CVE-2020-26243

Nanopb memory-leak in decoding: when dynamic allocation is enabled and a oneof field contains a static submessage with a dynamic field, decoding a message that contains the submessage multiple times can leak memory in versions before 0.4.4 and 0.3.9.7. Fixes are in 0.3.9.7 and 0.4.4. Workarounds ...

Nanopb Buffer Error Vulnerability

Nanopb is a protocol buffer implementation for microprocessors by the individual developers of Nanopb. A buffer error vulnerability exists in Nanopb version 0.4.4 and versions prior to 0.3.9.7, which stems from the possibility that a decoded message in a particular format may leak memory if dynam...

CVE-2020-26243: Improper Input Validation

Nanopb is a small code-size Protocol Buffers implementation. In Nanopb before versions 0.4.4 and 0.3.9.7, decoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being...

SUSE-SU-2020:3054-1 Security update for pacemaker

This update for pacemaker fixes the following issues: Update to 2.0.4: - based: use crmexit to free qb-logging - cibsecret: don't use pssh -q option unless supported - crmerror: use gfree for a proper match - crmmon: NULL output-pointer when buffer is freed - crmresource: avoid unnecessary issus...

CVE-2018-11970

TZ App dynamic allocations not protected from XBL loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MDM9206, MDM9607, MDM9650, MDM9655, QCS605, SD 410/12, SD 636, SD 712 / SD 710 / ...

CVE-2018-11970

CVE-2018-11970 affects Qualcomm Snapdragon platforms (Auto/Compute/CE Connectivity/IOT/Industrial IOT/Mobile including MDM9xxx, QCS605, SD family) where TZ App dynamic allocations are not protected from the XBL loader. Root cause per CVE notes is unprotected dynamic allocations in the TZ app with...

Unbreakable Enterprise kernel security update

kernel-uek 4.1.12-94.3.8 - macsec: dynamically allocate space for sglist Jason A. Donenfeld Orabug: 26368162 CVE-2017-7477 - macsec: avoid heap overflow in skbtosgvec Jason A. Donenfeld Orabug: 26368162 CVE-2017-7477 - nfsd: check for oversized NFSv2/v3 arguments J. Bruce Fields Orabug: 26366988...

Adobe Flash - .SWF Out-of-Bounds Memory Read (2)

Adobe Flash - .SWF Out-of-Bounds Memory Read 2 Source: https://code.google.com/p/google-security-research/issues/detail?id=362&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id The following access violation was observed in the Adobe Flash Player plugin: 1dec.1af0: Access...