PT-2024-25418 · Aptiov · Aptiov

Name of the Vulnerable Software and Affected Versions: APTIOV affected versions not specified Description: The issue is related to an improper restriction of operations within the bounds of a memory buffer in the BIOS, which can be exploited locally. Successful exploitation may lead to privilege...

The vulnerability of the opennurbs.dll library in the AutoCAD modeling, design, and drafting software allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the opennurbs.dll library, a software component used for modeling, designing, and drafting in AutoCAD, exists due to a boundary error in file processing. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, execute arbitrary...

The vulnerabilities of the ASMKERN228A.dll and ASMdatax229A.dll libraries, which are software components for modeling, design, and drawing in AutoCAD, allow a malicious individual to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the ASMKERN228A.dll and ASMdatax229A.dll libraries, which are software for simulation, design, and drafting in AutoCAD, exists due to a boundary error in processing unreliable input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to...

UBUNTU-CVE-2024-50250

In the Linux kernel, the following vulnerability has been resolved: fsdax: daxunshareiter needs to copy entire blocks The code that copies data from srcmap to iomap in daxunshareiter is very very broken, which bfoster's recent fsx changes have exposed. If the pos and len passed to daxfileunshare...

CVE-2024-50250

The CVE-2024-50250 issue affects the Linux kernel fsdax code: dax_unshare_iter copies data from srcmap to iomap and previously did not align copy_pos/copy_len to a page boundary, allowing misalignment when iter->pos and length are not page-aligned. The bug can cause data corruption (when iter-...

The vulnerability of the arm64 component of the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the arm64 component of the Linux operating system’s kernel is related to errors in read operations beyond the boundary in the function ctrencrypt. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the SCSI component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the Linux operating system’s SCSI kernel component is related to errors in reading beyond the boundary in the resreadcap16 function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the mlx5e component in the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the mlx5e component in the Linux operating system is related to memory boundary errors. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the efi component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the efi component in the Linux operating system’s kernel is related to memory boundary errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the lpfc component in the Linux operating system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the lpfc component in the Linux operating system’s kernel is related to memory boundary errors in the lpfcdraintxq function. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the SCSI component in the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the SCSI component in the Linux operating system is related to memory boundary errors in the scsimodesense function. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the SCSI component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the SCSI component in the Linux operating system is related to errors in reading beyond the boundary in the respreporttgtpgs function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the rc component in the Linux operating system’s kernel allows a hacker to gain access to protected information.

The vulnerability of the rc component in the Linux operating system’s kernel is related to read-out errors beyond the boundary. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the btrfs component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the btrfs component in Linux operating systems is related to read misses beyond the buffer boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s crypto kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s crypto kernel component is related to memory boundary errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to errors in boundary-filling reading in the decodeseq function. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the kirin_pcie_parse_port() function in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the kirinpcieparseport function in the Linux kernel’s drivers/pci/controller/dwc/pcie-kirin.c file is related to incorrect calculation of the buffer boundary. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the sd_read_block_characteristics() function in the Linux operating system’s SCSI kernel driver allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the sdreadblockcharacteristics function in the drivers/scsi/sd.c file of the Linux SCSI kernel driver is related to incorrect calculation of the buffer boundary. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

kernel: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."

A vulnerability was found in the Linux kernel's ACPICA component, where improper handling of memory mappings can lead to a NULL pointer dereference. This issue arises when mapping requests exceed page boundaries, resulting in attempts to access unmapped memory...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a variety of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from a lack of boundary checking, where out-of-bounds writes may occur. An attacker can escalate privileges by exploiting the vulnerability...