GSD-2022-1001898 drm/i915/gem: add missing boundary check in vm_access

drm/i915/gem: add missing boundary check in vmaccess This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...

GSD-2022-1001588 drm/i915/gem: add missing boundary check in vm_access

drm/i915/gem: add missing boundary check in vmaccess This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...

GSD-2022-1001282 drm/i915/gem: add missing boundary check in vm_access

drm/i915/gem: add missing boundary check in vmaccess This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

PT-2022-29555

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.17.1 Description A missing boundary check in vm access was identified. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions v5.8 through v5.17.1,...

PT-2022-29861

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description A missing boundary check in vm access within the drm/i915/gem component may pose a potential security issue. The actual impact and likelihood of an attack have not been confirmed...

PT-2022-30394

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description A missing boundary check in vm access within the drm/i915/gem module may potentially lead to security issues. The actual impact and attack plausibility have not yet been proven...

PT-2022-30171

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description A missing boundary check in vm access within the drm/i915/gem component may pose a potential security issue. The actual impact and likelihood of an attack have not been confirmed...

Google Android Information Disclosure Vulnerability (CNVD-2022-44553)

Google Android is a Linux-based open source operating system from Google, Inc. An information disclosure vulnerability exists in l2cbleprocesssigcmd in l2cble.cc, which could result in an out-of-bounds read due to a lack of boundary checking. . The vulnerability can be exploited by attackers to...

Google Android Buffer Overflow Vulnerability (CNVD-2022-44551)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has a buffer overflow vulnerability that originates in the TBD of the TBD, which can be read out of bounds due to a lack of boundary checking and can be exploited by attackers to cause local information...

The vulnerability of the imagetruecolortopalette function in the PHP programming language allows a perpetrator to trigger a service failure or potentially cause other effects.

The vulnerability of the imagetruecolortopalette function ext/gd/gd.c in the PHP programming language is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability may allow a remote attacker to cause a service failure or potentially have other adverse effects...

Google Android Buffer Overflow Vulnerability (CNVD-2022-44614)

Google Android, a Linux-based open source operating system from Google, is vulnerable to buffer overflow. The vulnerability originates in the TitanM chip, where out-of-bounds writes may occur due to a lack of boundary checking. An attacker could exploit the vulnerability to cause a local privileg...

Google Android Information Disclosure Vulnerability (CNVD-2022-44585)

Google Android is a Linux-based open source operating system from Google, Inc. An information disclosure vulnerability exists in Google Android, which originates in LoadedPackage::Load in LoadedArsc.cpp, and due to a lack of boundary checking, an out-of-bounds read may occur. read. An attacker...

Google Android Buffer Overflow Vulnerability (CNVD-2022-46292)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has a buffer overflow vulnerability that originates from a lack of boundary checking in Bluetooth, which could lead to out-of-bounds writes and could be exploited by attackers to cause local privilege...

Samsung SMR Buffer Overflow Vulnerability (CNVD-2022-63654)

Samsung SMR is a system patch package from South Korea's Samsung Samsung. A security vulnerability exists in Samsung SMR, which stems from an incorrect boundary check in the media.extractor library. An attacker could exploit the vulnerability to cause a denial of service via a specially crafted...

Samsung SMR UWB firmware buffer overflow vulnerability

Samsung SMR is a system patch package from South Korea's Samsung Samsung. A buffer overflow vulnerability exists in versions prior to Samsung SMR Apr-2022 Release 1, which stems from an incorrect boundary check in the UWB firmware. An attacker could exploit the vulnerability to write to arbitrary...

Lenovo ThinkPad 缓冲区错误漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. The Lenovo ThinkPad BIOS suffers from a buffer error vulnerability that originates from a boundary error in the LenovoFlashDeviceInterface within the SMI handler. A local attacker could run a specially crafted program to trigg...

多款Adobe产品缓冲区错误漏洞

Adobe Acrobat is a set of PDF file editing and conversion tools. The software is used to print, sign and annotate PDFs.Several Adobe products are vulnerable to an out-of-bounds reading vulnerability, which stems from a boundary error when processing PDF files. A remote attacker could use the...

ROS-20220412-03

Vulnerability in Mozilla Thunderbird email client, related to a memory freeing error when processing HTML content after the VR process is destroyed. Exploitation of the vulnerability could allow an attacker, acting remotely, create a specially crafted web page, trick the victim into opening it,...

ROS-20220412-02

Vulnerability in Mozilla Firefox browser, due to the fact that regex for Rust does not control properly internal resource consumption when parsing unreliable input data. Exploitation of the vulnerability could allow a remote attacker to pass specially crafted data to an application and perform a...

多款Adobe产品缓冲区错误漏洞

Adobe Acrobat and Adobe Acrobat Reader are both products of the United States Ordoby Adobe.Adobe Acrobat is a set of PDF file editing and conversion tools.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDF. Adobe Acrobat and Adobe Acrobat Reader have a buff...