CVE-2020-15204

In eager mode, TensorFlow before versions 1.15.4, 2.0.3, 2.1.2, 2.2.1 and 2.3.1 does not set the session state. Hence, calling tf.rawops.GetSessionHandle or tf.rawops.GetSessionHandleV2 results in a null pointer dereference In linked snippet, in eager mode, ctx-sessionstate returns nullptr. Since...

GHSA-Q8GV-Q7WR-9JF8 Segfault in Tensorflow

Impact In eager mode, TensorFlow does not set the session state. Hence, calling tf.rawops.GetSessionHandle or tf.rawops.GetSessionHandleV2 results in a null pointer dereference:...

An issue was discovered in singledocparser.cpp in yaml-cpp (aka LibYaml-C++) 0.6.2. Stack Exhaustion occurs in YAML::SingleDocParser and there is a stack consumption problem caused by recursive stack frames: HandleCompactMap HandleMap HandleFlowSequence HandleSequence HandleNode. Remote attackers could leverage this vulnerability to cause a denial-of-service via a cpp file.

...

A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest under specific conditions can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. Due to the nature of the flaw privilege escalation cannot be fully ruled out. Versions from v4.16 and newer are vulnerable.

...

The SingleDocParser::HandleFlowSequence function in yaml-cpp (aka LibYaml-C++) 0.6.2 allows remote attackers to cause a denial of service (stack consumption and application crash) via a crafted YAML file.

...

Accusoft ImageGear Memory Corruption Vulnerability

Accusoft ImageGear is a multi-platform, multi-language document imaging developer toolkit. A memory corruption vulnerability exists in the TIFF handleCOMPRESSIONPACKBITS function in Accusoft ImageGear 19.7. An attacker can exploit the vulnerability via a specially crafted file to cause memory...

CVE-2020-16118

In GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL pointer dereference and client crash by sending a PREAUTH response to imapmboxconnect in libbalsa/imap/imap-handle.c...

CVE-2020-16118

In GNOME Balsa before 2.6.0, a malicious server operator or man in the middle can trigger a NULL pointer dereference and client crash by sending a PREAUTH response to imapmboxconnect in libbalsa/imap/imap-handle.c...

CVE-2019-20914

An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwgencodecommonentityhandledata in commonentityhandledata.spec...

Null pointer dereference

An issue was discovered in GNU LibreDWG through 0.9.3. There is a NULL pointer dereference in the function dwgencodecommonentityhandledata in commonentityhandledata.spec...

CVE-2020-1411

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1336...

CVE-2020-14974

CVE-2020-14974 affects IOBit Unlocker 1.1.2 (driver). A low-privilege user can obtain a handle-leak unlock and terminate processes (even SYSTEM) holding a handle via IOCTL code 0x222124. Root cause is tied to the driver interface exposed by IOCTL 0x222124, enabling unlocking of files and terminat...

PT-2020-11560 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: In the onHandleIntent method of TraceService.java, there is a possible bypass of developer settings requirements for capturing system traces due to a missing permission check. This could lead to local...

Updated perl packages fix security vulnerability

This update from 5.28.2 to 5.28.3 fixes bugs several bugs the RPM package manager. - Update to 5.23.3 See https://metacpan.org/pod/release/XSAWYERX/perl-5.28.3/pod/perldelta.pod for release notes - Security release fixes CVE-2020-10543, CVE-2020-10878 and CVE-2020-12723 - Work around a glibc bug...

CVE-2020-12753

creationtimestamp| type| source ---|---|--- 2020-06-02 08:56:37+00:00| seen| https://t.me/androidMalware/840 2020-06-03 13:40:04+00:00| seen| https://t.me/xakepru/9210 2024-10-28 16:11:20+00:00| seen| https://t.me/CyberSecurityTechnologies/1270 2026-07-18 15:00:05+00:00| seen|...

Linux kernel code issue vulnerability (CNVD-2020-31116)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A code issue vulnerability exists in the 'tw5864handleframe' function in the drivers/media/pci/tw5864/tw5864-video.c file in versions of Linux kernel prior to 5.2. An...

DEBIAN-CVE-2019-20806

An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864handleframe in drivers/media/pci/tw5864/tw5864-video.c, which may cause denial of service, aka CID-2e7682ebfc75...

UBUNTU-CVE-2019-20806

An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864handleframe in drivers/media/pci/tw5864/tw5864-video.c, which may cause denial of service, aka CID-2e7682ebfc75...

Fedora 31 : php (2020-8838d072d5)

PHP version 7.3.18 14 May 2020 Core: - Fixed bug php78875 Long filenames cause OOM and temp files are not cleaned. CVE-2019-11048 cmb - Fixed bug php78876 Long variables in multipart/form-data cause OOM and temp files are not cleaned. CVE-2019-11048 cmb - Fixed bug php79434 PHP 7.3 and PHP-7.4...

The vulnerability of the handle_open_brace function in the FFmpeg multimedia library allows a hacker to cause a service failure.

The vulnerability of the handleopenbrace function in the FFmpeg multimedia library relates to the reading of data beyond the buffer’s boundaries. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using specially created Matroska video format data...