PT-2022-30214

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.32 Description The issue concerns a buffer allocation overflow in the PCM OSS of the ALSA Advanced Linux Sound Architecture subsystem. The actual impact and attack plausibility have not yet been proven...

PT-2022-30557

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.188 Description The issue is related to a buffer allocation overflow in the PCM OSS of the ALSA module. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-30425

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.109 Description The issue concerns a buffer allocation overflow in the PCM OSS of the ALSA Advanced Linux Sound Architecture subsystem. The actual impact and potential for attack have not been fully...

ALPINE-CVE-2022-1122

A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...

CVE-2022-1122

A flaw was found in the opj2decompress program in openjpeg2 2.4.0 in the way it handles an input directory with a large number of files. When it fails to allocate a buffer to store the filenames of the input directory, it calls free on an uninitialized pointer, leading to a segmentation fault and...

DEBIAN-CVE-2022-1050

A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition...

PT-2025-8220

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer allocation overflow issue has been identified in the Linux kernel, specifically in the ALSA oss PCM OSS layer. The problem occurs when the size of a temporary buffer for data...

jackson-dataformat-cbor: Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception

This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception...

CLSA-2022-1643115104 Fixed CVEs in php: CVE-2021-21705, CVE-2021-21703

CVE-2021-21703: fix incorrect shared memory management, which led to priv escalation - CVE-2021-21705: fix integer overflow and subsequent incorrect buffer allocation...

PT-2025-54118

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak existed in the uvc gpio parse function within the uvcvideo module. The unit buffer was allocated before checking the Interrupt Request IRQ for privacy GPIO. If an error...

jackson-dataformat-cbor: Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception

This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception...

CLSA-2021-1637673193 Fix of CVE: CVE-2021-21704, CVE-2021-21703, CVE-2021-21705

CVE-2021-21704: fix integer overflow and subsequent incorrect buffer allocation - CVE-2021-21705: fix incorrect url password validation - CVE-2021-21703: fix incorrect shared memory management, which led to priv escalation...

Fix of CVE: CVE-2021-21704, CVE-2021-21703, CVE-2021-21705

CVE-2021-21704: fix integer overflow and subsequent incorrect buffer allocation - CVE-2021-21705: fix incorrect url password validation - CVE-2021-21703: fix incorrect shared memory management, which led to priv escalation...

jackson-dataformat-cbor: Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception

This affects the package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor from 0 and before 2.11.4, from 2.12.0-rc1 and before 2.12.1. Unchecked allocation of byte buffer can cause a java.lang.OutOfMemoryError exception...

Fix of CVE: CVE-2021-21705, CVE-2021-21704, CVE-2021-21703

CVE-2021-21704: fix integer overflow and subsequent incorrect buffer allocation - CVE-2021-21705: fix incorrect url password validation - CVE-2021-21703: fix incorrect shared memory management, which led to priv escalation...

CVE-2021-30306

CVE-2021-30306 relates to a buffer over-read caused by improper buffer allocation for a file length supplied from user space in Qualcomm/Snapdragon components (e.g., Snapdragon Auto, Connectivity, Industrial IOT, Mobile). Connected sources identify downstream product families (Qualcomm QCA6574AU,...

PT-2021-18708

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description The issue is related to a possible buffer over read due to improper buffer allocation for file length passed from user space. This affects various Qualcomm Snapdragon products,...

CVE-2021-1615

A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller EWC Software for Catalyst Access Points APs could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected AP. This vulnerability is due to insufficient buffer...

CVE-2021-1615

The CVE-2021-1615 vulnerability affects Cisco Embedded Wireless Controller (EWC) Software for Catalyst Access Points, caused by insufficient buffer allocation in the packet processing path. An unauthenticated, remote attacker can send crafted traffic to exhaust resources on the affected AP, causi...

CVE-2021-1615 Cisco Embedded Wireless Controller Software for Catalyst Access Points Denial of Service Vulnerability

A vulnerability in the packet processing functionality of Cisco Embedded Wireless Controller EWC Software for Catalyst Access Points APs could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected AP. This vulnerability is due to insufficient buffer...