Eclipse Cyclone DDS 缓冲区错误漏洞

Eclipse Cyclone DDS is a very high performance and robust open source DDS implementation from the Eclipse Foundation. A security vulnerability exists in Eclipse Cyclone DDS Project v0.1.0 that can cause the DDS user server to crash...

Mediatek 芯片缓冲区错误漏洞

Mediatek chips are smartphone chipsets from China's MediaTek Mediatek. There is no information about this vulnerability yet, so stay tuned to CNNVD or vendor announcements...

SUSE-SU-2021:2765-1 Security update for libmspack

This update for libmspack fixes the following issues: - CVE-2018-14681: Bad KWAJ file header extensions could cause a one or two byte overwrite. bsc1103032 - CVE-2018-14682: There is an off-by-one error in the TOLOWER macro for CHM decompression. bsc1103032...

Huawei HarmonyOS 缓冲区错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. Huawei HarmonyOS has a security vulnerability that could be exploited by attackers to execute arbitrary code on the system...

CVE-2021-22398

There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations. Affected product versions...

Qualcomm 芯片数字错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. A numeric error vulnerability exists in Qualcomm chips, please...

多款Qualcomm产品缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. A security vulnerability exists in Qualcomm chips, please follow...

Apport input validation error vulnerability

Apport is a toolkit for collecting and feeding back error messages information that the operating system considers useful when an application crashes. Apport is vulnerable to input validation errors, which can be exploited by local attackers to escalate privileges and run arbitrary code...

Adobe Media Encoder 缓冲区错误漏洞

Adobe Media Encoder, a video and audio encoding application, is vulnerable in Adobe Media Encoder 15.2 and earlier versions. An attacker could exploit the vulnerability to execute arbitrary code...

NVIDIA Windows GPU Display Driver 缓冲区错误漏洞

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA Corporation for the Windows platform. The NVIDIA Windows GPU Display Driver suffers from a buffer error vulnerability that originates from a failure to properly handle memory boundaries at the kernel...

Nvidia GPU Display Driver 缓冲区错误漏洞

The Nvidia GPU Display Driver is a driver software from Nvidia Corporation that is used for interactive support of graphics card display modules in operating systems. A buffer error vulnerability exists in the NVIDIA GPU Display Driver for Windows and Linux-based platforms, which originates from ...

Unicorn Engine 缓冲区错误漏洞

Unicorn Engine is a software application. A lightweight, multi-platform, multi-architecture CPU simulator framework based on QEMU. A security vulnerability exists in Unicorn Engine 1.0.2, please follow the vendor's homepage for details of this vulnerability...

Libvips numeric error vulnerability

libvips is an open source 2D image processing library. libvips version 8.10.5 is vulnerable due to a dezero vulnerability in function "vipseyepoint, eye.cL83" and function "vipsmaskpoint, mask.cL85". No detailed vulnerability details are available at this time...

Apache Ant Resource Management Error Vulnerability (CNVD-2021-51427)

Apache Ant is the United States Apache Apache Foundation's set of automation tools for Java software development . The tool is mainly used for software compilation, testing and deployment and so on. Apache Ant suffers from a resource management error vulnerability that stems from the application...

QuickJS 缓冲区错误漏洞

QuickJS is a small and embeddable Javascript engine. QuickJS suffers from a buffer error vulnerability that stems from a buffer overflow vulnerability in QuickJS .c in QuickJS. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

Elasticsearch Resource Management Error Vulnerability

Elasticsearch is a set of open source distributed RESTful search engine built on Lucene from the Dutch company Elasticsearch. The product is mainly used in cloud computing and supports data indexing using JSON over HTTP.Elasticsearch has a resource management error vulnerability that stems from...

MikroTik RouterOS 缓冲区错误漏洞

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. A buffer error vulnerability exists in Mikrotik RouterOs, which stems from the product's /nova/bin/diskd process...

GitLab Access Control Error Vulnerability (CNVD-2021-49038)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects. An access control error vulnerability exists in GitLab. An attacker can exploit this vulnerability ...

Qualcomm 芯片缓冲区错误漏洞

The Qualcomm MDM9640 and others are products of Qualcomm Incorporated, USA.The MDM9640 is a central processing unit CPU product.The MDM9650 is a central processing unit CPU product.The MSM8996AU is a central processing unit CPU product.The MSM8996AU is a central processing unit CPU product.The...

Autodesk Design Review 缓冲区错误漏洞

Autodesk Design Review ADR is a suite of AutoCAD drafting software assist software from Autodesk, Inc. The software supports viewing, marking, measuring, printing, and tracking changes to 2D and 3D design files.Autodesk Design Review is vulnerable to a buffer error vulnerability that could be...