Mozilla: Incorrect code generation on 32-bit ARM devices

The Mozilla Foundation Security Advisory describes this flaw as: Incorrect code generation could have led to unexpected numeric conversions and potential undefined behavior. This issue only affects 32-bit ARM devices...

Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Missing Authorization

Description The Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 3.6.4. This makes it possible for authenticat...

libavif:[email protected]: Use-of-uninitialized-value in avifImageRGBToYUV

Project: https://github.com/AOMediaCodec/libavif.git Detailed Report: https://oss-fuzz.com/testcase?key=4927644015591424 Project: libavif Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibavif Platform Id: linux Crash Type:...

SUSE-SU-2024:0538-1 Security update for hdf5

This update for hdf5 fixes the following issues: Updated to version 1.10.11 Changed the error handling for a not found path in the find plugin process. Fixed CVE-2018-11202, a malformed file could result in chunk index memory leaks. Fixed a file space allocation bug in the parallel library for...

Buffer Overflow

libzephyr.so is vulnerable to Buffer overflow. The vulnerability is due to signed to unsigned conversion when passing a negative size to memcpy, which can lead to buffer overflow in the esp32ipmsend function...

CVE-2023-6249

Signed to unsigned conversion esp32ipmsend...

Design/Logic Flaw

Signed to unsigned conversion esp32ipmsend...

CVE-2023-6249 ipm: signed to unsigned conversion problem in esp32_ipm_send

Signed to unsigned conversion esp32ipmsend...

CVE-2023-6249 ipm: signed to unsigned conversion problem in esp32_ipm_send

Signed to unsigned conversion esp32ipmsend...

CVE-2023-6249

CVE-2023-6249 affects the Zephyr RTOS component esp32_ipm_send. The root cause is a signed-to-unsigned conversion that can cause a buffer overflow in esp32_ipm_send (as described by Veracode), elevating risk for affected builds. Public documents describe a buffer overflow condition but do not spe...

CVE-2023-6249

Signed to unsigned conversion esp32ipmsend...

CVE-2023-6249: Incorrect Type Conversion or Cast

Signed to unsigned conversion esp32ipmsend...

PT-2024-14913 · Espressif · Esp32 Ipm Send

Name of the Vulnerable Software and Affected Versions: esp32 ipm send affected versions not specified Description: The issue involves a signed to unsigned conversion in the esp32 ipm send function. This could potentially lead to unexpected behavior or errors. No information is provided about the...

CVE-2023-28063

Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

Privilege escalation

Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

CVE-2023-28063

Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

CVE-2023-28063

CVE-2023-28063 affects Dell BIOS. Root cause: a signed-to-unsigned conversion error. Local authenticated admin can exploit to cause a denial of service. Dell-DSA-2023-176 and Dell KB 000214780 document the fix; Nessus plugin notes a patch is available. If exploited, impact is DoS on the affected ...

CVE-2023-28063

Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

CVE-2023-28063: Signed to Unsigned Conversion Error

Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

PT-2024-12397 · Qualcomm · Snapdragon +92

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in HLOS while converting from an authorization token to a HIDL vector. No information is provided about the estimat...