79 matches found
ROS-20240611-02
The vulnerability of Tss2RCDecode and Tss2RCSetHandler functions of TCG TPM2 TPM2 Software Stack implementation is related to buffer copying without input data validation. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data, violate its integrity, and cause ...
PT-2024-4363 · Nvidia +1 · Nvidia Vgpu +1
Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software for Linux affected versions not specified Description: The issue is related to a buffer overrun vulnerability in the Virtual GPU Manager of the NVIDIA vGPU software for Linux. This vulnerability can be exploited by the...
ROS-20240529-04
A vulnerability in the ImageIO component of the Oracle Java SE software platform and the Oracle GraalVM Virtual Machine Enterprise Edition is related to integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to cause a partial denial of service Vulnerability i...
ROS-20240506-02
A vulnerability in the Glib library is related to GVariant deserialization. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability of Glib library function gbytearraynewtake is related to buffer copying without checking the the size of the input data...
The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to execute arbitrary code and gain elevated privileges.
The vulnerability of the Core component of the Oracle VM VirtualBox software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...
ROS-20240412-05
A vulnerability in the gfisomnewgenericsampledescription function of the GPAC multimedia platform is related to the buffer copying without checking the input size. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
The vulnerability of the Azure-c-shared-utility library in the Azure SDK for C development software package allows a attacker to execute arbitrary code.
The vulnerability of the Azure-c-shared-utility library in the Azure SDK for C development software package is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using the buffer length...
The vulnerability of embedded software developed by Qualcomm, related to copying buffers without checking the size of the input data, allows a violator to execute arbitrary code.
The vulnerability of microprogramming software in embedded Qualcomm chips lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the formTmultiAP function in the /bin/boa file of the Totolink X2000R router’s microprogramming system allows a hacker to execute arbitrary code.
The vulnerability of the formTmultiAP function in the /bin/boa file of the Totolink X2000R router microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the readimg function in the OpenImageIO image processing library allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the readimg function in the OpenImageIO image processing library is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and even cause service failures...
The vulnerability in the web interface of ArubaOS systems allows a hacker to trigger a service failure.
The vulnerability in the web interface of ArubaOS relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions...
The vulnerability of the DDP microprogramming software-based wireless access points from D-Link, model DAP-2622, allows a intruder to execute any arbitrary code.
The vulnerability of the DDP microprogramming software used in D-Link DAP-2622 wireless access points lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
Mitsubishi Electric CNC Series Security Breach
Mitsubishi Electric CNC Series is a series of CNC control systems from Mitsubishi Electric Japan. A security vulnerability exists in Mitsubishi Electric CNC Series, which arises from a failure to check input size during buffer copying...
Advisory ROSA-SA-2023-2159
Software: httpd 2.4.37 OS: ROSA Virtualization 2.1 packageevrstring: 2.4.37 CVE-ID: CVE-2006-20001 BDU-ID: 2023-01105 CVE-Crit: HIGH CVE-DESC: A vulnerability in the moddav module of the Apache HTTP Server web server is related to an operation exceeding buffer boundaries. Exploitation of the...
The vulnerability of the imageinfo.hpp file in the imageinfo library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the imageinfo.hpp file in the imageinfo library is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
The vulnerability of the Emscripten compiler in the encoding and decoding library for HEIF and AVIF files, which allows a hacker to trigger a service failure.
The vulnerability of the Emscripten compiler in the library for encoding and decoding HEIF and AVIF files is related to the copying of buffers without checking the size of the input data during image processing using the strided function. Exploiting this vulnerability can allow an attacker to cau...
Qualcomm 芯片缓冲区错误漏洞
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuitry mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. The Qualcomm chip suffers from a security vulnerability that stems from memory...
The vulnerability of Cisco Catalyst 9100 access point software, related to copying buffers without checking the size of input data, allows a intruder to trigger a service failure.
The vulnerability of Cisco Catalyst 9100 access point software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker operating remotely to cause service interruptions...
Qualcomm Camera Driver 安全漏洞
Qualcomm Camera Driver is a camera driver from Qualcomm Incorporated. A security vulnerability exists in the Qualcomm Camera Driver that originates from a camera memory corruption due to buffer copying without checking the input size and affects the following products and versions: AQT1000,...
Advisory ROSA-SA-2022-2056
Software: kernel 3.10.0 OS: rosa-server79 packageevrstring: kernel-3.10.0-1160.83.1.el7 CVE-ID: CVE-2022-2078 BDU-ID: 2022-04090 CVE-Crit: Not Relevant CVE-DESC: A vulnerability in the nftsetdescconcatparse function of the Linux operating systems kernel is related to buffer copying without checki...