SUSE-SU-2022:4280-1 Security update for sudo

This update for sudo fixes the following issues: Security fixes: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt password backend bsc1204986. Other: - Make sure SIGCHLD is not ignored when sudo is executed;...

Actively Exploited Zero-Day Bug in Chrome

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary CVE-2022-4135 is a high-severity heap buffer overflow issue that affects the GPU component. The fault is caused by a boundary error in the GPU while processing untrusted HTML input. An attacker wh...

SUSE SLES12 Security Update : exiv2 (SUSE-SU-2022:4252-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:4252-1 advisory. - CVE-2019-13112: Fixed an uncontrolled memory allocation in PngChunk:parseChunkContent causing denial of service. bsc1142681 -...

Microsoft Edge (Chromium) < 107.0.1418.62 Vulnerability

The version of Microsoft Edge installed on the remote Windows host is prior to 107.0.1418.62. It is, therefore, affected by a vulnerability as referenced in the November 28, 2022 advisory. - Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had...

Chromium: CVE-2022-4135 Heap buffer overflow in GPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2022-4135 exists in the wild...

OPENSUSE-SU-2022:10221-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 107.0.5304.121 boo1205736 CVE-2022-4135: Heap buffer overflow in GPU...

Denial Of Service (DoS)

advancecomp is vulnerable to denial of service. The vulnerability exists due to a heap buffer overflow which allows an attacker to cause an application crash...

Denial Of Service (DoS)

advancecomp is vulnerable to denial of service. The vulnerability exists due to a heap buffer overflow which allows an attacker to cause an application crash...

Denial Of Service (DoS)

advancecomp is vulnerable to denial of service. The vulnerability exists due to a heap buffer overflow via the component interceptormemcpy at /sanitizercommon/sanitizercommoninterceptors.inc which allows an attacker to cause an application crash...

KLA20103 DoS vulnerability in Microsoft Browser

Heap buffer overflow vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to cause denial of service. Original advisories CVE-2022-4135 Related products Microsoft-Edge CVE list CVE-2022-4135 critical KB list Solution Install necessary updates from the...

Debian DSA-5289-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5289 advisory. Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code. For the stable distribution bullseye, this problem has been...

Google Chromium GPU Heap Buffer Overflow Vulnerability

Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but n...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10221-1 Rating: important References: 1205736 Cross-References: CVE-2022-4135 Affected Products: openSUSE Backports SLE-15-SP3 openSUSE Backports SLE-15-SP4 An update that fixes one vulnerability is now...

OSV-2022-1212 Heap-buffer-overflow in OT::hb_ot_apply_context_t::skipping_iterator_t::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53722 Crash type: Heap-buffer-overflow READ 4 Crash state: OT::hbotapplycontextt::skippingiteratort::next bool OT::matchinput bool OT::contextapplylookup...

OSV-2022-1211 Heap-buffer-overflow in bit_calc_CRC

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53750 Crash type: Heap-buffer-overflow READ 1 Crash state: bitcalcCRC decodepreR13 dwgdecode...

PT-2022-36791 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash involves the functions bit calc CRC, decode preR13, and dwg decod...

OSV-2022-1209 Heap-buffer-overflow in OT::hb_ot_apply_context_t::skipping_iterator_t::next

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=53714 Crash type: Heap-buffer-overflow READ 4 Crash state: OT::hbotapplycontextt::skippingiteratort::next OT::Layout::GSUBimpl::Ligature::apply bool OT::hbacceleratesubtablescontextt::applytoOT::Layout::GSUBimpl::Liga...

CVE-2022-4135

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2022-4135

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

Google Chrome Security Update (stable-channel-update-for-desktop_24-2022-11) - Windows

Google Chrome is prone to a heap buffer overflow vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...