njs through 0.4.3, used in NGINX, has an out-of-bounds read in njs_lvlhsh_level_find in njs_lvlhsh.c.

...

CVE-2025-38675 xfrm: state: initialize state_ptrs earlier in xfrm_state_find

In the Linux kernel, the following vulnerability has been resolved: xfrm: state: initialize stateptrs earlier in xfrmstatefind In case of preemption, xfrmstatelookat will find a different pcpuid and look up states for that other CPU. If we matched a state for CPU2 in the statecache while the look...

CVE-2021-45761

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

The vulnerability of the H5T__bit_find() function in the HDF5 library allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the H5Tbitfind function in the HDF5 library is related to buffer overflow in the queue. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2022-35937 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.10 Description: A use-after-free issue was discovered in the ntfs attr find function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

PT-2022-7439 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the nf osf find function in the netfilter component of the Linux kernel, which incorrectly returns true on mismatch. This leads to copying an uninitialized memo...

UBUNTU-CVE-2021-33458

An issue was discovered in yasm version 1.3.0. There is a NULL pointer dereference in findcc in modules/preprocs/nasm/nasm-pp.c...

CVE-2021-45761

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

CVE-2021-45761

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

CVE-2021-45761

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

Design/Logic Flaw

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

CVE-2021-45761

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

CVE-2021-45761

CVE-2021-45761 concerns the ROPium v3.1 library, where an invalid memory address dereference in the find() function is reported. The vulnerability’s root cause is a memory access issue in an internal routine, with CVSS-3.1 indicating a HIGH impact on availability and network attack vector, and no...

CVE-2021-45761: NULL Pointer Dereference

ROPium v3.1 was discovered to contain an invalid memory address dereference via the find function...

ROPium 代码问题漏洞

Ropium is an open source library/tool to make Rop-Exploits easy by the individual developer Boyan Milanov in France. It is used to help you build Rop exploits by finding and linking to widgets. A security vulnerability exists in ROPium that stems from the discovery that ROPium v3.1 contains inval...

UBUNTU-CVE-2021-24122

When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code disclosure in some configurations. The root cause was the unexpected behaviour of...

CVE-2019-10585

Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053...

CVE-2019-10585: Integer Overflow or Wraparound

Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can lead to use after free issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8009, APQ8053...

Bento4 Null Pointer Dereference Vulnerability (CNVD-2019-28477)

Bento4 is a C++ class library and tool for reading and writing ISO-MP4 files. A null pointer dereference vulnerability exists in the AP4List:Find function in Core/Ap4List.h in Bento4 1.5.1-628 when called from Core/Ap4Movie.cpp, which can be exploited by an attacker to cause a Denial of Service...

kernel: xfs: _xfs_buf_find oops on blocks beyond the filesystem end

The xfsbuffind function in fs/xfs/xfsbuf.c in the Linux kernel before 3.7.6 does not validate block numbers, which allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact by leveraging the ability to mount an XFS filesyst...