Espruino Buffer Overflow Vulnerability (CNVD-2022-08365)

Espruino is a JavaScript interpreter. It is designed for devices with only 128kB flash and 8kB RAM.Espruino is vulnerable to a buffer overflow vulnerability in version 2.10.246, which stems from a boundary error in vcbprintf via src jsutils.c when handling untrusted input. A remote attacker could...

Jerryscript stack buffer overflow vulnerability

JerryScript is a lightweight JavaScript engine from the JerryScript project. jerryscript has a stack buffer overflow vulnerability in version 3.0.0, which stems from vmloop.ltopriv.304 in /jerry-core/vm/vm.c when handling untrusted input with a boundary error. An attacker could exploit this...

Moddable SDK Heap Buffer Overflow Vulnerability (CNVD-2022-08216)

Moddable SDK is a software development kit SDK for IoT embedded software development from Moddable, U.S. Moddable SDK in v11.5.0 is vulnerable to a heap buffer overflow vulnerability stemming from a boundary error in component libcstartmain when handling untrusted input. A remote attacker could...

Trust Boundary Violation due to Incomplete Blacklist in Test Failure Processing in Ares

Impact This allows an attacker to create special subclasses of InvocationTargetException that escape the exception sanitization because JUnit extracts the cause in a trusted context before the exception reaches Ares. This means that arbitrary student code can be executed in a trusted context, and...

GHSA-883X-6FCH-6WJX Trust Boundary Violation due to Incomplete Blacklist in Test Failure Processing in Ares

Impact This allows an attacker to create special subclasses of InvocationTargetException that escape the exception sanitization because JUnit extracts the cause in a trusted context before the exception reaches Ares. This means that arbitrary student code can be executed in a trusted context, and...

Espruino 缓冲区错误漏洞

Espruino is a JavaScript interpreter. It is designed for devices with only 128kB of flash memory and 8kB of RAM. A buffer error vulnerability exists in Espruino, which stems from the failure of jsvNewFromString in the product src/jsvar.c file to properly handle memory boundaries. The following...

Lexmark 安全漏洞

Lexmark is a series of printers in the U.S. Lexmark is vulnerable to a buffer overflow vulnerability that exists due to a boundary error when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system...

CVE-2021-34402

NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service, Information disclosure, loss of Integrity, or...

PT-2022-10345 · Nvidia · Nvidia Tegra Kernel Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA Tegra kernel driver affected versions not specified Description: The issue is related to a buffer boundary vulnerability in the NVIDIA NVDEC component of the NVIDIA Tegra kernel driver. A user with high privileges may be able to read...

The vulnerability of WebKitGTK and WPE WebKit rendering modules, related to writing beyond the buffer boundary, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of Web page rendering modules in WebKitGTK and WPE WebKit relates to buffer overflow attacks. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures due to malicious web content...

The vulnerability of the multi-media library Ffmpeg, related to recording beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Ffmpeg multimedia library is related to writing beyond buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

Schneider Electric Easergy P5 Buffer Overflow Vulnerability

The Schneider Electric Easergy P5 is a protective relay for demanding medium voltage applications from Schneider Electric, France. The Schneider Electric Easergy P5 is vulnerable to a buffer overflow vulnerability that exists due to a boundary error when handling untrusted input. An attacker coul...

Adobe Bridge out-of-bounds read vulnerability (CNVD-2022-05036)

An out-of-bounds read vulnerability exists in Adobe Bridge, a file viewer from Adobe, which stems from a boundary error when handling untrusted input. A remote attacker could exploit the vulnerability to create a carefully constructed file and trick a victim into opening it, triggering an...

Adobe Bridge Buffer Overflow Vulnerability (CNVD-2022-05037)

Adobe Bridge, a file viewer from Adobe, is vulnerable to a buffer overflow vulnerability that results from a boundary error when handling untrusted input. A remote attacker could use the vulnerability to create specially crafted files to trick victims into using the affected software, trigger an...

Remote Code Execution (RCE)

telnet is vulnerable to remote code execution. The vulnerability exists due to a lack of check on the boundary of Nextitem Function. This vulnerability exists in the telnet-server package, not in the telnet client-side package...

Expat addBinding function buffer overflow vulnerability

Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in the addBinding in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary...

Expat defineAttribute function buffer overflow vulnerability

Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in defineAttribute in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary...

vim 安全漏洞

Vim is an editor based on the UNIX platform. vim suffers from a security vulnerability that stems from a networked system or product that does not properly validate data boundaries when performing operations on memory, resulting in an incorrect read or write operation being performed to an...

Expat build_model function buffer overflow vulnerability

Expat is a fast streaming XML parser written in C. A buffer overflow vulnerability exists in versions of Expat prior to 2.4.3, which stems from a boundary error in buildmodel in xmlparse.c when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code ...

FreeBSD Buffer Overflow Vulnerability (CNVD-2022-08173)

FreeBSD is a set of Unix-like operating systems from the Freebsd Foundation. FreeBSD vt console is vulnerable to a buffer overflow vulnerability, which stems from a boundary error. An attacker could exploit this vulnerability to trigger a buffer overflow and overwrite data structures associated...