15 matches found
CVE-2026-76834: Deserialization of Untrusted Data
b2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2016-8901 where the serialized-array object check in paramcheckserializedarray fails to reject payloads with negative integer array keys. Unauthenticated attackers can submit crafted serialized PHP objects via POST...
PT-2026-94367
Name of the Vulnerable Software and Affected Versions b2evolution CMS versions 6.7.8 through 7.2.5 Description An incomplete fix in the param check serialized array function fails to reject payloads containing negative integer array keys. Unauthenticated attackers can send crafted serialized PHP...
Malicious code in small-private-integer-array-deploy (npm)
The package small-private-integer-array-deploy was found to contain malicious code...
MAL-2025-33442 Malicious code in small-private-integer-array-deploy (npm)
The package small-private-integer-array-deploy was found to contain malicious code...
ASoC: Intel: avs: Verify content returned by parse_int_array()
...
ASOC Parse Int Array DoS
The vulnerability of the parseintarray function in the ASoC component of the Linux operating system is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
DEBIAN-CVE-2025-38307
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parseintarray The first element of the returned array stores its length. If it is 0, any manipulation beyond the element at index 0 ends with null-ptr-deref...
Astra Linux – vulnerability in linux-6.12
In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Verify content returned by parseintarray The first element of the returned array stores its length. If it is 0, any manipulation beyond the element at index 0 ends with null-ptr-deref...
PT-2025-29027
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to the ASoC Advanced Linux Sound Architecture Intel audio subsystem. Specifically, the parse int array function does not adequately validate t...
PYSEC-2022-122
Tensorflow is an Open Source Machine Learning Framework. An attacker can craft a TFLite model that would cause an integer overflow in TfLiteIntArrayCreate. The TfLiteIntArrayGetSizeInBytes returns an int instead of a sizet. An attacker can control model inputs such that computedsize overflows the...
PT-2019-6773
Name of the Vulnerable Software and Affected Versions Java SE 7 as provided by OpenJDK 7 Description An information disclosure flaw was found in the way the Java Virtual Machine JVM implementation incorrectly initialized integer arrays after memory allocation, potentially allowing them to have...
Microsoft Edge - 'Array.filter' Information Leak
var b = new Array1,2,3; var d = new Array1,2,3; class dummy constructor alert"in constructor"; return d; class MyArray extends Array // Overwrite species to the parent Array constructor static get Symbol.species alert"get"; b0 = ; return dummy; var a = new Array, , "natalie", 7, 7, 7, 7, 7;...
Microsoft Edge - Array.filter Information Leak
Microsoft Edge - Array.filter Information Leak var b = new Array1,2,3; var d = new Array1,2,3; class dummy constructor alert"in constructor"; return d; class MyArray extends Array // Overwrite species to the parent Array constructor static get Symbol.species alert"get"; b0 = ; return dummy; var a...
