41 matches found
CVE-2024-35860 bpf: support deferring bpf_link dealloc to after RCU grace period
In the Linux kernel, the following vulnerability has been resolved: bpf: support deferring bpflink dealloc to after RCU grace period BPF link for some program types is passed as a "context" which can be used by those BPF programs to look up additional information. E.g., for multi-kprobes and...
The vulnerability of the iwl_dealloc_ucode() function in the driver code `drivers/net/wireless/intel/iwlwifi/iwl-drv.c` of the iwlwifi kernel in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the iwldeallocucode function in the drivers/net/wireless/intel/iwlwifi/iwl-drv.c file of the iwlwifi driver for the Linux operating system is related to the reclamation of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2024-26912 drm/nouveau: fix several DMA buffer leaks
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix several DMA buffer leaks Nouveau manages GSP-RM DMA buffers with nvkmgspmem objects. Several of these buffers are never dealloced. Some of them can be deallocated right after GSP-RM is initialized, but the rest...
CVE-2023-6879
Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...
DEBIAN-CVE-2023-6879
Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1looprestorationdealloc...
CVE-2023-45510
tsMuxer version git-2539d07 was discovered to contain an alloc-dealloc-mismatch operator new vs operator delete error...
Code injection
tsMuxer version git-2539d07 was discovered to contain an alloc-dealloc-mismatch operator new vs operator delete error...
CVE-2023-45510
tsMuxer (git-2539d07) is reported to contain an alloc-dealloc-mismatch (operator new[] vs operator delete) error. Multiple sources (Red Hat CVE, NVD, OSV, CVE lists, CNNVD, PT-2023-29566) corroborate this description for tsMuxer. Public details do not specify affected platforms beyond the git com...
CVE-2023-45510
tsMuxer version git-2539d07 was discovered to contain an alloc-dealloc-mismatch operator new vs operator delete error...
CVE-2023-45510
tsMuxer version git-2539d07 was discovered to contain an alloc-dealloc-mismatch operator new vs operator delete error...
PT-2023-36030 · Git +1 · Libdwarf
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-use-after-free READ 2 crash type. The crash state involves functions such as dwarf dealloc, dwarf fde destructor, and...
RUSTSEC-2023-0017 `maligned::align_first` causes incorrect deallocation
maligned::alignfirst manually allocates with an alignment larger than T, and then uses Vec::fromrawparts on that allocation to get a Vec. GlobalAlloc::dealloc requires that the layout argument must be the same layout that was used to allocate that block of memory. When deallocating, Box and Vec m...
`maligned::align_first` causes incorrect deallocation
maligned::alignfirst manually allocates with an alignment larger than T, and then uses Vec::fromrawparts on that allocation to get a Vec. GlobalAlloc::dealloc requires that the layout argument must be the same layout that was used to allocate that block of memory. When deallocating, Box and Vec m...
SUSE CVE-2016-5043
The dwarfdealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted DWARF section...
CVE-2022-26181
Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligneddealloc:src/lepton/bitops.cc:108...
UBUNTU-CVE-2022-26181
Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligneddealloc:src/lepton/bitops.cc:108...
Dropbox Lepton 缓冲区错误漏洞
Dropbox Lepton is a set of tools for lossless compression of JPEG format files. A security vulnerability exists in Dropbox Lepton v1.2.1-185-g2a08b77, which stems from a heap buffer overflow contained in the function aligneddealloc:src/lepton/bitops.cc:108...
CVE-2021-37692
TensorFlow is an end-to-end open source platform for machine learning. In affected versions under certain conditions, Go code can trigger a segfault in string deallocation. For string tensors, C.TFTStringDealloc is called during garbage collection within a finalizer function. However, tensor...