PT-2022-7258 · Libde265 +3 · Libde265 +3

Name of the Vulnerable Software and Affected Versions: libde265 version 1.0.8 Description: The issue is related to a heap-buffer-overflow vulnerability via the put unweighted pred 16 fallback function in fallback-motion.cc. This allows attackers to cause a Denial of Service DoS via a crafted vide...

PT-2022-5396 · Exiv2 +1 · Exiv2 +1

Name of the Vulnerable Software and Affected Versions: Exiv2 affected versions not specified Description: The issue is related to an integer overflow in the QuickTimeVideo::userDataDecoder function of the quicktimevideo.cpp file in the QuickTime Video Handler component. This can be exploited...

PT-2022-34780 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.10 through v5.19.11 Description: The issue is related to a null pointer dereference in the efx hard start xmit function. This problem was introduced in version v5.10 and is fixed in version v5.19.12. The actual impact...

PT-2022-36664 · Git +1 · Suricata

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a null-dereference read crash. The crash involves several components, including AlertJson, JsonAlertLogger, and OutputPacketLog. ...

PT-2022-19884 · H5P +1 · H5P +1

Name of the Vulnerable Software and Affected Versions: H5P affected versions not specified Description: The issue is related to a CSRF risk when enabling and disabling installed H5P libraries, as the necessary token to prevent this risk was not included. Recommendations: At the moment, there is n...

PT-2022-37319 · Git +1 · Skia

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the SkPath::Iter::next function, SkStroke::strokePat...

PT-2022-37327 · Git +1 · Skia

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the GrTriangulator class, specifically in the...

PT-2022-24688 · Unknown · Smart Evision

Name of the Vulnerable Software and Affected Versions: Smart eVision affected versions not specified Description: The issue is related to a path traversal vulnerability in the Report API function. This vulnerability is caused by insufficient filtering for special characters in URLs, allowing a...

PT-2022-25671 · Openssl +1 · Openssl +1

Name of the Vulnerable Software and Affected Versions: Windscribe affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order...

PT-2024-8453 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a null pointer dereference in the efx hard start xmit function. This can occur when trying to get the channel from the tx queue variable, which is wrong because...

GSD-2022-1005625 wifi: wil6210: debugfs: fix info leak in wil_write_file_wmi()

wifi: wil6210: debugfs: fix info leak in wilwritefilewmi This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-33860 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.15.60 Description: A potential security issue exists due to an out of bounds access in the get nodes function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Lin...

PT-2022-34000 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.15 through 5.10.139 Description: The issue concerns a locking problem in the rxrpc's sendmsg function. The actual impact and potential for attack have not been proven yet. Recommendations: For Linux Kernel versions 4.1...

PT-2022-25249 · Xstream · Xstream

Name of the Vulnerable Software and Affected Versions: Xstream affected versions not specified Description: The issue allows an attacker to cause a denial of service attack by supplying content that causes the parser to crash by stack overflow when the parser is running on user-supplied input. Th...

PT-2022-33295 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.19.5 Description: The issue concerns space cache corruption and potential double allocations in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

PT-2022-33524 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.12 through v5.19.1 Description: A refcount leak was discovered in the mc pcie init irq domains function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...

PT-2024-11769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null pointer dereference in the efx hard start xmit function within the sfc/siena component of the Linux kernel. This could potentially lead to a null pointer...

PT-2022-4939 · Isc +10 · Bind +10

Name of the Vulnerable Software and Affected Versions: BIND versions affected versions not specified Description: The issue is related to a flaw in the resolver code, allowing an attacker to cause the named service to crash by sending specific queries. This can lead to a denial of service DoS...

PT-2022-5737 · Microsoft · Odbc Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft ODBC Driver. It allows a remote attacker to execute arbitrary code, potentially impacting the system...

PT-2022-5615 · Microsoft · Windows Dpapi +1

Name of the Vulnerable Software and Affected Versions: Windows DPAPI affected versions not specified Description: The issue is related to a lack of protection for sensitive data in the Windows DPAPI component, allowing an attacker to disclose protected information. This can enable attackers to...