OSV-2024-1076 Heap-buffer-overflow in readBytes48

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538426 Crash type: Heap-buffer-overflow READ 1 Crash state: readBytes48 SystemZLLVMgetInstruction SystemZgetInstruction...

MicroPython 安全漏洞

MicroPython is a small open source Python programming language interpreter open-sourced by MicroPython. A security vulnerability exists in MicroPython version 1.23.0, which originates in the mpvfsumount function in the VFS Unmount Handler component, which compares a mount path string and an unmou...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0302-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0302-1 advisory. Chromium 128.0.6613.137 released 2024-09-10 boo1230391 CVE-2024-8636: Heap buffer overflow in Skia CVE-2024-8637: Use after free in Media Router...

OPENSUSE-SU-2024:0302-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 128.0.6613.137 released 2024-09-10 boo1230391 CVE-2024-8636: Heap buffer overflow in Skia CVE-2024-8637: Use after free in Media Router CVE-2024-8638: Type Confusion in V8 CVE-2024-8639: Use after free in Autofill...

Fedora: Security Advisory (FEDORA-2024-0a4a65f805)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rocky Linux 8 : libvpx (RLSA-2024:5941)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:5941 advisory. libvpx: Heap buffer overflow related to VP9 encoding CVE-2023-6349 libvpx: Integer overflow in vpximgalloc CVE-2024-5197 Tenable has extracted the...

OESA-2024-2128 busybox security update

BusyBox combines tiny versions of many common UNIX utilities into a single small executable. It provides replacements for most of the utilities you usually find in GNU fileutils, shellutils, etc. It provides a fairly complete environment for any small or embedded system. Security Fixes: A...

OSV-2024-1066 Heap-buffer-overflow in StrLen

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71496 Crash type: Heap-buffer-overflow READ 2 Crash state: StrLen MangleFileName ToolChainHarnessLib.c...

Chromium: CVE-2024-8636 Heap buffer overflow in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

OSV-2024-1053 Heap-buffer-overflow in gguf_get_tensor_offset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538148 Crash type: Heap-buffer-overflow READ 8 Crash state: ggufgettensoroffset llamamodelloader::llamatensorweight::llamatensorweight void std::1::vectorllamamodelloader::llamatensorweight, std::1::allocat...

SUSE SLES12: qemu / qemu-arm / qemu-audio-alsa / qemu-audio-oss / qemu-audio-pa / etc (SUSE-SU-2024:3229-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3229-1 advisory. - CVE-2024-3447: Fix heap buffer overflow in sdhciwritedataport. bsc1218485 - CVE-2023-6693: Fix stack buffer overflow in...

macOS 13.x < 13.6.8 Multiple Vulnerabilities (120912)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.6.8. It is, therefore, affected by multiple vulnerabilities: - A segment fault SEGV flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFReadRGBATileExt API. This flaw allows a...

KLA73273 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Skia can be exploited to cause denial of service. 2...

SUSE-SU-2024:3229-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2024-3447: Fix heap buffer overflow in sdhciwritedataport. bsc1218485 - CVE-2023-6693: Fix stack buffer overflow in virtionetflushtx. bsc1218484...

Google Chrome Security Update (stable-channel-update-for-desktop_10-2024-09) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

Siemens User Management Component (UMC) Heap Buffer Overflow Vulnerability

SIMATIC PCS neo is a distributed control system DCS. sinec NMS is the new generation of network management systems NMS for the digital enterprise. The system can be used to centrally monitor, manage, and configure networks.Totally Integrated Automation Portal TIA Portal is a PC software that...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2024-2446)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-buffer-overflow vulnerability was found in LibTIFF, in extractImageSection at tools/tiffcrop.c:7916 and tools/tiffcrop.c:7801. This flaw...

Google Chrome heap buffer overflow vulnerability (CNVD-2024-38576)

Google Chrome is a web browser from Google, an American company. A heap buffer overflow vulnerability exists in versions of Google Chrome prior to 128.0.6613.138, which is caused by incorrect boundary checking in Skia. An attacker can exploit this vulnerability to cause an overflow buffer to...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2024-2446)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Security Update (stable-channel-update-for-desktop_10-2024-09) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...