20019 matches found
CVE-2024-55918
CVE-2024-55918 affects the Perl package Graphics::ColorNames prior to version 3.2.0. Affected: module/filename ambiguity in ColorNames can allow HTML injection if an attacker can create a file in the current working directory. Remediation: upgrade to 3.2.0 or later (per PT-2024-36610). Public sou...
PT-2024-32875 · Imagination Technologies · Graphics Ddk
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows software installed and run as a non-privileged user to make GPU system calls, potentially reading and writing freed physical memory from the GPU. This could lead to...
WordPress SVG Shortcode plugin <= 1.0.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload vulnerability
Authenticated Author+ Stored Cross-Site Scripting via SVG Upload vulnerability discovered by Pierre Rudloff in WordPress Plugin SVG Shortcode versions = 1.0.1...
USN-7155-1 linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; -...
drm/amdgpu: add missing size check in amdgpu_debugfs_gprwave_read()
...
drm/amd: Guard against bad data for ATIF ACPI method
...
drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported
...
drm/radeon: Fix encoder->possible_clones
...
fbdev: sisfb: Fix strbuf array overflow
...
drm/vboxvideo: Replace fake VLA at end of vbva_mouse_pointer_shape with real VLA
...
The vulnerability of the NVIDIA GPU Display Driver software driver allows a hacker to enhance their privileges and execute arbitrary code.
The vulnerability of the NVIDIA GPU Display Driver software driver is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...
The vulnerability of DRM/VMWGFX components in Linux operating systems allows attackers to increase their privileges within the system.
The vulnerability of DRM/VMWGFX components in Linux operating systems is related to memory management errors after freeing memory. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...
The vulnerability of the Graphics component in Microsoft Office and Office 365 allows a hacker to execute arbitrary code.
The vulnerability of the Graphics component in Microsoft Office and Office 365 programs is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Autodesk FBX-SDK 缓冲区错误漏洞
Autodesk FBX-SDK is a C++ software development platform and API toolkit from Autodesk, Inc. that is primarily used to convert existing content to FBX format. A security vulnerability exists in Autodesk FBX-SDK that stems from a possible forced out-of-bounds write vulnerability when Autodesk FBX S...
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues: Update to version 20241128 git commit ea71da6f0690: i915: Update Xe2LPD DMC to v2.24 cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops iwlwifi: add Bz-gf FW for core89-91 release amdgpu: update smu 13.0.10 firmwar...
CLSA-2024-1733483766 Fix of 9 CVEs
CVE-url: https://ubuntu.com/security/CVE-2024-49992 - drm: remove all control node code - drm: add managed resources tied to drmdevice - drm: Set finalkfree in drmdevalloc - drm/plane: add drmmuniversalplanealloc - drm: Handle dev-unique with drmm - drm: Use drmm for drmdevinit cleanup - drm:...
MAL-2024-11206 Malicious code in ba-graphics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d25fb780dcd8c598565114379e013b220e0a17c1b3586acce60a4aa0e0306c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ba-graphics (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d25fb780dcd8c598565114379e013b220e0a17c1b3586acce60a4aa0e0306c8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
SUSE CVE-2024-53132
In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa: Fix "Missing outer runtime PM protection" warning Fix the following drmWARN: 953.586396 xe 0000:00:02.0: drm Missing outer runtime PM protection ... 953.587090 ? xepmruntimegetnoresume+0x8d/0xa0 xe 953.587208...
The vulnerability of DRM/VMWGFX components in Linux operating systems allows a perpetrator to trigger a service failure.
The vulnerability of DRM/VMWGFX components in Linux operating systems is related to the operation of writing data beyond the buffer in memory within the vmweventfenceactioncreate function. Exploiting this vulnerability can allow an attacker to cause a service failure...