CVE-2023-40186 IntegerOverflow leading to Out-Of-Bound Write Vulnerability in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

CVE-2023-40186

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an IntegerOverflow leading to Out-Of-Bound Write Vulnerability in the gdiCreateSurface function. This issue affects FreeRDP based clients only. FreeRDP proxies...

CVE-2023-39352

CVE-2023-39352 affects FreeRDP (RDP client library). The issue is an invalid offset validation that can cause an Out Of Bounds Write when rect->left/top equal surface->width/height, potentially crashing the client. The vulnerability affects versions prior to the fix, with patches addressed ...

CVE-2023-39352 Invalid offset validation leading to Out Of Bound Write in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an invalid offset validation leading to Out Of Bound Write. This can be triggered when the values rect-left and rect-top are exactly equal to surface-width and...

CVE-2023-39352 Invalid offset validation leading to Out Of Bound Write in FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an invalid offset validation leading to Out Of Bound Write. This can be triggered when the values rect-left and rect-top are exactly equal to surface-width and...

Amazon Linux 2 : grub2 (ALAS-2023-2146)

The version of grub2 installed on the remote host is prior to 2.06-14. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2146 advisory. A flaw was found in grub 2, where a crafted 16-bit grayscale PNG image may lead to an out-of-bounds write. This flaw allows ...

PT-2025-37879

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to clock management on the MT8183 platform. The removal of SSPM System Software Power Management related clocks caused issues when converting to...

CVE-2023-30649

Heap out of bound write vulnerability in RmtUimNeedApdu of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...

CVE-2023-30646

Heap out of bound write vulnerability in BroadcastSmsConfig of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...

Heap overflow

Heap out of bound write vulnerability in RmtUimNeedApdu of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...

CVE-2023-30649

Heap out of bound write vulnerability in RmtUimNeedApdu of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...

CVE-2023-30649

CVE-2023-30649 affects Samsung RILD (RmtUimNeedApdu) with a heap out-of-bounds write that allows arbitrary code execution. In the PT-2023-22843 advisory, impacted versions are RILD prior to SMR Jul-2023 Release 1. The issue originates from a heap out-of-bounds write in the RmtUimNeedApdu function...

CVE-2023-30649

Heap out of bound write vulnerability in RmtUimNeedApdu of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...

CVE-2023-30647

Heap out of bound write vulnerability in IpcRxUsimPhoneBookCapa of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...

CVE-2023-30646

Heap out of bound write vulnerability in BroadcastSmsConfig of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...

CVE-2023-30646

CVE-2023-30646 affects RILD, specifically the BroadcastSmsConfig component. The root cause is a heap out-of-bounds write, reported to permit attackers to execute arbitrary code. The vulnerability concerns RILD prior to Samsung Mobile SMR July-2023 Release 1; upgrading to SMR Jul-2023 Release 1 or...

CVE-2023-30645

CVE-2023-30645 describes a heap out-of-bounds write in the RILD component, specifically in IpcRxIncomingCBMsg, capable of enabling arbitrary code execution. Affected software is Samsung Mobile’s RILD prior to the SMR Jul-2023 Release 1. Public sources confirm the issue and consistently recommend ...

CVE-2023-30645

Heap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...

CVE-2023-30644

The CVE-2023-30644 entry concerns a stack out-of-bounds write in the CdmaSmsParser of the RILD component. Affected software is Samsung’s RILD prior to SMR Jul-2023 Release 1; the vulnerability could allow attackers to execute arbitrary code locally due to an out-of-bounds write. Remediation is to...

CVE-2023-30646: Out-of-bounds Write

Heap out of bound write vulnerability in BroadcastSmsConfig of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code...