16368 matches found
CVE-2022-40515 Double free in Video
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms...
CVE-2022-40515: Double Free
Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms...
CVE-2023-20625
In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628532; Issue ID: ALPS07628532...
CVE-2023-20625
CVE-2023-20625 affects the adsp component and is caused by a race condition leading to a double free. This can allow local privilege escalation with SYSTEM-level execution privileges, and exploitation does not require user interaction. The entry lists patch ALPS07628532 (Issue ID ALPS07628532) as...
CVE-2023-20625: Improper Synchronization
In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628532; Issue ID: ALPS07628532...
PT-2023-13804 · Qualcomm · Snapdragon +141
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption in a video component due to a double free error that occurs when playing a 3gp clip containing invalid metadata...
CVE-2023-20625
In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628532; Issue ID: ALPS07628532...
AZL-25607 CVE-2022-3707 affecting package hyperv-daemons for versions less than 5.15.102.1-1
A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intelgvtdmamapguestpage function. This issue could allow a local user to crash the system...
AZL-25634 CVE-2022-3707 affecting package kernel for versions less than 5.15.107.1-2
A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intelgvtdmamapguestpage function. This issue could allow a local user to crash the system...
Sudo before 1.9.13p2 has a double free in the per-command chroot feature.
...
CVE-2022-3707
CVE-2022-3707 is a double-free in the Intel GVT-g graphics support within the Linux kernel, specifically in the intel_gvt_dma_map_guest_page path. The flaw can be triggered by a local attacker and may crash the system due to memory corruption. Connected advisories confirm the issue affecting the ...
Tenable Nessus <= 10.4.2 Multiple Vulnerabilities (TNS-2023-09)
According to its self-reported version, the Tenable Nessus application running on the remote host is 10.4.2 or earlier. It is, therefore, affected by multiple vulnerabilities in OpenSSL prior to version 3.0.8, spin.js prior to version 2.3.2, and datatables.net prior to version 1.13.2: - An attack...
CVE-2022-3707
A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intelgvtdmamapguestpage function. This issue could allow a local user to crash the system...
CVE-2022-3707: Improper Cleanup on Thrown Exception
A double-free memory flaw was found in the Linux kernel. The Intel GVT-g graphics driver triggers VGA card system resource overload, causing a fail in the intelgvtdmamapguestpage function. This issue could allow a local user to crash the system...
Tenable SecurityCenter 6.0.0 Multiple Vulnerabilities (TNS-2023-07)
According to its self-reported version, the Tenable SecurityCenter application installed on the remote host is running 6.0.0 and is therefore affected by multiple vulnerabilities in OpenSSL prior to version 3.0.8: - An attacker that had observed a genuine connection between a client and a server...
In the Linux kernel before 6.1.13 there is a double free in net/mpls/af_mpls.c upon an allocation failure (for registering the sysctl table under a new location) during the renaming of a device.
...
SUSE CVE-2023-27320
Sudo before 1.9.13p2 has a double free in the per-command chroot feature...
Ubuntu 22.04 LTS : Linux kernel (OEM) vulnerabilities (USN-5915-1)
The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5915-1 advisory. It was discovered that the Upper Level Protocol ULP subsystem in the Linux kernel did not properly handle sockets entering the LISTEN state in certain...
Fedora 37 : sudo (2023-d2d6ec2a32)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-d2d6ec2a32 advisory. Security fix for CVE-2023-27320 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus h...
