OSV-2022-1074 Invalid-free in _dealloc

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52587 Crash type: Invalid-free Crash state: dealloc PyDECREF framedealloc...

PT-2022-36698 · Git +1 · Pillow

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type identified as Invalid-free. The crash state involves deallocation and reference counting, specifically in the deallo...

The vulnerability of the D-Bus inter-process communication system, related to memory corruption after deallocation, allows a malicious actor to trigger a service failure.

The vulnerability of the D-Bus inter-process communication mechanism is related to a memory usage error that occurs after freeing memory, caused by messages with non-sequential byte orders and Unix file descriptors. Exploiting this vulnerability can allow an attacker to cause service failures...

PT-2022-34115 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.137 Description: The issue is related to the deallocation of EPC memory in the dw pcie ep init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2022-33510 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: The issue is related to the deallocation of EPC memory in the dw pcie ep init function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

The vulnerability of the Mozilla Firefox browser, related to memory usage after deallocation, allows an attacker to execute arbitrary code.

The vulnerability of the Mozilla Firefox browser is related to the use of memory after deallocation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the kernel of iOS, macOS Mojave, tvOS, and watchOS allows a hacker to execute arbitrary code.

The vulnerability of the kernel of iOS, macOS Mojave, tvOS, and watchOS is related to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Base component in Google Chrome and Microsoft browsers allows a hacker to execute arbitrary code.

The vulnerability of the Base component in Google Chrome and Microsoft Edge relates to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

DEBIAN-CVE-2022-33981

drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating rawcmd in the rawcmdioctl function...

The vulnerability of Google Chrome’s IndexedDB function allows attackers to execute arbitrary code.

The vulnerability of the IndexedDB function in Google Chrome browser is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2019-20006

An issue was discovered in ezXML 0.8.3 through 0.8.6. The function ezxmlcharcontent puts a pointer to the internal address of a larger block as xml-txt. This is later deallocated using free, leading to a segmentation fault...

Adobe Framemaker 资源管理错误漏洞

Adobe Framemaker is the United States of America Odooby Adobe company's set of page layout software for writing and editing large or complex documents including structured documents. A memory misreference vulnerability exists in Adobe Framemaker. The vulnerability arises from a mix-up in the...

The vulnerability of GUI temperature control software lies in the use of memory after deallocation during the processing of configuration files in the *.gd1 format. This allows an attacker to execute arbitrary code.

The vulnerability of GUI temperature control software relates to the use of memory after release, during the processing of configuration files in the .gd1 format. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the Mozilla Firefox browser, related to memory usage after deallocation, allows an attacker to execute arbitrary code.

The vulnerability of the Mozilla Firefox browser is related to the use of memory after deallocation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Screen Capture function in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Screen Capture function in Google Chrome browser relates to the use of memory after deallocation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created web page from a remote location...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Omnibox, which is caused by a confusion in the program's instructions for freeing memory and can be exploited by attackers to execute arbitrary code on the system or cause a denial of service...

The vulnerability of the XHCI controllers in VMware ESXi, VMware Workstation, VMware Fusion, and the VMware Cloud Foundation virtualization platform allows a perpetrator to execute arbitrary code.

The vulnerability of the XHCI controllers in VMware ESXi, VMware Workstation, VMware Fusion, and the VMware Cloud Foundation virtualization platform relates to the use of memory after deallocation. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of Google Chrome’s Safe Browsing service allows a hacker to bypass existing security restrictions.

The vulnerability of Google Chrome’s Safe Browsing service is related to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to bypass existing security restrictions...

The vulnerability of Google Chrome’s browser extensions allows a perpetrator to access confidential information.

The vulnerability of Google Chrome’s browser extensions relates to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to gain access to confidential information through a specially created web page...

The vulnerability of the Screen Capture function in the Google Chrome browser allows a hacker to gain access to confidential information.

The vulnerability of the Screen Capture function in Google Chrome browser relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information through a specially created web page...