13040 matches found
GSD-2022-1000171 drm/nouveau: fix off by one in BIOS boundary checking
drm/nouveau: fix off by one in BIOS boundary checking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.178 by commit...
GSD-2022-1000138 drm/nouveau: fix off by one in BIOS boundary checking
drm/nouveau: fix off by one in BIOS boundary checking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.228 by commit...
GSD-2022-1000112 drm/nouveau: fix off by one in BIOS boundary checking
drm/nouveau: fix off by one in BIOS boundary checking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.265 by commit...
GSD-2022-1000091 drm/nouveau: fix off by one in BIOS boundary checking
drm/nouveau: fix off by one in BIOS boundary checking This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.300 by commit...
PT-2022-28449
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.8 through 5.4.177 Description The issue is related to an off-by-one error in BIOS boundary checking in the drm/nouveau component. The actual impact and potential for attack have not been proven yet. Recommendations For...
PT-2022-28416
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.8 through 4.19.227 Description The issue is related to an off-by-one error in BIOS boundary checking in the drm/nouveau component. The actual impact and potential for attack have not been proven yet. Recommendations For...
PT-2022-28498
Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.8 through 5.10.98 Description The issue is related to an off-by-one error in BIOS boundary checking in the drm/nouveau component. The actual impact and attack plausibility have not yet been proven. Recommendations For...
PT-2022-28369
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.300 Description The issue is related to an off-by-one error in BIOS boundary checking in the drm/nouveau component. The actual impact and potential for attack have not been proven yet. Recommendations For...
PT-2022-1913
Name of the Vulnerable Software and Affected Versions PJSIP affected versions not specified Description The issue is related to a stack overflow in the PJSUA API when calling the pjsua playlist create function. An attacker-controlled file names argument may cause a buffer overflow since it is...
PT-2022-1914
Name of the Vulnerable Software and Affected Versions PJSIP affected versions not specified Description The issue is related to a buffer overflow in the PJSUA API when calling the pjsua call dump function. An attacker-controlled buffer argument may cause a buffer overflow if an output buffer...
PT-2022-1915
Name of the Vulnerable Software and Affected Versions PJSIP affected versions not specified Description The issue is related to a stack overflow in the PJSUA API when calling the pjsua recorder create function. An attacker-controlled filename argument may cause a buffer overflow since it is copie...
Google Android Buffer Overflow Vulnerability (CNVD-2022-16338)
Google Android is a Linux-based open-source operating system from Google, Inc. The Google Android buffer overflow vulnerability stems from improper boundary checking. An attacker could exploit the vulnerability to perform arbitrary memory writes and code execution...
Mozilla Thunderbird 缓冲区错误漏洞
Mozilla Thunderbird is the United States Mozilla Foundation's set of independent from the Mozilla Application Suite e-mail client software. The software supports the IMAP and POP email protocols as well as the HTML email format. Mozilla Thunderbird suffers from a buffer error vulnerability that...
Google Android arbitrary memory write vulnerability
Google Android is a Linux-based open-source operating system from Google, Inc. Google Android is vulnerable to arbitrary memory writes, which can be exploited by attackers to perform arbitrary memory writes and code execution due to incorrect boundary checking in the edenruntime hal service...
Adobe Premiere Rush out-of-bounds read vulnerability (CNVD-2022-15928)
Adobe Premiere Rush, a cross-platform video editing software from Adobe, has a security vulnerability that stems from the product's failure to properly determine memory boundaries. An attacker could exploit the vulnerability to cause a sensitive memory leak...
CVE-2022-23431
An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution...
CVE-2022-23431
An improper boundary check in RPMB ldfw prior to SMR Feb-2022 Release 1 allows arbitrary memory write and code execution...
CVE-2022-23429
An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...
