CVE-2022-33307 Double free in Automotive

Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed...

CVE-2022-33307

CVE-2022-33307 describes a memory corruption vulnerability caused by a double-free in automotive software when a bad HLOS address is passed while mapping one of the lists. The issue is rooted in improper memory handling inside the affected automotive component (lists to be mapped) and is supporte...

CVE-2022-33227 Double free in Linux-Android

Memory corruption in Linux android due to double free while calling unregister provider after register call...

CVE-2022-33227 Double free in Linux-Android

Memory corruption in Linux android due to double free while calling unregister provider after register call...

CVE-2022-33227

CVE-2022-33227: Memory corruption in Linux-Android due to a double free when unregistering a provider after register. Affected component is Qualcomm GPS HLOS/Qualcomm chipsets under Android; root cause is a double free in the unregister path leading to memory corruption (impact: confidentiality, ...

CVE-2022-33227: Double Free

Memory corruption in Linux android due to double free while calling unregister provider after register call...

PT-2023-13310 · Qualcomm · Snapdragon +98

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a memory corruption problem caused by a double free error in automotive systems. This occurs when an invalid HLOS address for one of the lists to be mapped i...

CVE-2022-33307: Double Free

Memory Corruption due to double free in automotive when a bad HLOS address for one of the lists to be mapped is passed...

PT-2023-13798 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption caused by a double free error in Core when mapping HLOS address to a list. Recommendations: At the moment, there is no information about a newer versi...

CVE-2022-40522: Double Free

Memory corruption in Linux Networking due to double free while handling a hyp-assign...

EulerOS Virtualization 2.11.0 : sudo (EulerOS-SA-2023-2130)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that...

CVE-2022-40507: Double Free

Memory corruption due to double free in Core while mapping HLOS address to the list...

openssl: double free after calling PEM_read_bio_ex

A double-free vulnerability was found in OpenSSL's PEMreadbioex function. The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" for example, "CERTIFICATE", any header data, and the payload data. If the function succeeds, then the "nameout," "header," and "data"...

openssl: double free after calling PEM_read_bio_ex

A double-free vulnerability was found in OpenSSL's PEMreadbioex function. The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" for example, "CERTIFICATE", any header data, and the payload data. If the function succeeds, then the "nameout," "header," and "data"...

openssl: double free after calling PEM_read_bio_ex

A double-free vulnerability was found in OpenSSL's PEMreadbioex function. The function PEMreadbioex reads a PEM file from a BIO and parses and decodes the "name" for example, "CERTIFICATE", any header data, and the payload data. If the function succeeds, then the "nameout," "header," and "data"...

RHEL 7 / 8 / 9 : Red Hat JBoss Web Server 5.7.3 (RHSA-2023:3420)

The remote Redhat Enterprise Linux 7 / 8 / 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:3420 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of...

Double-Free

libwebp is vulnerable to Double Free. The vulnerability could cause memory corruption and potentially create a exploitable crash...

EulerOS Virtualization 2.9.0 : openssl (EulerOS-SA-2023-2022)

According to the versions of the openssl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext...

Ubuntu 20.04 LTS : Linux kernel (Intel IoTG) vulnerabilities (USN-6134-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6134-1 advisory. It was discovered that the Traffic-Control Index TCINDEX implementation in the Linux kernel did not properly perform filter deactivation in some...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-6132-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6132-1 advisory. Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch...