The vulnerability of the reading mode in Google Chrome’s web browser involves writing beyond the buffer in memory, allowing an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome web browser’s reading mode is related to writing beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created...

CLSA-2021-1635459208 Fix CVE(s): CVE-2021-25217

SECURITY UPDATE: buffer overrun in common code parseX - debian/patches/CVE-2021-25217.patch: fix incorrect order of operations in common/parse.c. - CVE-2021-25217...

F5 Networks BIG-IP : OpenSSL vulnerability (K19559038)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K19559038 advisory. ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the...

Adobe After Effects 缓冲区错误漏洞

Adobe After Effects "AE" is a graphics video processing software from Adobe for organizations involved in design and video special effects, including television stations, animation production companies, personal post-production studios, and multimedia studios. Effects 18.4.1 and earlier versions...

The vulnerability of the History component in the Google Chrome web browser, related to writing beyond the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the History component in the Google Chrome web browser is related to writing beyond the buffer limit in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a special...

The vulnerability of the WebAudio component in the Google Chrome web browser, related to the occurrence of operations beyond the buffer boundaries in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebAudio component in the Google Chrome web browser is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service interruptio...

The vulnerability of the library for reading, creating, and editing DjVu files, DjVuLibre, is related to reading data beyond the allowed buffer limits, allowing an intruder to cause a service failure.

The vulnerability of the library for viewing, creating, and editing DjVu files in DjVuLibre is related to the lack of checks for zero bytes. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Media Feeds component in the Google Chrome web browser involves an operation that goes beyond the acceptable data buffer limits. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Media Feeds component in the Google Chrome web browser relates to the execution of operations beyond the allowed data buffer limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the filter_intra component in the Ffmpeg library, related to writing beyond the buffer boundary, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the filterintra component in the Ffmpeg library is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability in the `hw/net/tulip.c` component of the QEMU hardware emulation software involves writing beyond the buffer boundaries. This allows an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the hw/net/tulip.c component of the QEMU hardware emulation software involves writing beyond the buffer boundaries during copy operations for TX/RX data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data, compromise its integrity, a...

CLSA-2021-1634922551 Fixed CVE-2021-25217 in dhcp

CVE-2021-25217: avoid buffer overrun...

UBUNTU-CVE-2021-3746

A flaw was found in the libtpms code that may cause access beyond the boundary of internal buffers. The vulnerability is triggered by specially-crafted TPM2 command packets that then trigger the issue when the state of the TPM2's volatile state is written. The highest threat from this vulnerabili...

PT-2022-4748 · Linux +7 · Linux Kernel +7

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw was found in the sctp make strreset req function in net/sctp/sm make chunk.c in the SCTP network protocol. This issue is related to an attempt to use more buffer than is...

The vulnerability of the Bluetooth Classic environment for developing IoT applications allows a intruder to trigger a service failure.

The vulnerability in the Bluetooth Classic environment for IoT application development, espressif esp-idf, relates to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially crafted LMP package...

The vulnerability of the Bluetooth Classic implementation of the microprogramming software for the Bluetrum AB5301A device allows a intruder to cause a service failure.

The vulnerability of the Bluetooth Classic microprogramming device Bluetrum AB5301A lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Amazon Linux 2 : openssl11 (ALAS-2021-1714)

The version of openssl11 installed on the remote host is prior to 1.1.1g-12. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2021-1714 advisory. It was found that openssl assumed ASN.1 strings to be NUL terminated. A malicious actor may be able to force an application int...

The vulnerability of client software for various remote access protocols, such as Putty, arises from the possibility of executing operations beyond the buffer in memory. This allows attackers to cause service failures.

The vulnerability of client software against various remote access protocols like Putty is related to an error in exiting the operation beyond the buffer in memory. This caused the window to repeatedly change its header at high speeds. Exploiting this vulnerability could allow a malicious actor t...

The vulnerability of the Double Ratchet Libolm cryptographic ratchet implementation lies in the possibility of data being written beyond the buffer boundaries. This allows attackers to gain access to confidential data, compromise its integrity, and even cause service failures.

The vulnerability of the Double Ratchet Libolm cryptographic ratchet implementation lies in the writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker operating remotely to gain access to confidential data, compromise its integrity, and even cause service...

Debian DLA-2774-1 : openssl1.0 - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2774 advisory. - ASN.1 strings are represented internally within OpenSSL as an ASN1STRING structure which contains a buffer holding the string data and a field holding the buffer length...

The vulnerability in the Adobe InCopy text creation and editing software relates to the execution of operations beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a specially created file, from a remote location...