kernel: drm/virtio: Ensure that objs is not NULL in virtio_gpu_array_put_free()

A flaw was found in the virtio-gpu module in the Linux kernel. If the initialization fails, for example, due to a fault injection, a missing check in the virtiogpuarrayputfree function can cause a NULL pointer dereference, resulting in a denial of service...

PT-2022-36751 · Git +1 · Quickjs

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read error. Technical details about the crash include the crash type being a heap-buffer-overflow read 4,...

CVE-2022-40009

SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function growunicode at /lib/ttf.c...

CVE-2022-40009

SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function growunicode at /lib/ttf.c...

CVE-2022-40009

SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function growunicode at /lib/ttf.c...

PT-2022-33646 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.66 Description: A potential issue exists in the ieee80211 scan rx function, which may be related to a use-after-free UAF error. The actual impact and likelihood of an attack have not been confirmed...

PT-2022-25522 · Samsung · Samsung Mtower

Name of the Vulnerable Software and Affected Versions: Samsung mTower versions 0.3.0 and earlier Description: The issue allows a trusted application to trigger a Denial of Service DoS by invoking the function TEE AllocateOperation with a disturbed heap layout, related to utee cryp obj alloc. This...

PT-2025-25875

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the firmware upload functionality of the Linux kernel. Specifically, when firmware is uploaded, an instance of struct fw upload is allocated bu...

PT-2021-28604

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.36 Description A memory leak issue was discovered in the dvb media device free function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

PT-2021-28528

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.3 Description A memory leak issue was discovered in the dvb media device free function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.5 and fixe...

PT-2021-24573

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.11.20 Description: A memory leak issue was discovered in the dvb media device free function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prio...

PT-2021-24534

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.3 Description: A memory leak issue was discovered in the dvb media device free function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior...

DEBIAN-CVE-2019-20398

A NULL pointer dereference is present in libyang before v1.0-r3 in the function lysextensioninstancesfree due to a copy of unresolved extensions in lysrestrdup. Applications that use libyang to parse untrusted input yang files may crash...

CVE-2018-21028

Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function...

CVE-2018-21028

Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function...

CVE-2018-21028: Missing Release of Resource after Effective Lifetime

Boa through 0.94.14rc21 allows remote attackers to trigger a memory leak because of missing calls to the free function...

Memory misreference vulnerability in libpng 'png_image_free' function

libpng is a PNG reference library that can create, read and write PNG graphics files. A memory misreference vulnerability exists in the 'pngimagefree' function of the png.c file in libpng version 1.6.36. An attacker can exploit this vulnerability to cause a denial of service with the help of...

DEBIAN-CVE-2019-7317

pngimagefree in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because pngimagefreefunction is called under pngsafeexecute...

CVE-2018-19876

cairo 1.16.0, in cairoftapplyvariations in cairo-ft-font.c, would free memory using a free function incompatible with WebKit's fastMalloc, leading to an application crash with a "free: invalid pointer" error...

The vulnerability of the `free` function in the beep utility allows a hacker to gain access to confidential information or block the execution of arbitrary applications.

The vulnerability of the free function in the beep utility is related to the occurrence of a “race condition” when signal handlers that send signals SIGINT and SIGTERM to the free function are used. Exploiting this vulnerability can allow an attacker to gain access to confidential information or ...