SUSE CVE-2015-0803

The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before 37.0 does not properly constrain the original data type of a casted value during the setting of a SOURCE element's attributes, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free...

SUSE CVE-2016-5209

Bad casting in bitmap manipulation in Blink in Google Chrome prior to 55.0.2883.75 for Mac, Windows and Linux, and 55.0.2883.84 for Android allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

SUSE CVE-2020-4032

In FreeRDP before version 2.1.2, there is an integer casting vulnerability in updaterecvsecondaryorder. All clients with +glyph-cache /relax-order-checks are affected. This is fixed in version 2.1.2...

SUSE CVE-2022-29181

Nokogiri is an open source XML and HTML library for Ruby. Nokogiri prior to version 1.13.6 does not type-check all inputs into the XML and HTML4 SAX parsers, allowing specially crafted untrusted inputs to cause illegal memory access errors segfault or reads from unrelated memory. Version 1.13.6...

GSD-2023-1002061 i2c: designware: use casting of u64 in clock multiplication to avoid overflow

i2c: designware: use casting of u64 in clock multiplication to avoid overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.91 by commit...

GSD-2023-1001908 i2c: designware: use casting of u64 in clock multiplication to avoid overflow

i2c: designware: use casting of u64 in clock multiplication to avoid overflow This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.1.9 by commit...

Unsafe casting of an int128 to uint128 can cause wrong accounting in _receiveDripsResult

Lines of code Vulnerability details Impact Unsafe casting of int128 to uint128 is dangerous and makes user receive more assets than they should. Proof of Concept state.amtDeltascycle can be a negative value. The delta value at each point is simply the relative change from the previous cycle. If...

CVE-2022-25715

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields...

Memory corruption

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields...

CVE-2022-25715

CVE-2022-25715 concerns memory corruption in the Qualcomm display driver due to incorrect type casting when accessing fields in the fence structure. Documented in multiple sources as affecting Qualcomm display components (Pixel bulletin category: Display) with a reported impact on memory safety (...

CVE-2022-25715 Incorrect type casting in Display driver

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields...

CVE-2022-25715 Incorrect type casting in Display driver

Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields...

PT-2023-12798 · Unknown · Display Driver

Name of the Vulnerable Software and Affected Versions: Display driver affected versions not specified Description: The issue is related to memory corruption in the display driver, caused by incorrect type casting when accessing fields of the fence structure. Recommendations: At the moment, there ...

PT-2022-22283 · Nvidia +1 · Nvidia Gpu Display Driver For Linux +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Linux affected versions not specified Description: The issue is related to a vulnerability in the kernel mode layer handler of the NVIDIA GPU Display Driver for Linux. An unprivileged regular user can cause...

castingclub.com.ar Cross Site Scripting vulnerability OBB-3092178

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Dangerous casting from i256 to u256 of the price returned by the Chainlink oracle

Lines of code Vulnerability details Impact Referring to the docs, Chainlink oracles are returning the price as an int256, which means that the answer can be a negative price. Later, this price is casted as an uint256 in the case of an oracle that is set, which overflows when price 0. Any price...

PT-2022-26121

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.11 TensorFlow versions 2.10.1, 2.9.3, and 2.8.4 Description The issue arises when BCast::ToShape is given input larger than an int32, causing it to crash despite being supposed to handle up to an int64. An exampl...

Sandbox Bypass

Jenkins Script Security Plugin is vulnerable to Sandbox Bypass. The vulnerability exists during the casting of array-like values to array types that intercepts per-element casts which allows an attacker to bypass sandbox restrictions and execute arbitrary codes...

Jenkins Script Security Plugin sandbox bypass vulnerability

A sandbox bypass vulnerability involving casting an array-like value to an array type in Jenkins Script Security Plugin 1183.v774b0b0aa451 and earlier allows attackers with permission to define and run sandboxed scripts, including Pipelines, to bypass the sandbox protection and execute arbitrary...

PT-2022-26887 · Jenkins · Jenkins Script Security Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Script Security Plugin versions 1183.v774b 0b 0a a 451 and earlier Description: A sandbox bypass issue involves casting an array-like value to an array type, allowing attackers with permission to define and run sandboxed scripts,...