CVE-2021-1090

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for control calls where the software reads or writes to a buffer by using an index or pointer that references a memory location after the end of the buffer, which may lead to dat...

The vulnerability of the d2alaw_array() function in the SI libsndfile library, which involves reading beyond the permissible buffer size, allows an attacker to access confidential information or cause service failures.

The vulnerability of the d2alawarray function in the SI libsndfile library relates to reading data beyond the permissible buffer size. Exploiting this vulnerability allows a remote attacker to gain access to confidential information or cause service failures...

The vulnerability of the i2ulaw_array function in the libsndfile library, which relates to reading data beyond the allowable buffer limits, allows a attacker to cause a service failure.

The vulnerability of the i2ulawarray function in the libsndfile library is related to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the hufDecode function in the OpenEXR library, which involves reading beyond the allowable buffer data limits, allows attackers to access confidential information or cause service failures.

The vulnerability of the hufDecode function in the OpenEXR library lies in reading data beyond the acceptable buffer limits during the execution of exrmaketiled;. Exploiting this vulnerability can allow a remote attacker to access confidential information or cause service failures...

The vulnerability of the exif_data_save_data_entry function in the library for grammatical analysis of EXIF files in libexif, related to reading beyond the permissible buffer limits, allows a perpetrator to access confidential information or cause service failures.

The vulnerability of the exifdatasavedataentry function in the EXIF-file grammar analysis library libexif is related to reading data beyond the permissible buffer limits. Exploiting this vulnerability could allow an attacker to access confidential information or cause service failures...

The vulnerability of the i2ulaw_array function in the libsndfile library, which involves reading beyond the permissible buffer size, allows an attacker to access confidential information or cause service failures.

The vulnerability of the i2ulawarray function in the libsndfile library relates to reading data beyond the permissible buffer size. Exploiting this vulnerability could allow an attacker to access confidential information or cause service failures...

The vulnerability of Google Chrome’s V8 engine, related to the execution of operations beyond the buffer in memory, allows attackers to access confidential information or cause service failures.

The vulnerability of Google Chrome’s V8 engine is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential information or cause service failures...

The vulnerability of the BlitNtoN function (video/SDL_blit_N.c) in the multimedia library Simple DirectMedia Layer, which involves reading data beyond the allowed buffer limits, allows an attacker to access confidential data and also cause a service failure.

The vulnerability of the BlitNtoN function video/SDLblitN.c in the multimedia library Simple DirectMedia Layer involves reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service...

The vulnerability of the interface that provides access to SANE’s image scanning devices relates to reading data beyond the allowed buffer size, allowing an intruder to gain access to confidential data.

The vulnerability of the interface that provides access to SANE image scanning devices is related to incorrect data reading. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

The vulnerability of the uv__idna_toascii() function on the Node.js software platform, which allows a hacker to trigger a service failure or gain unauthorized access to protected information.

The vulnerability of the uvidnatoascii function on the Node.js platform is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures or gain unauthorized access to protected information...

The vulnerability of the Blit_3or4_to_3or4__inversed_rgb function in the multimedia library Simple DirectMedia Layer, which involves reading data beyond the allowed buffer limits, allows an intruder to access confidential data and also trigger a service failure.

The vulnerability of the Blit3or4to3or4inversedrgb function in the multimedia library Simple DirectMedia Layer involves reading data beyond the permissible buffer limits. Exploiting this vulnerability could allow an attacker to access confidential data, as well as cause service failures...

ARM mbed TLS 缓冲区错误漏洞

ARM mbed TLS is a product from ARM UK that provides secure communication and encryption for mbed products. a security vulnerability exists in versions prior to Arm Mbed TLS 2.24.0, which stems from the program having a buffer that reads data excessively. No details of the vulnerability are...

The vulnerability in the FliDecode.c function from the Pillow image processing library involves reading data beyond the allowed buffer limits. This allows an attacker to access confidential information or cause service failures.

The vulnerability in the function from the libImaging/FliDecode.c library, which is used for working with images in Pillow, involves reading data beyond the acceptable buffer limits. Exploiting this vulnerability could allow an attacker to access confidential information or cause service failures...

The vulnerability of the `p11_rpc_buffer_get_byte_array` function in the library for working with PKCS P11-kit modules lies in the reading of data beyond the buffer’s allowed limits, allowing an attacker to access confidential data.

The vulnerability of the p11rpcbuffergetbytearray function in the library for working with PKCS P11-kit modules is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

CVE-2021-34308

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The BMPLoader.dll library in affected applications lacks proper validation of user-supplied data when parsing BMP files. This could result in an out of bounds read past the end of an...

CVE-2021-34303

A vulnerability has been identified in JT2Go All versions V13.2, Teamcenter Visualization All versions V13.2. The TiffLoader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds read past the end of an...

CVE-2021-1901

Possible buffer over-read due to lack of length check while flashing meta images in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

CVE-2021-1943

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking...

CVE-2021-1954

Possible buffer over read due to improper validation of data pointer while parsing FILS indication IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking...

CVE-2021-1897

Possible Buffer Over-read due to lack of validation of boundary checks when loading splash image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...