CVE-2022-24936: Improper Restriction of Operations within the Bounds of a Memory Buffer

Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decryption key via malicious bootloader upgrade...

CVE-2022-43995

Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can result in a heap-based buffer over-read. This can be triggered by arbitrary local users with access to Sudo by entering a password of seven characters or fewer...

CVE-2022-43995

CVE-2022-43995 affects the sudo package, versions 1.8.0 through 1.9.12 with the crypt() password backend. The root cause is a plugins/sudoers/auth/passwd.c array-out-of-bounds error that can cause a heap-based buffer over-read. It can be triggered by arbitrary local users who have access to sudo ...

CVE-2022-20094

In imgsensor, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06479763; Issue ID: ALPS06479734...

PT-2022-30014

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.34 Description The issue is related to an out-of-bounds OOB error in the ath5k eeprom read pcal info 5111 function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29691

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.20 Description The issue is related to an out-of-bounds OOB error in the ath5k eeprom read pcal info 5111 function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-29360

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.3 Description The issue is related to an out-of-bounds OOB error in the ath5k eeprom read pcal info 5111 function. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-30683

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.276 Description The issue is related to an out-of-bounds OOB error in the ath5k eeprom read pcal info 5111 function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30596

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to an out-of-bounds OOB error in the ath5k eeprom read pcal info 5111 function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30474

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to an out-of-bounds OOB error in the ath5k eeprom read pcal info 5111 function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-30754

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.311 Description The issue is related to an out-of-bounds OOB error in the ath5k eeprom read pcal info 5111 function. The actual impact and attack plausibility have not yet been proven. Recommendations For...

CVE-2022-24845 Integer bounds error in Vyper

Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In affected versions, the return of .returnsint128 is not validated to fall within the bounds of int128. This issue can result in a misinterpretation of the integer value and lead to incorrect behavior. As of v0.3.0,...

ROS-20220317-01

Apache HTTP Server web server vulnerability is related to a bounds error in LimitXMLRequestBody. Exploitation vulnerability could allow an attacker acting remotely to cause memory corruption and execute arbitrary code on the target system Apache HTTP Server web server vulnerability is related to...

PT-2022-7461

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The vulnerability is related to the watch queue set filter function in the Linux kernel, where a couple of places check that the filter type value does not exceed what the type filter...

[SECURITY] [DLA 2895-1] qt4-x11 security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2895-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 24, 2022 https://wiki.debian.org/LTS -...

A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.

...

CVE-2021-0410

In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561360; Issue ID: ALPS05561360...

Out-of-bounds

TensorFlow is an end-to-end open source platform for machine learning. In affected versions if the arguments to tf.rawops.RaggedGather don't determine a valid ragged tensor code can trigger a read from outside of bounds of heap allocated buffers. The implementation directly reads the first...

GSD-2021-1000983 sch_cake: Fix out of bounds when parsing TCP options and header

schcake: Fix out of bounds when parsing TCP options and header This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.46 by commit...

PT-2021-25510

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.6 through v5.12.10 Description: A shift-out-of-bounds error was identified in the gpio: wcd934x component. The actual impact and attack plausibility of this issue have not yet been proven. Recommendations: For Linux...