Cross site scripting

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges...

Design/Logic Flaw

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.1. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-46697

CVE-2022-46697 is an out-of-bounds access vulnerability that could let an app execute arbitrary code with kernel privileges on macOS. The issue is fixed in macOS Ventura 13.1 via improved bounds checking. Affected components are not explicitly enumerated in the provided documents beyond the macOS...

CVE-2022-46697

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Ventura 13.1. An app may be able to execute arbitrary code with kernel privileges...

GSD-2022-1007685 netlink: Bounds-check struct nlmsgerr creation

netlink: Bounds-check struct nlmsgerr creation This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...

PT-2022-35940 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: The issue concerns the creation of struct nlmsgerr in netlink, where bounds checking is not properly performed. This is an automated identification of a potential security issue, and its...

PT-2022-36040

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.6 through v6.0.8 Description The issue concerns a problem with SQE threshold checking in the octeontx2-pf driver. The actual impact and potential for attack have not been proven yet. Recommendations For Linux Kernel...

PT-2022-35958 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v6.0.7 through v6.0.10 Description: The issue concerns missing SIGTRAP checking, which may potentially lead to security vulnerabilities. However, the actual impact and attack plausibility have not yet been proven. It was...

UNISOC chipset buffer error vulnerability

The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in the UNISOC chipset due to a lack of bounds checking in its wlan driver, resulting in a local denial of service for the wlan service...

UNISOC chipset security vulnerabilities

The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in the UNISOC chipset due to a lack of bounds checking in its wlan driver, resulting in a local denial of service for the wlan service...

UNISOC chipset buffer error vulnerability

The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in the UNISOC chipset due to a lack of bounds checking in its wlan driver, resulting in a local denial of service for the wlan service...

UNISOC chipset input validation error vulnerability

The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in the UNISOC chipset due to a lack of bounds checking in its wlan driver, resulting in a local denial of service for the wlan service...

UNISOC chipset input validation error vulnerability

The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in the UNISOC chipset due to a lack of bounds checking in its wlan driver, resulting in a local denial of service for the wlan service...

UNISOC chipset buffer error vulnerability

UNISOC chipset is an integrated circuit chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in the UNISOC chipset that stems from a lack of bounds checking in the wlan driver, resulting in a denial of service...

UNISOC chipset buffer error vulnerability

The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in the UNISOC chipset due to a lack of bounds checking in its wlan driver, resulting in a local denial of service for the wlan service...

Redmine security vulnerabilities

Redmine is a set of open source Web-based project management and defect tracking tools . The product provides features such as project management, issue tracking and role-based access control. A security vulnerability exists in Redmine version 5.x up to and including version 5.0.4, which stems fr...

UNISOC chipset security vulnerabilities

The UNISOC chipset is an integrated circuit chipset from China's Unisplendour UNISOC. A security vulnerability exists in the UNISOC chipset that stems from a lack of privilege checking in the power management service, which could result in setting up the power management service without additiona...

UNISOC chipset buffer error vulnerability

The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in the UNISOC chipset due to a lack of bounds checking in its wlan driver, resulting in a local denial of service for the wlan service...

UNISOC chipset buffer error vulnerability

The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in the UNISOC chipset due to a lack of bounds checking in its wlan driver, resulting in a local denial of service for the wlan service...

UNISOC chipset buffer error vulnerability

The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in the UNISOC chipset due to a lack of bounds checking in its wlan driver, resulting in a local denial of service for the wlan service...