Arbitrary Code Execution

hdf5 is vulnerable to arbitrary code execution. A memcpy parameter overlap in the function H5Olinkdecode in H5Olink.c allows an attacker to execute arbitrary code on the host OS...

Race condition

arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass access control on host OS MSRs when there are nested guests, aka CID-a58d9166a756. This occurs because of a TOCTOU race condition associated with a VMCB12 double fetch in...

CVE-2021-29657

CVE-2021-29657 affects the Linux kernel KVM SVM nested virtualization (AMD). A TOCTOU race in arch/x86/kvm/svm/nested.c/nested_svm_vmrun allows a guest to bypass interception checks and corrupt the saved L1 host context, potentially enabling a guest-to-host influence over host MSR state via neste...

CVE-2021-29657

arch/x86/kvm/svm/nested.c in the Linux kernel before 5.11.12 has a use-after-free in which an AMD KVM guest can bypass access control on host OS MSRs when there are nested guests, aka CID-a58d9166a756. This occurs because of a TOCTOU race condition associated with a VMCB12 double fetch in...

Arbitrary Code Execution

GNU Chess is vulnerable to arbitrary code execution. An attacker is able to execute arbitrary code on the host OS via malicious PGN Portable Game Notation data. due to a buffer overflow in the use of a .tmp.epd temporary file in the cmdpgnload and cmdpgnreplay functions in frontend/cmd.cc...

Arbitrary Code Execution

aom is vulnerable to arbitrary code execution. A use-after-free in aomdsp/graintable.c allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

resiprocate is vulnerable to arbitrary code execution. A buffer overflow in the function ConnectionBase::preparseNewBytes in resip/stack/ConnectionBase.cxx allows an attacker to crash the application and potentially execute arbitrary code on the host OS...

Arbitrary Code Execution

libzip is vulnerable to arbitrary code execution. A double-free in the zipdirentread function in zipdirent.c potentially allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

harfbuzz is vulnerable to arbitrary code execution. A buffer over-read in hb-ot-layout-gpos-table.hh allows an attacker to cause a denial of service or potentially execute arbitrary code on the host OS...

Arbtirary Code Execution

freetype is vulnerable to arbitrary code execution. An out-of-bounds write resulting in a heap-based buffer overflow in the TTGetMMVar function in truetype/ttgxvar.c and sfntinitface function in sfnt/sfobjs.c allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. An out-of-bounds write in TTGetMMVar function in truetype/ttgxvar.c and sfntinitface function in sfnt/sfobjs.c allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

freetype is vulnerable to arbitrary code execution. A buffer over-read in type1/t1parse.c in the function T1GetPrivateDict allows an attacker to execute arbitrary code on the host OS...

Unrestricted File Upload

studio-42/elfinder allows unrestricted file uploads. An attacker is able to upload PHP code in a .phar file and obtain arbitrary code execution on the host OS...

Arbtirary Code Execution

chromium is vulnerable to arbitrary code execution. A use after free security in the Accessibility component allows an attacker to execute arbitrary code on the host OS...

Arbtirary Code Execution

chromium is vulnerable to arbitrary code execution. An out-of-bounds write in Angle allows an attacker to execute arbtirary code on the host OS...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A use-after-free error within the Autofill component in Google Chrome allows a remote attacker to execute arbitrary code on the host OS by tricking the victim into visiting a malicious web page...

Arbitrary Code Execution

libwebp is vulnerable to arbitrary code execution. A use-after-free when a thread is killed earlier than expected allows an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. A memory corruption vulnerability could allow an attacker to execute arbitrary code on the host OS...

Arbitrary Code Execution

firefox is vulnerable to arbitrary code execution. A memory corruption allows an attacker to exploit the vulnerability to run arbitrary code on the host OS...

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A use-after-free in WebAuthentication allows an attacker to execute arbitrary code on the host OS by tricking a user into visiting a malicious web page...