CVE-2023-30646

Heap out of bound write vulnerability in BroadcastSmsConfig of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...

CVE-2023-30646

CVE-2023-30646 affects RILD, specifically the BroadcastSmsConfig component. The root cause is a heap out-of-bounds write, reported to permit attackers to execute arbitrary code. The vulnerability concerns RILD prior to Samsung Mobile SMR July-2023 Release 1; upgrading to SMR Jul-2023 Release 1 or...

CVE-2023-30645

CVE-2023-30645 describes a heap out-of-bounds write in the RILD component, specifically in IpcRxIncomingCBMsg, capable of enabling arbitrary code execution. Affected software is Samsung Mobile’s RILD prior to the SMR Jul-2023 Release 1. Public sources confirm the issue and consistently recommend ...

CVE-2023-30645

Heap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...

CVE-2023-30644

The CVE-2023-30644 entry concerns a stack out-of-bounds write in the CdmaSmsParser of the RILD component. Affected software is Samsung’s RILD prior to SMR Jul-2023 Release 1; the vulnerability could allow attackers to execute arbitrary code locally due to an out-of-bounds write. Remediation is to...

F5 Networks BIG-IP : Grub2 vulnerability (K000130541)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000130541 advisory. - grub2: Out-of-bound write when handling split HTTP headers CVE-2022-28734 Note that Nessus has not tested for this...

Fortinet Fortigate Out-of-bound write in CLI (FG-IR-22-494)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-22-494 advisory. - A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS versio...

Arbitrary Code Execution

hermes-engine is vulnerable to Arbitrary Code Execution. A remote attacker is able to inject and execute malicious code on the server when the library permits the execution of untrusted JavaScript via an out-of-bound write...

CVE-2023-23556

An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. Note that this bug is only exploitable in cases where Hermes is used to execute untrusted...

Code injection

An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. Note that this bug is only exploitable in cases where Hermes is used to execute untrusted...

CVE-2023-23556

An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. Note that this bug is only exploitable in cases where Hermes is used to execute untrusted...

CVE-2023-23556

An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. Note that this bug is only exploitable in cases where Hermes is used to execute untrusted...

CVE-2023-23556

CVE-2023-23556 affects the Facebook Hermes JavaScript engine. A bug in BigInt conversion to Number exists in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80, allowing a malicious actor to execute arbitrary code via an out-of-bounds write when untrusted JavaScript is executed. The ...

CVE-2023-23556

An error in BigInt conversion to Number in Hermes prior to commit a6dcafe6ded8e61658b40f5699878cd19a481f80 could have been used by a malicious attacker to execute arbitrary code due to an out-of-bound write. Note that this bug is only exploitable in cases where Hermes is used to execute untrusted...

PT-2023-15376 · Unknown · Soter Service

Name of the Vulnerable Software and Affected Versions: soter service affected versions not specified Description: The issue is related to a possible out of bounds write in the soter service due to a missing bounds check. This could lead to a local denial of service and requires System execution...

Debian dla-3370 : xrdp - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3370 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3370-1 [email protected]...

Amazon Linux 2023 : unzip (ALAS2023-2023-029)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-029 advisory. A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially...

K84591451: Intel AMT vulnerabilities CVE-2019-0092, CVE-2019-0094, CVE-2019-0097, and CVE-2019-0096

Security Advisory Description CVE-2019-0092 Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access. CVE-2019-0094 Insufficient...

SUSE SLES12 Security Update : xrdp (SUSE-SU-2023:0374-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0374-1 advisory. - CVE-2022-23468: Fixed a buffer overflow in xrdploginwndcreate bsc1206300. - CVE-2022-23478: Fixed an out of bound write in...

Cross site scripting

Out-of-bound write vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process when out of specification errors are detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information...