Buffer Overflow

libmysofa.so is vulnerable to buffer overflow. The vulnerability exists as input data in the function mysofaresamplerresetmem are not properly handled leading to a heap-based buffer overflow and overwriting of large memory block...

Intel Ethernet Controllers Input Validation Error Vulnerability

Intel Ethernet Controllers is an Ethernet controller from Intel Corporation USA. An input validation error vulnerability exists in the Intel 722 Ethernet Controllers that arises from a network system or product that does not properly validate input data...

The vulnerability in the web interface of the Cisco Data Center Network Manager (DCNM) allows a attacker to execute XSS attacks.

The vulnerability in the web interface of the Cisco Data Center Network Manager DCNM management interface relates to the lack of measures for cleaning incoming data. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

PyYAML Input Validation Error Vulnerability

PyYAML is a Python based YAML parser and generator. An input validation error vulnerability exists in PyYAML that arises from a network system or product that does not properly validate input data...

CVE-2020-36151

Incorrect handling of input data in mysofaresamplerresetmem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block...

Null pointer dereference

Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions e.g. in embedded environment...

CVE-2020-36150

Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block...

Null pointer dereference

Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions e.g. in embedded environment...

Heap overflow

Incorrect handling of input data in mysofaresamplerresetmem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block...

Heap overflow

Incorrect handling of input data in loudness function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and access to unallocated memory block...

CVE-2020-36148

Incorrect handling of input data in verifyAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions e.g. in embedded environment...

CVE-2020-36151

Incorrect handling of input data in mysofaresamplerresetmem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block...

CVE-2020-36149

CVE-2020-36149 concerns libmysofa (versions 0.5–1.1) where incorrect handling of input data in changeAttribute can cause a NULL pointer dereference and segmentation fault, especially under memory-restricted or embedded environments. Connected advisories confirm the root cause in changeAttribute (...

CVE-2020-36151

Incorrect handling of input data in mysofaresamplerresetmem function in the libmysofa library 0.5 - 1.1 will lead to heap buffer overflow and overwriting large memory block...

CVE-2020-36149

Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions e.g. in embedded environment...

The vulnerability of the file system driver in the Windows operating system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the file system driver filter in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the HEVC Video Extension codec, which arises due to insufficient validation of input data, allows attackers to execute arbitrary code.

The vulnerability of the HEVC Video Extension codec exists due to insufficient checks on input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to trigger a service failure.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Core component in Oracle VM VirtualBox allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component in Oracle VM VirtualBox exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...