CVE-2022-38178

A flaw was found in the Bind package, where the DNSSEC verification code for the EdDSA algorithm leaks memory when there is a signature length mismatch. By spoofing the target resolver with responses that have a malformed EdDSA signature, an attacker can trigger a small memory leak, resulting in...

Memory Corruption Vulnerability in KWStudio

KWStudio is a configuration project editing software. A memory corruption vulnerability exists in KWStudio, which can be exploited by an attacker to cause the program to crash by constructing a malformed hs file...