Android NFC Buffer Overflow Vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in the Android-11 version, which stems from a lack of boundary checking for NFC, and can be exploited by an attacker to elevate local privileges...

The vulnerability of Yokogawa’s software products lies in the ability to write beyond buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Yokogawa software products lies in the writing beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Android Buffer Overflow Vulnerability (CNVD-2020-54311)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in Android version 11, which stems from a lack of boundary checking in NFC and can be exploited by an attacker to elevate local privileges...

The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a attacker to trigger a service failure.

The vulnerability of the Cortado ThinPrint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is related to an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause...

Apple iOS Out-of-Bounds Write Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. in the United States. A security vulnerability exists in Apple iOS that stems from an out-of-bounds write issue resolved through improved boundary checking. An attacker could exploit the vulnerability to potentially cause...

Google Android tremolo information disclosure vulnerability

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. Android-11 version tremolo suffers from an information disclosure vulnerability that stems from a lack of boundary checking. The vulnerability can be exploited by an attacker to cause remote...

Google Android Buffer Overflow Vulnerability (CNVD-2020-54471)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. Android suffers from a security vulnerability that stems from incorrect boundary checking and possible write overruns. No detailed vulnerability details are available at this time...

The vulnerability of the Radio Management API interface for the Windows operating system allows a malicious individual to escalate their privileges.

The vulnerability in the set of interfaces of the Windows operating system’s Radio Management API is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Foxit Reader and PhantomPDF Buffer Overflow Vulnerability (CNVD-2020-65176)

Foxit Reader is a PDF document reader.PhantomPDF is a PDF editor. A buffer error vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.0.1 and prior to 9.7.3, which arises from a networked system or product that performs an operation in memory without properly validating the da...

Noise-Java AESGCMOnCtrCipherState.encryptWithAd() Insufficient Boundary Checks Exploit

Noise-Java suffers from an issue located in the AESGCMOnCtrCipherState.encryptWithAd method defined in AESGCMOnCtrCipherState.java, where multiple boundary checks are performed to prevent invalid length or offsets from being specified for the encrypt or copy operation. However, some checks were...

Noise-Java ChaChaPolyCipherState.encryptWithAd() Insufficient Boundary Checks Exploit

Noise-Java suffers from an issue located in the ChaChaPolyCipherState.encryptWithAd method defined in ChaChaPolyCipherState.java, where multiple boundary checks are performed to prevent invalid length or offsets from being specified for the encrypt or copy operation. However, some checks were fou...

Noise-Java AESGCMFallbackCipherState.encryptWithAd() Insufficient Boundary Checks Exploit

Noise-Java suffers from an issue located in the AESGCMFallbackCipherState.encryptWithAd method defined in AESGCMFallbackCipherState.java, where multiple boundary checks are performed to prevent invalid length or offsets from being specified for the encrypt or copy operation. However, some checks...

Noise-Java AESGCMOnCtrCipherState.encryptWithAd() Insufficient Boundary Checks

Vulnerability title: Noise-Java AESGCMOnCtrCipherState.encryptWithAd insufficient boundary checks Author: Pietro Oliva CVE: CVE-2020-25023 Vendor: Rhys Weatherley Creator of Noise Framework's reference implementation in Java Product: Noise-Java Affected version: No version information is currentl...

RUSTSEC-2020-0039 `index()` allows out-of-bound read and `remove()` has off-by-one error

Slab::index does not perform the boundary checking, which leads to out-of-bound read access. Slab::remove copies an element from an invalid address due to off-by-one error, resulting in memory leakage and uninitialized memory drop...

Noise-Java AESGCMFallbackCipherState.encryptWithAd() Insufficient Boundary Checks

Vulnerability title: Noise-Java AESGCMFallbackCipherState.encryptWithAd insufficient boundary checks Author: Pietro Oliva CVE: CVE-2020-25022 Vendor: Rhys Weatherley Creator of Noise Framework's reference implementation in Java Product: Noise-Java Affected version: No version information is...

Noise-Java ChaChaPolyCipherState.encryptWithAd() Insufficient Boundary Checks

Vulnerability title: Noise-Java ChaChaPolyCipherState.encryptWithAd insufficient boundary checks Author: Pietro Oliva CVE: CVE-2020-25021 Vendor: Rhys Weatherley Creator of Noise Framework's reference implementation in Java Product: Noise-Java Affected version: No version information is currently...

Design/Logic Flaw

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, and 14.1.0-14.1.2.6, a BIG-IP virtual server with a Session Initiation Protocol SIP ALG profile, parsing SIP messages that contain a multi-part MIME payload with certain boundary strings can cause TMM to free memory to the wrong cache...

The vulnerability in the implementation of the S_study_chunk function in the Perl programming language allows a hacker to trigger a service failure.

The vulnerability of the Sstudychunk function implementation in the Perl programming language is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

Multiple security issues including data race, buffer overflow, and uninitialized memory drop

arr crate contains multiple security issues. Specifically, 1. It incorrectly implements Sync/Send bounds, which allows to smuggle non-Sync/Send types across the thread boundary. 2. Index and IndexMut implementation does not check the array bound. 3. Array::newfromtemplate drops uninitialized memo...

CVE-2020-14937

Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. The length of provided input/output buffers is insufficiently verified during the encoding and decoding of data. This may lead to out-of-bounds buffer read or write access ...