecial at message.c:1716 Version commit c101abff4c6756db4f5e740fde289decb9452efa HEAD - master, tag: v8.2.5164 Proof of Concept guest@elk:/trung$ valgrind ./vimlatest/src/vim -u NONE -i NONE -n -m -X -Z -e -s -S ./poc/poc4min2 -c :qa! ==23509=...

CVE-2021-35083

Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrag...

Design/Logic Flaw

Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrag...

CVE-2021-35084

CVE-2021-35084 involves a possible out-of-bounds read due to lack of length check on the data length for a DIAG event in Qualcomm Snapdragon products (Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music). Affected components are Snap...

CVE-2021-35084

Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-35083

CVE-2021-35083 is a Qualcomm/Snapdragon vulnerability describing a possible out-of-bounds read caused by improper validation of certificate chains in SSL or IKE. Affects Qualcomm Snapdragon families across Auto, Compute, Connectivity, and other lines. CVSS metrics indicate a network-based, low-co...

CVE-2021-35083

Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrag...