CVE-2024-22097

A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch ab0ee111 and 2.5.0. A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

UBUNTU-CVE-2024-23809

A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch ab0ee111. A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-22097

A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch ab0ee111 and 2.5.0. A specially crafted .vdhr file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-22097

CVE-2024-22097 : A double-free vulnerability in The Biosig Project’s libbiosig, specifically in the BrainVision Header Parsing code for the Master Branch (commit ab0ee111) and version 2.5.0. A crafted BrainVision (.vdhr) file can trigger the flaw, enabling arbitrary code execution. The vulnerabil...

CVE-2024-23809

CVE-2024-23809 affects The Biosig Project’s libbiosig 2.5.0 and the Master branch (ab0ee111). A double-free in the BrainVision ASCII Header Parsing can allow arbitrary code execution via a crafted .vdhr file. Impact: high/critical as per CVSS 3.1 (Network, no user interaction). Remediation in pub...

CVE-2023-38562

A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted set of network packets can lead to memory corruption, potentially resulting in code execution. An attacker can send a sequence of unauthenticated packets t...

CVE-2023-38562

A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted set of network packets can lead to memory corruption, potentially resulting in code execution. An attacker can send a sequence of unauthenticated packets t...

CVE-2023-38562

Weston Embedded uC-TCP-IP v3.06.01 contains a double-free vulnerability in the IP header loopback parsing functionality. A specially crafted sequence of unauthenticated network packets can trigger memory corruption, potentially enabling code execution. Talos confirms CVE-2023-38562, identifies v3...

Double Free

Overview Affected versions of this package are vulnerable to Double Free in the parsemetasequenceend function. An attacker can execute arbitrary code or cause a denial of service by causing the vulnerable application to process a malicious DICOM image. Remediation A fix was pushed into the master...

PT-2024-2159 · Libbiosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: libbiosig versions 2.5.0 and Master Branch ab0ee111 Description: A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of libbiosig. This issue is related to an error in memory deallocation. Exploitation of...

PT-2024-12738 · Unknown · Weston Embedded Uc-Tcp-Ip

Name of the Vulnerable Software and Affected Versions: Weston Embedded uC-TCP-IP version 3.06.01 Description: A double-free vulnerability exists in the IP header loopback parsing functionality. This can be triggered by a specially crafted set of network packets, leading to memory corruption and...

The Biosig Project libbiosig BrainVision ASCII Header Parsing double-free vulnerability

Talos Vulnerability Report TALOS-2024-1919 The Biosig Project libbiosig BrainVision ASCII Header Parsing double-free vulnerability February 20, 2024 CVE Number CVE-2024-23809 SUMMARY A double-free vulnerability exists in the BrainVision ASCII Header Parsing functionality of The Biosig Project...

Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2024-517)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-517 advisory. In the Linux kernel, the following vulnerability has been resolved: drm: Don't unref the same fb many times by mistake due to deadlock handling CVE-2023-52486 In the Linux kernel, the following...

PT-2024-19204 · Biosig +1 · Libbiosig +1

Name of the Vulnerable Software and Affected Versions: The Biosig Project libbiosig versions 2.5.0 and Master Branch ab0ee111 Description: A double-free vulnerability exists in the BrainVision Header Parsing functionality. This can be triggered by a specially crafted .vdhr file, potentially leadi...

The Biosig Project libbiosig BrainVision Header Parsing double-free vulnerability

Talos Vulnerability Report TALOS-2024-1917 The Biosig Project libbiosig BrainVision Header Parsing double-free vulnerability February 20, 2024 CVE Number CVE-2024-22097 SUMMARY A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Maste...

Weston Embedded uC-TCP-IP IP header loopback parsing double-free vulnerability

Talos Vulnerability Report TALOS-2023-1829 Weston Embedded uC-TCP-IP IP header loopback parsing double-free vulnerability February 20, 2024 CVE Number CVE-2023-38562 SUMMARY A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A...

PT-2024-4086 · Amazon · Amazon Linux Kernel

Name of the Vulnerable Software and Affected Versions: Amazon Linux kernel affected versions not specified Description: The issue is related to a flaw in the inet sock destruct function of the net/ipv4/af inet.c component in the IPv4 Networking Stack of the Amazon Linux kernel, which is associate...

PT-2024-8047 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double free, potentially leading to code execution in the current process. Thi...

Siemens SINEC NMS

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Ubuntu 16.04 LTS / 18.04 LTS / 22.04 LTS : UltraJSON vulnerabilities (USN-6629-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6629-1 advisory. It was discovered that UltraJSON incorrectly handled certain input with a large amount of indentation. An attacker could possibly...