Out-of-bounds Write

libhdf5.so is vulnerable to out-of-bound write. The vulnerability exists due to a heap based buffer overflow in decompress function in decompress.c which allows an attacker to submit a malicious gif file into the system and perform out of bound writes...

Buffer Overflow

u-boot is vulnerable to buffer overflow. The vulnerability exists because the hole descriptor overwrite in U-Boot IP Packet Defragmentation which allows an attacker to perform arbitrary out of bound writes...

Out-of-bound Read

vim is vulnerable to out-of-bound read vulnerability. The vulnerability exists in the checkvim9unlet function in src/vim9cmds.c which allows a malicious attacker to read sensitive data in the system...

macOS 12.x < 12.5.1 (HT213413)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.5.1 Monterey. It is, therefore, affected by multiple vulnerabilities : - An out-of-bound write issue in Webkit that may lead to arbitrary code execution when processing maliciously crafted web content. CVE-2022-3289...

Denial Of Service (DoS)

libtiff.so is vulnerable to denial of service.The vulnerability exists ingetcropfffsets function intiffcrop.c,which allows an attacker to send crafted file leading to out of bound reads and writes...

Improper access control

In Sony Xperia series 1, 5, and Pro, an out of bound memory access can occur due to lack of validation of the number of frames being passed during music playback...

CVE-2022-23747

CVE-2022-23747 affects Sony Xperia series 1, 5, and Pro. Connected PT-2022-4245 details a buffer/overrun in the ALAC decoder (libMtkOmxAlacDec.so) caused by missing validation of the number of frames during music playback, leading to out-of-bounds memory access and potential remote arbitrary code...

PT-2022-4245 · Sony · Sony Xperia Series Pro +2

Name of the Vulnerable Software and Affected Versions: Sony Xperia series 1, 5, and Pro affected versions not specified Description: The issue is related to a buffer overflow in the dynamic memory of the libMtkOmxAlacDec.so library, which is used for ALAC decoding in Sony Xperia series 1, 5, and...

EulerOS 2.0 SP8 : grub2 (EulerOS-SA-2022-2221)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A crafted 16-bit grayscale PNG image may lead to a out-of-bounds write in the heap area. An attacker may take advantage of that to cause heap dat...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists due to the out of bound read in the Dawn, allowing an attacker to crash the application by providing a maliciously crafted HTML page...

FreeBSD : FreeBSD -- Out of bound read in elf_note_prpsinfo() (5028c1ae-1890-11ed-9b22-002590c1f29c)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 5028c1ae-1890-11ed-9b22-002590c1f29c advisory. - When dumping core and saving process information, procgetargv might return an sbuf which have a sbufl...

FreeBSD-SA-22:09.elf

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-22:09.elf Security Advisory The FreeBSD Project Topic: Out of bound read in elfnoteprpsinfo Category: core Module: kernel Announced: 2022-08-09 Credits: Josef...

FreeBSD -- Out of bound read in elf_note_prpsinfo()

Problem Description: When dumping core and saving process information, procgetargv might return an sbuf which have a sbuflen of 0 or -1, which is not properly handled. Impact: An out-of-bound read can happen when user constructs a specially crafted psstring, which in turn can cause the kernel to...

Debian DSA-5202-1 : unzip - security update

The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-5202 advisory. Sandipan Roy discovered two vulnerabilities in InfoZIP's unzip program, a de-archiver for .zip files, which could result in denial of service or potentially the...

CVE-2022-33717

A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read out of bound memory...

Input validation

A missing input validation before memory read in SEM TA prior to SMR Aug-2022 Release 1 allows local attackers to read out of bound memory...

[SECURITY] [DLA 3068-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3068-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 04, 2022 https://wiki.debian.org/LTS -...

CVE-2022-37394

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compu...

DEBIAN-CVE-2022-37394

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compu...

CVE-2022-37394

An issue was discovered in OpenStack Nova before 23.2.2, 24.x before 24.1.2, and 25.x before 25.0.2. By creating a neutron port with the direct vnictype, creating an instance bound to that port, and then changing the vnictype of the bound port to macvtap, an authenticated user may cause the compu...