Design/Logic Flaw

Lack of boundary checking of a buffer in setskbpriv of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer...

Design/Logic Flaw

Lack of boundary checking of a buffer in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows OOB read...

Design/Logic Flaw

Lack of boundary checking of a buffer in livfivextractor library prior to SMR Oct-2021 Release 1 allows OOB read...

CVE-2021-25487

Lack of boundary checking of a buffer in setskbpriv of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer...

PT-2021-16677 · Samsung · Samsung Mobile Devices

Name of the Vulnerable Software and Affected Versions: Samsung Mobile Devices versions prior to SMR Oct-2021 Release 1 Description: The issue is related to a lack of boundary checking of a buffer in the set skb priv function of the modem interface driver. This allows an out-of-bounds read, which...

CVE-2021-25487

Lack of boundary checking of a buffer in setskbpriv of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...

in bfabiszewski/libmobi

✍️ Description Overview This vulnerability is of writing user controlled values out of the buffer. The buffer is of MOBIBuffer type which is allocated using malloc. It is possible for the attacker to finally accomplish RCE Remote Code Execution using this out-of-bound write vulnerability to...

The vulnerability of the microprogrammed software of PowerLogic energy meters and power counters, models ION7400, PM8000, and ION9000, arises from the execution of operations beyond the buffer boundaries in memory. This vulnerability allows a hacker to trigger a system reboot or execute arbitrary code.

The vulnerability of the microprogrammed power measurement and energy meter software from PowerLogic, models ION7400, PM8000, and ION9000, lies in the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to trigger a system...

CVE-2021-36530

ngiflib 0.4 has a heap overflow in GetByteStr at ngiflib.c:108 in NGIFLIBNOFILE mode, GetByteStr copy memory buffer without checking the boundary...

CVE-2021-36531

ngiflib 0.4 has a heap overflow in GetByte at ngiflib.c:70 in NGIFLIBNOFILE mode, GetByte reads memory buffer without checking the boundary...

Pulse Secure Pulse Connect Secure 缓冲区错误漏洞

Pulse Secure Pulse Connect Secure aka PCS, formerly known as Juniper Junos Pulse is an SSL VPN solution from Pulse Secure, Inc. in the United States. A buffer error vulnerability exists in Pulse Secure Pulse Connect Secure that stems from the product's failure to validate memory boundaries. An...

The vulnerability of the Junos operating system arises from an operation that goes beyond the buffer boundaries in memory, allowing a attacker to trigger a service failure.

The vulnerability of the Junos operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor, operating remotely, to cause a service failure by sending a specific sequence of packets to the device...

The vulnerability in the fs/seq_file.c component of Linux operating systems allows a hacker to increase their privileges.

The vulnerability of the fs/seqfile.c component in Linux operating systems is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of Google Chrome’s V8 JavaScript engine, related to writing beyond the buffer boundary, allows attackers to access confidential information or trigger a service denial.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

The vulnerability in the ImfMisc.cpp library of software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from writing beyond the buffer boundaries. This allows an attacker to cause a service failure.

The vulnerability in the ImfMisc.cpp library of the OpenEXR image storage software lies in the handling of operations that exceed the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the WriteSGIImage function in the console-based image editing tool ImageMagick, related to writing beyond buffer boundaries, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WriteSGIImage function in the console-based image editing tool ImageMagick is related to the execution of operations that exceed the allowable buffer data size. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its...

The vulnerability of the kmath.dll library in the KOMPAS-3D 3D modeling system, related to the execution of operations outside the buffer in memory, allows a hacker to cause a service failure.

The vulnerability of the kmath.dll library in the KOMPAS-3D 3D modeling system relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially crafted T3D format file...

SUSE: Security Advisory (SUSE-SU-2013:1166-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2013:1166-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Windows Projected File System FS Filter driver in Microsoft Windows operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Windows Projected File System FS Filter driver in Microsoft Windows relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...