OpenHarmony 缓冲区错误漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom OpenAtom Foundation. A buffer error vulnerability exists in OpenHarmony 5.0.2 and earlier versions, which stems from an out-of-bounds read and is vulnerable to denial-of-service attacks...

The vulnerability of the library for working with the DICOM format in DCMT, related to the occurrence of operations outside the buffer in memory, allows a malicious actor to trigger a service failure.

The vulnerability of the library for working with the DICOM format in DCMT is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

libwebsockets 缓冲区错误漏洞

Libwebsockets is a canonical libwebsockets networking library open-sourced by lws-team. A security vulnerability exists in versions of libwebsockets prior to 4.3.4, which stems from improper pointer manipulation and can lead to out-of-bounds memory accesses...

CVE-2025-21777 ring-buffer: Validate the persistent meta data subbuf array

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the...

The vulnerability of UEFI microprogramming systems of Intel processors allows a hacker to gain unauthorized access to protected information.

The vulnerability of Intel UEFI microprogramming systems lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

NVIDIA CUDA toolkit 缓冲区错误漏洞

The NVIDIA CUDA toolkit is a toolkit from NVIDIA, Inc. It provides a development environment for creating high-performance GPU-accelerated applications. A buffer error vulnerability exists in NVIDIA CUDA toolkit, which stems from an out-of-bounds read in the cuobjdump binary, which could lead to ...

Siemens SIMATIC Devices Linux Kernel Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2022-3564)

A vulnerability classified as critical was found in Linux Kernel. Affected by this vulnerability is the function l2capreassemblesdu of the file net/bluetooth/l2capcore.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The...

NVIDIA CUDA toolkit 缓冲区错误漏洞

The NVIDIA CUDA toolkit is a toolkit from NVIDIA, Inc. It provides a development environment for creating high-performance GPU-accelerated applications. A buffer error vulnerability exists in NVIDIA CUDA toolkit, which stems from an out-of-bounds read in the cuobjdump binary, which could lead to ...

Siemens SIMATIC Devices Linux Kernel Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2022-3649)

A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfsnewinode of the file fs/nilfs2/inode.c of the component BPF. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch t...

Siemens SCALANCE W700 Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2024-33016)

memory corruption when an invalid firehose patch command is invoked. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid502913; scriptversion"1.3";...

GRUB 缓冲区错误漏洞

GNU GRUB is a Linux system boot program from the GNU community. GRUB suffers from a buffer error vulnerability that stems from an integer overflow not checked when reading .mo files, which can lead to out-of-bounds reads and writes and bypass secure boot...

NVIDIA nvJPEG2000 缓冲区错误漏洞

NVIDIA nvJPEG2000 is a library from NVIDIA, Inc. for decoding and encoding JPEG2000 images on NVIDIA GPUs. NVIDIA nvJPEG2000 suffers from a buffer error vulnerability that originates from allowing out-of-bounds writes to memory. An attacker exploiting this vulnerability could execute code and...

Tungsten Automation Power PDF 缓冲区错误漏洞

Tungsten Automation Power PDF Kofax Power PDF is a powerful PDF processing software from Tungsten Automation, Inc. A buffer error vulnerability exists in Tungsten Automation Power PDF that stems from the JPF file parsing module containing an out-of-bounds write issue that could lead to a remote...

CVE-2022-2947

Altair HyperView Player versions 2021.1.0.27 and prior perform operations on a memory buffer but can read from or write to a memory location outside of the intended boundary of the buffer. This hits initially as a read access violation, leading to a memory corruption situation...

CVE-2024-8938

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause a potential arbitrary code execution after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call to tamper with memory area involved in memory...

MediaTek Chipsets 缓冲区错误漏洞

MediaTek Chipsets are a variety of chips from China's MediaTek Corporation MediaTek. A buffer error vulnerability exists in MediaTek Chipsets, which stems from the Modem module containing a missing bounds checking issue that could lead to out-of-bounds writes...

MediaTek Chipsets 缓冲区错误漏洞

MediaTek Chipsets are a variety of chips from China's MediaTek Corporation MediaTek. A buffer error vulnerability exists in MediaTek Chipsets, which stems from the V5 DA module containing a missing bounds-checking issue that could lead to out-of-bounds writes...

CVE-2024-0131

NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker could read a buffer with an incorrect length. A successful exploit of this vulnerability might lead to denial of service...

CVE-2024-0131

CVE-2024-0131 affects the NVIDIA GPU kernel driver for Windows and Linux, allowing a local attacker to read a buffer of incorrect length and potentially cause a denial of service. Multiple advisories (e.g., openSUSE SUSE-SU-2025-02600-1/02575-1, SUSE-SU-2025-02165-1) indicate fixes were incorpora...

AutomationDirect C-More EA9 Programming Software 缓冲区错误漏洞

AutomationDirect C-More EA9 Programming Software is a programming software from AutomationDirect, Inc. AutomationDirect C-More EA9 Programming Software suffers from a buffer error vulnerability that stems from a lack of proper validation of user-supplied data when parsing an EAP9 file, resulting ...