CVE-2022-34326

In ambiot amb1sdk aka SDK for Ameba1 before 2022-06-20 on Realtek RTL8195AM devices before 284241d70308ff2519e40afd7b284ba892c730a3, the timer task and RX task would be locked when there are frequent and continuous Wi-Fi connection with four-way handshake failures in Soft AP mode...

Realtek RTL8195AM 安全漏洞

The Realtek RTL8195AM is an IoT microcontroller from China-based Realtek Semiconductor Realtek. A security vulnerability exists in previous versions of the Realtek RTL8195AM 284241d70308ff2519e40afd7b284ba892c730a3, which stems from the ability to lock the timer task when there are frequent and...

SUSE-SU-2022:3391-1 Security update for mariadb

This update for mariadb fixes the following issues: Update to 10.5.17: - CVE-2022-32082: Fixed assertion failure at table-getrefcount == 0 in dict0dict.cc bsc1201162. - CVE-2022-32089: Fixed segmentation fault via the component stselectlexunit::excludelevel bsc1201169. - CVE-2022-32081: Fixed...

Linux drivers/infiniband/core/ucma.c Buffer Overflow DoS

The vulnerability in the Linux operating system’s kernel component, drivers/infiniband/core/ucma.c, relates to the use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failure...

Cron Pointer Arithmetic DoS

The vulnerability of the Cron task scheduler in UNIX-like operating systems is related to pointer dereferencing errors. Exploiting this vulnerability allows a perpetrator to cause service failures...

Vim Command Line Access

The vulnerability of the Vim text editor’s command line interface is related to the lack of measures to clean input data. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Vim findfile.c Data Compromise

The vulnerability of the findfile.c component of the Vim text editor is related to the improper handling of CTR-W f when the file name is absent. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Use safetransfer/safetransferFrom instead of transfer/transferFrom in ERC20

Lines of code Vulnerability details Impact Its a good to checks the return value of token transfer using safetransfer or safetransferFrom on Openzeppelin to ensure the token revert when transfer failure. Failure to do so will cause silent failures of transfer and affect token accountng in contrac...

LibRaw rollei_load_raw() Heap Buffer Overflow DoS

The vulnerability of the rolleiloadraw function in the internal/dcrawcommon.cpp component of the LibRaw image processing library is related to writing beyond buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and caus...

Ghostscript Buffer Overflow DoS

The vulnerability of the Ghostscript document processing software lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Dpkg Dpkg::Source::Archive Confidential Data Compromise

The vulnerability of the Dpkg::Source::Archive component of the package manager Dpkg is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

GPSd Buffer Overflow DoS

The vulnerability of the tracking demon for GPS receivers, GPSd, is related to buffer overflow in the stack. Exploiting this vulnerability allows a hacker to access confidential data, compromise its integrity, and cause service failures...

NetKit-rsh Remote Execution

The vulnerability of the NetKit-rsh remote execution program lies in the fact that it only performs a superficial check on the object’s return value. Exploiting this vulnerability allows an attacker to compromise data integrity and also cause service failures through the malicious rsh server...

Linux GPU i915 Kernel Driver Data Compromise

The vulnerability of the Linux operating system’s GPU i915 kernel driver is related to the absence of a GPU TLB refresh mechanism. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Geth Ethereum DoS

The vulnerability of the Geth client library for the Ethereum protocol, written in the Go programming language, is related to the occurrence of interpretation conflicts. Exploiting this vulnerability can allow a malicious actor to cause service failures...

QEMU Buffer Overflow DoS

The vulnerability of the QEMU hardware emulation software is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service failures...

Blender Integer Overflow DoS

The vulnerability of the software used to create three-dimensional computer graphics in Blender is related to the lack of checks for values less than 0. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

JFS Heap Buffer Overflow DoS

The vulnerability of the diFree function fs/jfs/inode.c in the Journaled File System JFS of the Linux operating system is related to pointer swapping errors. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause service failures...

Samba Pointer Arithmetic DoS

The vulnerability of the Samba networking communication package is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause service failures...

Linux decode_data function Heap Buffer Overflow DoS

The vulnerability of the decodedata function in the drivers/net/hamradio/6pack.c component of the Linux operating system is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to access confidential data, compromise its integrity, and cause service...