Lucene search
+L

240 matches found

OSV
OSV
added 2022/07/26 1:15 p.m.12 views

AZL-41338 CVE-2021-33450 affecting package nasm 2.16.01-1

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasmcalloc in nasmlib/alloc.c...

5.5CVSS6AI score0.0033EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/26 1:15 p.m.4 views

UBUNTU-CVE-2021-33450

An issue was discovered in NASM version 2.16rc0. There are memory leaks in nasmcalloc in nasmlib/alloc.c...

5.5CVSS5.8AI score0.0033EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2022/07/11 12:0 a.m.5 views

PT-2022-6032 · Unknown +9 · Libarchive +9

Name of the Vulnerable Software and Affected Versions: libarchive versions prior to 3.6.2 Description: The issue is related to the calloc function in the libarchive library, which can lead to a NULL pointer dereference if an error occurs after the function is called. This may allow a remote...

10CVSS7.7AI score0.03154EPSS
SaveExploits3References93
OSV
OSV
added 2022/05/03 9:15 p.m.7 views

CVE-2021-27417

eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc an implementation of malloc. The unverified memory assignment can lead to arbitrary memory allocation, resulting in a heap-based buffer overflow...

9.8CVSS6.2AI score0.00576EPSS
SaveExploits0References2
NVD
NVD
added 2022/05/03 9:15 p.m.20 views

CVE-2021-27427

RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...

9.8CVSS0.01574EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/03 9:15 p.m.11 views

CVE-2021-27427

RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...

9.8CVSS7.6AI score0.01574EPSS
SaveExploits0References2
Prion
Prion
added 2022/05/03 9:15 p.m.22 views

Integer overflow

RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...

7.5CVSS9.6AI score0.01574EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2022/05/03 9:15 p.m.20 views

Heap overflow

eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc an implementation of malloc. The unverified memory assignment can lead to arbitrary memory allocation, resulting in a heap-based buffer overflow...

7.5CVSS9.5AI score0.00576EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/05/03 8:16 p.m.79 views

CVE-2021-27427

The CVE-2021-27427 entry concerns RIOT OS 2020.01.1, where an integer wrap-around in calloc can cause arbitrary memory allocation, leading to a crash or remote code execution. Connected sources corroborate the RIOT OS impact and specify the vulnerability as an integer wrap-around in calloc. The R...

9.8CVSS8.7AI score0.01574EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2022/04/15 12:0 a.m.59 views

Unspecified vulnerability in iot-device-sdk-embedded-c

iot-device-sdk-embedded-c is an application plugin. The Google Cloud IoT Device SDK for embedded C is an easily portable open source C library that connects low-end IoT devices to Google Cloud IoT Core. iot-device-sdk-embedded-c suffers from a security vulnerability that stems from the...

7.8CVSS3.6AI score0.00217EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.14 views

The vulnerability in the implementation of the calloc function in the kernel of the operating system for RIOT network devices allows a hacker to execute arbitrary code.

The vulnerability in the implementation of the calloc function in the kernel of the operating system for RIOT network devices relates to the possibility of integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.01574EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/10 12:0 a.m.11 views

The vulnerability in the implementation of the calloc() and mm_zalloc() functions in the Tizen RT operating systems allows a hacker to cause a service failure.

The vulnerability of the calloc and mmzalloc functions in Tizen RT operating systems is related to integer overflow. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

7.8CVSS7.3AI score0.01105EPSS
SaveExploits0References4Affected Software1
Prion
Prion
added 2021/11/02 6:15 p.m.17 views

Buffer overflow

Buffer overflow vulnerability in fcovatti libieciccpmod v1.5, allows attackers to cause a denail of service when trying to calloc an unexpectiedly large space...

5CVSS7.5AI score0.0099EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/10/29 12:0 a.m.9 views

The vulnerability of the calloc() function in the Klibc environment library, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the calloc function in the Klibc environment library is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures...

9.8CVSS7.8AI score0.02059EPSS
SaveExploits0References9Affected Software4
Prion
Prion
added 2021/10/04 9:15 p.m.23 views

Integer overflow

Hiredis is a minimalistic C client library for the Redis database. In affected versions Hiredis is vulnurable to integer overflow if provided maliciously crafted or corrupted RESP mult-bulk protocol data. When parsing multi-bulk array-like replies, hiredis fails to check if count sizeofredisReply...

6.5CVSS8.7AI score0.02139EPSS
SaveExploits0References6Affected Software2
OSV
OSV
added 2021/08/31 5:15 p.m.9 views

CVE-2021-22684

Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functionscalloc and mmzalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash...

7.5CVSS7.2AI score0.01105EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/08/30 12:0 a.m.10 views

The vulnerability of the calloc() function in the C Runtime Library (CRT) allows a hacker to execute arbitrary code.

The vulnerability of the calloc function in the C Runtime Library CRT is related to integer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.4AI score0.018EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2021/08/17 7:15 p.m.6 views

CVE-2021-22156

An integer overflow vulnerability in the calloc function of the C runtime library of affected versions of BlackBerry® QNX Software Development Platform SDP versions 6.5.0SP1 and earlier, QNX OS for Medical 1.1 and earlier, and QNX OS for Safety 1.0.1 and earlier that could allow an attacker to...

9.8CVSS6AI score0.018EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/08/17 7:15 p.m.2 views

CVE-2021-22156

An integer overflow vulnerability in the calloc function of the C runtime library of affected versions of BlackBerry® QNX Software Development Platform SDP versions 6.5.0SP1 and earlier, QNX OS for Medical 1.1 and earlier, and QNX OS for Safety 1.0.1 and earlier that could allow an attacker to...

9.8CVSS6.3AI score0.018EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2021/08/17 6:35 p.m.218 views

CVE-2021-22156

CVE-2021-22156 is an integer overflow in the calloc() function of the BlackBerry QNX C runtime library, affecting SDP 6.5.0SP1 and earlier, QNX OS for Medical 1.1 and earlier, and QNX OS for Safety 1.0.1 and earlier. Exploitation could cause denial of service or arbitrary code execution; remote a...

9.8CVSS9.6AI score0.018EPSS
SaveExploits0References2Affected Software3
Rows per page
Query Builder