1320 matches found
CVE-2024-49738
In writeInplace of Parcel.cpp, there is a possible out of bounds write. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-49738
Google Android is affected by an out-of-bounds write vulnerability within the writeInplace function of Parcel.cpp . This flaw arises from a failure to properly check boundaries, which could allow for local escalation of privilege without requiring additional execution privileges or user interacti...
PT-2025-2853 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to the fix Description: The issue is related to a possible out of bounds write in the writeInplace function of Parcel.cpp. This could lead to local escalation of privilege with no additional execution privileges needed...
CVE-2024-43097
A security vulnerability exists in the SkRegion.cpp component of Google Android , Firefox ESR , and Thunderbird . The flaw is caused by an integer overflow in the resizeToAtLeast function, leading to an out-of-bounds write . This can result in local privilege escalation , allowing an attacker to ...
PT-2025-49306
Name of the Vulnerable Software and Affected Versions cpp-httplib versions prior to 0.27.0 Description The software is a C++11 single-file header-only cross-platform HTTP/HTTPS library. A flaw exists where attacker-controlled HTTP headers can affect server-visible metadata, logging, and...
PT-2025-49305
Name of the Vulnerable Software and Affected Versions cpp-httplib versions prior to 0.27.0 Description The cpp-httplib library has a flaw where attacker-controlled HTTP headers can influence server metadata, logging, and authorization decisions. An attacker can inject headers such as REMOTE ADDR,...
CVE-2017-13323
In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by an out-of-bounds write in String16 of String16.cpp. An attacker can exploit the vulnerability to escalate privileges...
CVE-2017-13323: Integer Overflow or Wraparound
In String16 of String16.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2018-9421
In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2018-9412
In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation...
CVE-2018-9412: Uncontrolled Resource Consumption
In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation...
Fedora 41 : llama-cpp (2024-89c69bb9d3)
The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-89c69bb9d3 advisory. Update to b3561 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
libproxy: sending more than 102400 bytes in PAC without a Content-Length present could result in buffer overflow
A vulnerability was found in libproxy, where a buffer overflow can occur if a server serving a PAC file sends more than 102400 bytes without a Content-Length header, this flaw allows an attacker to trigger an overflow of PACHTTPBLOCKSIZE 512 bytes, potentially leading to application crashes or...
Fedora 40 : llama-cpp (2024-b07b0b41ec)
The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b07b0b41ec advisory. Update to b3561 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...
Fedora: Security Advisory (FEDORA-2024-b07b0b41ec)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability in the `FillColorRow8` function of the `utils.cpp` component in the OpenCV library, which is used for computer vision, image processing, and numerical algorithms of general purpose, open-source nature, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the FillColorRow8 function in the utils.cpp component of the OpenCV library, which is used for computer vision, image processing, and general numerical algorithms, is related to buffer overflows. Exploiting this vulnerability could allow an attacker to gain access to...
The vulnerability of the get_huffman_diff() function in the src\x3f\x3futils_patched.cpp component of the LibRaw image processing library allows a attacker to cause a service failure.
The vulnerability of the gethuffmandiff function in the src\x3f\x3futilspatched.cpp component of the LibRaw image processing library is related to reading data beyond the allowed buffer size. Exploiting this vulnerability allows an attacker to cause a service failure...
LLama cpp python binding < 0.2.88 Arbitrary Write Vulnerability
The version of llama.cpp installed on the remote host is prior to 0.2.88. It is, therefore, affected by an arbitrary write vulnerability. This vulnerability was combined with another arbitrary address read vulnerability to achieve RCE, demonstrating the significant impact of the vulnerability. No...