CVE-2020-35885

An issue was discovered in the alpm-rs crate through 2020-08-20 for Rust. StrcCtx performs improper memory deallocation...

Denial Of Service (DoS)

webkitgtk4 is vulnerable to denial of service DoS. The vulnerability exists through an improper memory handling...

PT-2020-3832 · Microsoft · Windows Radio Management Api +1

Name of the Vulnerable Software and Affected Versions: Windows Radio Management API affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Radio Management API, which is caused by improper memory handling. This can allow an...

PT-2020-3805 · Microsoft · Windows Backup Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Engine affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that occurs when the Windows Backup Engine improperly handles memory. To exploit this, an attacker must first...

PT-2020-3840 · Microsoft · Windows Upnp Device Host +1

Name of the Vulnerable Software and Affected Versions: Windows UPnP Device Host affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows UPnP Device Host service, which is caused by improper memory handling. This can be exploited ...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

SMBGhostRCEPoC RCE PoC for CVE-2020-0796 "SMBGhost" For de...

CVE-2020-1870

CVE-2020-1870 affects Huawei CloudEngine and related NE40E/NE40E-M/NE40E-F switches. Root cause is improper memory management leading to memory leakage, which can be exploited to cause denial of service. Affected versions include CloudEngine 12800 (V200R019C00SPC800), 5800 (V200R019C00SPC800), 68...

CVE-2020-1075

An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka 'Windows Subsystem for Linux Information Disclosure Vulnerability'...

Buffer overflow

Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer within the previous allocation's memory, which could lead to improper memory access.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2020-0221

Airbrush FW's scratch memory allocator is susceptible to numeric overflow. When the overflow occurs, the next allocation could potentially return a pointer within the previous allocation's memory, which could lead to improper memory access.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2020-0221

CVE-2020-0221 affects Airbrush’s scratch memory allocator in the Android kernel. The root cause is a numeric overflow in the allocator, which could cause the next allocation to return a pointer within a previously allocated region, enabling improper memory access and elevation of privilege on aff...

Windows Graphics Component Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited this vulnerability could run processes in an elevated context. In a local attack scenario, an attacker could exploit this vulnerability b...

CVE-2020-0792

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0715, CVE-2020-0745...

Huawei EulerOS: Security Advisory for qemu-kvm (EulerOS-SA-2019-1405)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-1343

A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1346, CVE-2019-1347...

CVE-2019-1345

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1334...

Remote code execution

In Bluetooth, there is a possible remote code execution due to an improper memory allocation. This could lead to remote code execution in Bluetooth with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112159...

CVE-2018-12204

Improper memory initialization in Platform Sample/Silicon Reference firmware IntelR Server Board, IntelR Server System and IntelR Compute Module may allow privileged user to potentially enable an escalation of privilege via local access...

CVE-2018-5839

The CVE-2018-5839 issue is a memory protection flaw in Qualcomm Snapdragon environments that permits local read/write of the modem image from the host OS kernel. Affected products include Snapdragon Auto, Compute, Consumer IoT, Industrial IoT, and Mobile lines across multiple SoCs (MDM9150, MDM96...

CVE-2018-5839

Improperly configured memory protection allows read/write access to modem image from HLOS kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in versions MDM9150, MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, MDM9655, MSM8996AU,...