CVE-2020-1819: Out-of-bounds Read

There are multiple out of bounds OOB read vulnerabilities in the implementation of the Common Open Policy Service COPS protocol of some Huawei products. The specific decoding function may occur out-of-bounds read when processes an incoming data packet. Successful exploit of these vulnerabilities...

Huawei Myna 安全漏洞

Huawei Myna is a smart speaker from Chinese company Huawei Huawei. Huawei Myna suffers from an Input Validation Error vulnerability that originates from a module that does not adequately integrity check inputs in certain scenarios. An attacker can exploit this vulnerability to affect the normal...

The Worst Hacks of 2024

From Chinese cyberspies breaching US telecoms to ruthless ransomware gangs disrupting health care for millions of people, 2024 saw some of the worst hacks, breaches, and data leaks ever...

dwmac-rk Kernel DoS

The vulnerability of the dwmac-rk component in the Linux operating system is related to errors in reading beyond the boundary in the rkgmacsetup function. Exploiting this vulnerability can allow an attacker to cause a service failure...

ALSA Kernel Component DoS

The vulnerability of the ALSA kernel component in Linux operating systems is related to improper input validation in the function sndtimerstart1. Exploiting this vulnerability can allow an attacker to cause a service failure...

mpg123 Heap Buffer Overflow DoS

The vulnerability of the console-based MPEG audio player mpg123 lies in its ability to write beyond the allocated memory boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause system failures...

scsidebug Component DoS

The vulnerability of the scsidebug component in the Linux operating system’s kernel is related to read misses beyond the boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux m68k Kernel DoS

The vulnerability of the m68k kernel component in the Linux operating system is related to improper locking mechanisms. Exploiting this vulnerability can allow an attacker to cause a service failure...

vhost library Heap Buffer Overflow DoS

The vulnerability of the rterawcksummbuf function in the vhost library, which is part of the DPDK toolkit for fast packet processing, stems from a failure to properly manage the output beyond the buffer in memory when calculating the checksum. Exploiting this vulnerability could allow an attacker...

Linux sch_cake Heap Buffer Overflow Privilege Escalation

The vulnerability of the cakedestroy function in the schcake component of the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges or cause service interruptions...

D-Link DAP-1513 DoS

The vulnerability of the /bin/webs file in D-Link DAP-1513 wireless access points is related to errors in pointer redirection due to incorrect checking of HTTP request formats. Exploiting this vulnerability allows a remote attacker to cause service interruptions by sending specially crafted HTTP...

Google Chrome Microsoft Edge Script Execution DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the execution of operations beyond the buffer in memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...

CVE-2022-32144

There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerability may lead to service abnormal. Vulnerability ID: HWPSIRT-2022-76192 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2022-32144...

CVE-2022-32204

There is an improper input verification vulnerability in Huawei printer product. Successful exploitation of this vulnerability may cause service abnormal. Vulnerability ID: HWPSIRT-2022-87185 This vulnerability has been assigned a Common Vulnerabilities and Exposures CVE ID: CVE-2022-32204...

Gstreamer qtdemux_parse_sbgp DoS

The vulnerability of the qtdemuxparsesbgp function in the Gstreamer multimedia framework is related to the use of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Gstreamer parse_ds64 DoS

The vulnerability of the parseds64 function in the Gstreamer multimedia framework is related to reading data beyond the allowable range of memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Gstreamer Function Heap Buffer Overflow DoS

The vulnerability of the gstgdkpixbufdecFlush function in the Gstreamer multimedia framework is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Gstreamer qtdemux_parse_container DoS

The vulnerability of the qtdemuxparsecontainer function in the Gstreamer multimedia framework is related to reading data beyond the permitted range in memory during the execution of this function. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

Ruijie Reyee OS Resource Leak

The vulnerability of the Ruijie Reyee OS is related to the premature release of resources during its operation. Exploiting this vulnerability allows a remote attacker to interrupt a legitimate user’s session and cause service failures...

CVE-2024-11144

CVE-2024-11144 affects LightFTP server (notably version 2.3 per CNNVD/NVD entries) with a lack of thread safety that allows an anonymous remote attacker to crash the FTP service by sending anomalous data. Consequences include FTP service unavailability, potential incomplete file transfers and dat...