CVE-2024-48930 secp256k1-node vulnerable to private key extraction over ECDH

secp256k1-node is a Node.js binding for an Optimized C library for EC operations on curve secp256k1. In elliptic-based version, loadUncompressedPublicKey has a check that the public key is on the curve. Prior to versions 5.0.1, 4.0.4, and 3.8.1, however, loadCompressedPublicKey is missing that...

CVE-2024-47702

In the Linux kernel, the following vulnerability has been resolved: bpf: Fail verification for sign-extension of packet data/dataend/datameta syzbot reported a kernel crash due to commit 1f1e864b6555 "bpf: Handle sign-extenstin ctx member accesses". The reason is due to sign-extension of 32-bit...

CVE-2024-47702 bpf: Fail verification for sign-extension of packet data/data_end/data_meta

In the Linux kernel, the following vulnerability has been resolved: bpf: Fail verification for sign-extension of packet data/dataend/datameta syzbot reported a kernel crash due to commit 1f1e864b6555 "bpf: Handle sign-extenstin ctx member accesses". The reason is due to sign-extension of 32-bit...

hunspell: Stack-buffer-overflow in AffixMgr::compound_check_morph

Recording https://github.com/hunspell/hunspell/issues/996 here for historical purposes...

CVE-2024-50056: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Fix ERRPTR dereference in uvcv4l2.c Fix potential dereferencing of ERRPTR in findformatbypix and uvcv4l2enumformat. Fix the following smatch errors: drivers/usb/gadget/function/uvcv4l2.c:124 findformatbypix erro...

OESA-2024-2286 libarchive security update

is an open-source BSD-licensed C programming library that provides streaming access to a variety of different archive formats, including tar, cpio, pax, zip, and ISO9660 images. The distribution also includes bsdtar and bsdcpio, full-featured implementations of tar and cpio that use . Security...

The vulnerability of the gue_gro_receive() function in the IPv4 implementation of the Linux operating system’s kernel allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability of the guegroreceive function in the net/ipv4/foucore.c module, which is part of the Linux operating system’s IPv4 kernel implementation, relates to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and...

Oracle Essbase Multiple Vulnerabilities (October 2024 CPU)

The version of Oracle Essbase installed on the remote host is missing a security patch from the October 2024 Critical Patch Update CPU. It is, therefore, affected by: - Vulnerability in Oracle Essbase component: Essbase Web Platform curl. The supported version that is affected is 21.6. Easily...

GHSA-G9XM-7538-MQ8W Exiv2 has an out-of-bounds read in QuickTimeVideo::NikonTagsDecoder

Impact An out-of-bounds read was found in Exiv2 version v0.28.1. The vulnerable function, QuickTimeVideo::NikonTagsDecoder, was new in v0.28.0 see https://github.com/Exiv2/exiv2/pull/2337, so Exiv2 versions before v0.28 are not affected. Exiv2 is a command-line utility and C++ library for reading...

SideWinder APT Strikes Middle East and Africa With Stealthy Multi-Stage Attack

An advanced persistent threat APT actor with suspected ties to India has sprung forth with a flurry of attacks against high-profile entities and strategic infrastructures in the Middle East and Africa. The activity has been attributed to a group tracked as SideWinder, which is also known as...

The vulnerability of the C-MOR video surveillance software’s web interface allows a intruder to elevate their privileges and execute arbitrary commands on the operating system.

The vulnerability of the C-MOR video surveillance software’s web interface exists due to the failure to take measures to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary...

usb: typec: ucsi: Fix null pointer dereference in trace

...

CVE-2024-48772

An issue in C-CHIP com.cchip.cchipamaota v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48772

An issue in C-CHIP com.cchip.cchipamaota v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48772

An issue in C-CHIP com.cchip.cchipamaota v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48772: Incorrect Authorization

An issue in C-CHIP com.cchip.cchipamaota v.1.2.8 allows a remote attacker to obtain sensitive information via the firmware update process...

PT-2024-33208

Name of the Vulnerable Software and Affected Versions C-CHIP version 1.2.8 Description The issue allows a remote attacker to obtain sensitive information via the firmware update process. Recommendations For version 1.2.8, at the moment, there is no information about a newer version that contains ...

CVE-2024-48772

The smart home product solution C-CHIP (com.cchip.cchipamaota) version v.1.2.8 is vulnerable to an incorrect authorization issue. This flaw allows a remote attacker to obtain sensitive information through the device's firmware update process. While the severity is rated as CRITICAL (CVSS 9.1) wit...

PT-2024-10030

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a double free vulnerability in the ma35 pinctrl dt node to map func function within the drivers/pinctrl/nuvoton/pinctrl-ma35.c module of the Linux kernel. This...

C-CHIP 安全漏洞

C-CHIP is a smart home product solution from China Cixin Micro C-CHIP. A security vulnerability exists in C-CHIP version v.1.2.8, which stems from an issue that allows remote attackers to obtain sensitive information through the firmware update process...