CVE-2023-52626

CVE-2023-52626 (Linux kernel) affects net/mlx5e: fix an operation precedence bug in port timestamping napi_poll context, where indirection (*) has lower precedence than postfix ++, causing an out-of-bounds read after increment. The fix dereferences before increment, preventing the read. CVSS 3.1 ...

CVE-2023-52626 net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix operation precedence bug in port timestamping napipoll context Indirection is of lower precedence than postfix increment ++. Logic in napipoll context would cause an out-of-bound read by first increment the pointer...

CVE-2023-52626 net/mlx5e: Fix operation precedence bug in port timestamping napi_poll context

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix operation precedence bug in port timestamping napipoll context Indirection is of lower precedence than postfix increment ++. Logic in napipoll context would cause an out-of-bound read by first increment the pointer...

PT-2024-14666 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an operation precedence bug in the port timestamping napi poll context of the net/mlx5e driver. The logic in napi poll context would cause an out-of-bound read ...

CVE-2021-47138

A vulnerability was found in the Linux kernel whereby hardware registries that have the server TID base may contain invalid values when the adapter is in a bad state. Reading these invalid values can result in out-of-bounds memory access, which can cause memory corruption or crashes...

CVE-2021-47138

In the Linux kernel, the following vulnerability has been resolved: cxgb4: avoid accessing registers when clearing filters Hardware register having the server TID base can contain invalid values when adapter is in bad state for example, due to AER fatal error. Reading these invalid values in the...

CVE-2021-47138

In CVE-2021-47138, the Linux kernel cxgb4 driver is vulnerable because hardware registers for the server TID base can hold invalid values when the adapter is in a bad state (e.g., AER fatal error). Reading these values during filter clearing could cause out-of-bounds memory access. The fix uses t...

CVE-2021-47138 cxgb4: avoid accessing registers when clearing filters

In the Linux kernel, the following vulnerability has been resolved: cxgb4: avoid accessing registers when clearing filters Hardware register having the server TID base can contain invalid values when adapter is in bad state for example, due to AER fatal error. Reading these invalid values in the...

kernel: Slab-out-of-bound read in compare_netdev_and_ip

A vulnerability was found in comparenetdevandip in drivers/infiniband/core/cma.c in RDMA in the Linux kernel. An improper cleanup results in an out-of-boundary read. This flaw allows a local user to crash or escalate privileges on the system...

CVE-2024-20761 Adobe Animate 2024 BMP File Parsing Out-Of-Bound Write Remote Code execution Vulnerability

Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20761 Adobe Animate 2024 BMP File Parsing Out-Of-Bound Write Remote Code execution Vulnerability

Animate versions 24.0, 23.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20757 Bridge 2024 TIF File Parsing Out-Of-Bound Read Information Disclosure Vulnerability

Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2024-20757 Bridge 2024 TIF File Parsing Out-Of-Bound Read Information Disclosure Vulnerability

Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim...

CVE-2024-20756 Adobe Bridge 2024 Out of Bound Write Remote Code Execution Vulnerability

Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-20756 Adobe Bridge 2024 Out of Bound Write Remote Code Execution Vulnerability

Bridge versions 13.0.5, 14.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2021-47135

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix possible AOOB issue in mt7921mcutxratereport Fix possible array out of bound access in mt7921mcutxratereport. Remove unnecessary varibable in mt7921mcutxratereport...

CVE-2021-47135

CVE-2021-47135 relates to the Linux kernel mt76 mt7921 driver. Public docs show a fix for an AOOB/array-out-of-bounds issue in mt7921_mcu_tx_rate_report and removal of an unnecessary variable, addressing an out-of-bounds access. References point to upstream stable commits (d874e6c069… and 6919e8a...

CVE-2021-47135 mt76: mt7921: fix possible AOOB issue in mt7921_mcu_tx_rate_report

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix possible AOOB issue in mt7921mcutxratereport Fix possible array out of bound access in mt7921mcutxratereport. Remove unnecessary varibable in mt7921mcutxratereport...

CVE-2021-47135

In the Linux kernel, the following vulnerability has been resolved: mt76: mt7921: fix possible AOOB issue in mt7921mcutxratereport Fix possible array out of bound access in mt7921mcutxratereport. Remove unnecessary varibable in mt7921mcutxratereport...

CVE-2024-0162

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to out-of-bound read/writes to SMRAM...