Siemens SIMATIC Devices Improper Input Validation (CVE-2023-51767)

OpenSSH through 9.6, when common types of DRAM are used, might allow row hammer attacks for authentication bypass because the integer value of authenticated in mmanswerauthpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim...

EUVD-2025-35068

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix warning in smcrxsplice when calling getpage smcloregisterdmb allocates DMB buffers with kzalloc, which are later passed to getpage in smcrxsplice. Since kmalloc memory is not page-backed, this triggers WARNONONCE in...

The vulnerability of the Open Asset Import Library’s 3D model import library (Assimp) lies in buffer overflows in dynamic memory, allowing attackers to access confidential information without authorization.

The vulnerability of the Open Asset Import Library Assimp, a library for importing 3D models, is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential information...

EUVD-2017-9404

Malware in sbrugna...

EUVD-2023-30081

Malicious code in bioql PyPI...

expat -- dynamic memory allocations issue

expat security advisory: libexpat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing...

CVE-2025-6202

CVE-2025-6202 Phoenix Rowhammer is a hardware-level vulnerability in SK Hynix DDR5 modules (manufactured 2021–2024) that allows a local attacker to trigger memory row bit flips. The issue bypasses protection such as TRR, exploiting defined “blind zones” (e.g., after 128 and 2,608 tREFI updates) w...

CVE-2023-31325

Improper isolation of shared resources on System-on-a-chip SOC could a privileged attacker to tamper with the contents of the PSP reserved DRAM region potentially resulting in loss of confidentiality and integrity...

The vulnerability of the cw_stad demon in FortiOS operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the cwstad module in FortiOS operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

ROS-20250806-01

Squid proxy server vulnerability is related to buffer overflow in dynamic memory when processing URN headers. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code by sending specially crafted HTTP requests. arbitrary code by sending specially crafted HTTP...

The vulnerability of Tenda AC10 router microprogramming software, related to buffer overflow in dynamic memory, allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of Tenda AC10 microprogramming software lies in the overflow of the buffer in the dynamic memory during the processing of the device1D parameter in the /goform/RequestsProcessLaid file. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service...

The vulnerability of the Bluetooth driver’s firmware microprogramming software of MediaTek’s chips allows attackers to enhance their privileges.

The vulnerability of the Bluetooth driver’s firmware microprogramming software for MediaTek is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the riscv architecture cpuopssbi module that uses dynamically allocated memory to invalidate a physical...

The vulnerability of the KVM switch display microprogramming system ATEN CL5708IM lies in buffer overflow in dynamic memory, allowing a malicious actor to cause malfunctions during maintenance operations.

The vulnerability of the KVM switch display microprogramming system of ATEN CL5708IM is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

The vulnerability of the Graphics component in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Graphics component in Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Vulnerability of Microsoft Office packages, 365 Apps for Enterprise, and Microsoft PowerPoint presentation software, related to buffer overflow in dynamic memory, allowing attackers to execute arbitrary code.

The vulnerabilities of Microsoft Office packages, 365 Apps for Enterprise, and Microsoft PowerPoint presentation software are related to buffer overflows in dynamic memory. Exploiting these vulnerabilities can allow attackers to execute arbitrary code...

The vulnerability of the Win32k.sys component in Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the Windows Media component in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Windows Media component in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Microsoft SQL Server database management system, related to buffer overflows in dynamic memory, allows an attacker to execute arbitrary code.

The vulnerability of the Microsoft SQL Server database management system is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the Microsoft Office suite relates to buffer overflows in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to overflowing buffers in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...