RUSTSEC-2023-0017 `maligned::align_first` causes incorrect deallocation

maligned::alignfirst manually allocates with an alignment larger than T, and then uses Vec::fromrawparts on that allocation to get a Vec. GlobalAlloc::dealloc requires that the layout argument must be the same layout that was used to allocate that block of memory. When deallocating, Box and Vec m...

`maligned::align_first` causes incorrect deallocation

maligned::alignfirst manually allocates with an alignment larger than T, and then uses Vec::fromrawparts on that allocation to get a Vec. GlobalAlloc::dealloc requires that the layout argument must be the same layout that was used to allocate that block of memory. When deallocating, Box and Vec m...

SUSE CVE-2016-5043

The dwarfdealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted DWARF section...

PT-2023-34562

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description A memory leak issue exists in the wifi ath9k driver, specifically in the ath9k hif usb dealloc tx urbs function. This issue was introduced in Linux Kernel version v5.10 and is fixed in versi...

PT-2023-34714

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.337 Description A memory leak issue exists in the ath9k hif usb dealloc tx urbs function, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2023-34260

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description A memory leak issue exists in the ath9k hif usb dealloc tx urbs function, potentially leading to security vulnerabilities. The actual impact and attack plausibility have not yet been proven...

PT-2022-37069

Name of the Vulnerable Software and Affected Versions libvp9 affected versions not specified Description The issue is related to a crash caused by a check failure in the libvp9 library. The crash occurs in the vp9 loop filter dealloc function, which is called by vp9 decoder remove. This suggests ...

CVE-2022-26181

Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligneddealloc:src/lepton/bitops.cc:108...

UBUNTU-CVE-2022-26181

Dropbox Lepton v1.2.1-185-g2a08b77 was discovered to contain a heap-buffer-overflow in the function aligneddealloc:src/lepton/bitops.cc:108...

Dropbox Lepton 缓冲区错误漏洞

Dropbox Lepton is a set of tools for lossless compression of JPEG format files. A security vulnerability exists in Dropbox Lepton v1.2.1-185-g2a08b77, which stems from a heap buffer overflow contained in the function aligneddealloc:src/lepton/bitops.cc:108...

PT-2022-17709

Name of the Vulnerable Software and Affected Versions Dropbox Lepton version 1.2.1-185-g2a08b77 Description A heap-buffer-overflow was discovered in the function aligned dealloc at src/lepton/bitops.cc:108. This issue affects the specified version of Dropbox Lepton. Recommendations For Dropbox...

CVE-2021-37692

TensorFlow is an end-to-end open source platform for machine learning. In affected versions under certain conditions, Go code can trigger a segfault in string deallocation. For string tensors, C.TFTStringDealloc is called during garbage collection within a finalizer function. However, tensor...

UBUNTU-CVE-2016-5043

The dwarfdealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted DWARF section...

DEBIAN-CVE-2016-5043

The dwarfdealloc function in libdwarf before 20160923 allows remote attackers to cause a denial of service out-of-bounds read and crash via a crafted DWARF section...

PT-2017-8670

Name of the Vulnerable Software and Affected Versions libdwarf versions prior to 20160923 Description The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and crash, via a crafted DWARF section. This is due to a problem in the dwarf dealloc function...

libdwarf 'dwarf_dealloc()' function denial of service vulnerability

libdwarf is a set of tools for reading and writing DWARF2 debugging information. A security vulnerability exists in the 'dwarfdealloc' function of libdwarf, which stems from the program failing to check the 'DwarfPtr' space parameter. An attacker could use this vulnerability to cause a denial of...