MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company. MediaTek suffers from a buffer error vulnerability that originates from an out-of-bounds write in the hevc decoder due to a lack of bounds checking, which could result in a local privilege escalation affecting the following...

PT-2023-13091 · Unknown · Hevc Decoder

Name of the Vulnerable Software and Affected Versions: hevc decoder affected versions not specified Description: The issue is related to a missing bounds check in the hevc decoder, which could lead to a possible out of bounds write. This could result in local escalation of privilege, with System...

CVE-2022-32637: Out-of-bounds Write

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07491374; Issue ID: ALPS07491374...

CVE-2022-32637

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07491374; Issue ID: ALPS07491374...

CVE-2022-32637

CVE-2022-32637 affects the hevc decoder (MediaTek components) with a missing bounds check causing an out-of-bounds write. This can enable local privilege escalation to System level with no user interaction required. The patch identified is ALPS07491374 (Issue ID ALPS07491374). Exploitation detail...

CVE-2022-32637

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07491374; Issue ID: ALPS07491374...

ASB-A-257860658

In hevc decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Fedora 36 : python3.6 (2022-bcf089dd07)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-bcf089dd07 advisory. Security fix for CVE-2022-45061: CPU denial of service via inefficient IDNA decoder Tenable has extracted the preceding description block directly from the...

freerdp -- multiple vulnerabilities

FreeRDP reports: GHSA-5w4j-mrrh-jjrm: Out of bound read in zgfx decoder. GHSA-99cm-4gw7-c8jh: Undefined behaviour in zgfx decoder. GHSA-387j-8j96-7q35: Division by zero in urbdrc channel. GHSA-mvxm-wfj2-5fvh: Missing length validation in urbdrc channel. GHSA-qfq2-82qr-7f4j: Heap buffer overflow i...

Fedora 36 : python3-docs / python3.10 (2022-e699dd5247)

The remote Fedora 36 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2022-e699dd5247 advisory. Update to 3.10.9 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 36 : poppler (2022-f79aa2bae9)

The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-f79aa2bae9 advisory. Security fix for CVE-2022-38784 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...

Fedora 36 : python3.8 (2022-6d51289820)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-6d51289820 advisory. Update 3.8.16 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this issu...

Fedora 35 : python3.8 (2022-e1ce71ff40)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-e1ce71ff40 advisory. Update to 3.8.16 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 36 : mingw-python3 (2022-45d2cfdfa4)

The remote Fedora 36 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-45d2cfdfa4 advisory. Backport patch for CVE-2022-45061. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

Fedora 35 : python3.9 (2022-6f4e6120d7)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-6f4e6120d7 advisory. Update to 3.9.16 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 35 : python3.7 (2022-fdb2739feb)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-fdb2739feb advisory. Update to 3.7.16 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

Fedora 35 : python3.11 (2022-e6d0495206)

The remote Fedora 35 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-e6d0495206 advisory. Update to 3.11.1 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

pjsip:fuzz-stun: Heap-buffer-overflow in decode_errcode_attr

Project: https://github.com/pjsip/pjproject.git Detailed Report: https://oss-fuzz.com/testcase?key=5114388095041536 Project: pjsip Fuzzing Engine: libFuzzer Fuzz Target: fuzz-stun Job Type: libfuzzerasanpjsip Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60300000014a...

Python DoS Vulnerability (Oct 2022) - Linux

Python is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python";...

PT-2024-11781 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null pointer dereference in the cxl/region component of the Linux kernel. This occurs when the cxl region decode reset function is called, and the -reset...