3252 matches found
JerryScript 安全漏洞
JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version fe3a5c0, which stems from a buffer overflow in ecmabuiltintypedarrayprototypefilter. An attacker can exploit the vulnerability to construct a fake object or a fake...
QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu
A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to numbuffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting i...
Denial Of Service (DoS)
libxml2.so is vulnerable to denial of service. The xmlBufCreateSize function of buf.c does not properly check types of buffer sizes, allowing an attacker to crash the application by providing large multi-gigabyte buffers...
CVE-2021-3750
A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Pointer overlaps with its MMIO region when it transfers the USB packets. Crafted content may be written to the controller's registers and trigger undesirable actions such as reset whi...
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Google Protocol Buffers
Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of Google Protocol Buffers. Vulnerability Details CVEID: CVE-2021-22569 DESCRIPTION: Google Protocol Buffer protobuf-java is vulnerable to a denial of service, caused by an issue with allow interleaving of...
The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in the ability to read data beyond the buffer in memory, allowing attackers to exploit this to disclose protected information.
The vulnerability of the Adobe Animate program for creating multimedia and computer animations is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information within the context of the current user, using a specially...
GSD-2022-1002362 media: stk1160: If start stream fails, return buffers with VB2_BUF_STATE_QUEUED
media: stk1160: If start stream fails, return buffers with VB2BUFSTATEQUEUED This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.238 by commit...
GSD-2022-1001786 media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers
media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.33 by commit...
GSD-2022-1001464 media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers
media: imx-jpeg: Prevent decoding NV12M jpegs into single-planar buffers This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.19 by commit...
Security Bulletin: Multiple vulnerabilities may affect IBM Robotic Process Automation
Summary Multiple vulnerabilities in IBM Robotic Process Automation Vulnerability Details CVEID: CVE-2022-0235 DESCRIPTION: Node.js node-fetch could allow a remote authenticated attacker to obtain sensitive information, caused by a flaw when fetching a remote url with Cookie. By sending a...
The vulnerability of the __Parse_indx component in the VLC Media Player allows a attacker to access confidential data and also cause a service failure.
The vulnerability of the Parseindx component in the VLC Media Player lies in the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause a service failure by using a specially created .avi file...
The vulnerability of the vlc_input_attachment_New component in the VLC Media Player software allows a hacker to gain access to confidential data and also cause a service failure.
The vulnerability of the vlcinputattachmentNew component in the VLC Media Player software is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause a service failure by using a speciall...
The vulnerability of the Mozilla Firefox browser, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of the Mozilla Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...
The vulnerability of the `store_sm_boundary_item` function in the `Nef_S2/SNC_io_parser.h` component of the CGAL algorithm library allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the storesmboundaryitem function in the NefS2/SNCioparser.h library, a part of the computational geometry algorithm library CGAL, relates to reading data beyond the allowed buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data...
The vulnerability of the Adobe Animate software for creating multimedia and computer animations lies in its ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the Adobe Animate software for creating multimedia and computer animations relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability in the embedded software of NETGEAR routers such as NETGEAR R6400, NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR R8500, NETGEAR RS400, NETGEAR WNDR3400v3, NETGEAR WNR3500v2, NETGEAR XR300, NETGEAR D6220, NETGEAR D6400, NETGEAR D7000v2, NETGEAR R7100LG, and NETGEAR DC112A lies in the copying of buffers without checking the size of the input data. This allows an attacker to execute arbitrary code.
The vulnerability in the embedded software of NETGEAR routers such as NETGEAR R6400, NETGEAR R6400v2, NETGEAR R6700v3, NETGEAR R6900P, NETGEAR R7000, NETGEAR R7000P, NETGEAR R8500, NETGEAR RS400, NETGEAR WNDR3400v3, NETGEAR WNR3500Lv2, NETGEAR XR300, NETGEAR D6220, NETGEAR D6400, NETGEAR D7000v2,...
Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to disclose sensitive information and cause partial service interruptions.
Vulnerability of the Cluster component: General database management systems like MySQL Cluster involve reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information and cause partial service interruptions...
CVE-2022-1050
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition...
AZL-9277 CVE-2022-1050 affecting package qemu for versions less than 6.2.0-2
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition...
CVE-2022-1050
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition...