92 matches found
PT-2021-4789
Name of the Vulnerable Software and Affected Versions Cesanta Software Mongoose-OS version 2.17.0 Description The issue is related to an integer wrap-around in the mm malloc function, leading to improper memory assignment. This can result in arbitrary memory allocation, causing unexpected behavio...
PT-2021-4659
Name of the Vulnerable Software and Affected Versions Tizen RT RTOS version 3.0.GBB Description The issue is related to an integer wrap-around in the functions calloc and mm zalloc functions, leading to improper memory assignment. This can result in arbitrary memory allocation, causing unexpected...
CVE-2021-32761
A flaw was found in Redis. Issuing the BITFIELD command on a 32-bit version of Redis may result in an integer wrap around allowing an attacker to crash the service or perform remote code execution. The highest threat from this vulnerability is to the data confidentiality, integrity, and service...
CVE-2021-26461
Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...
CVE-2021-26461
Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...
CVE-2021-26461 malloc, realloc and memalign implementations are vulnerable to integer wrap-arounds
Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...
CVE-2021-26461
Apache NuttX (OS) versions prior to 10.1.0 are affected by CVE-2021-26461 due to integer wrap-around in memory management calls (malloc, realloc, memalign). This can lead to arbitrary memory allocation and outcomes such as a crash or remote code execution. Remediation is to update to 10.1.0 or la...
PT-2021-4189
Name of the Vulnerable Software and Affected Versions Apache Nuttx versions prior to 10.1.0 Description The issue is related to an integer wrap-around in the malloc, realloc, and memalign functions, leading to improper memory assignment. This can result in arbitrary memory allocation, causing...
CVE-2021-26461: Integer Overflow or Wraparound
Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...
CVE-2020-17443
An issue was discovered in picoTCP 1.7.0. The code for creating an ICMPv6 echo replies doesn't check whether the ICMPv6 echo request packet's size is shorter than 8 bytes. If the size of the incoming ICMPv6 request packet is shorter than this, the operation that calculates the size of the ICMPv6...
n.runs-SA-2007.013 - F-Secure Antivirus LZH parsing BufferOverflow Advisory
n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.013 01-Jun-2007 Vendor: F-Secure Corporation, http://www.f-secure.com Affected Products: F-Secure Anti-Virus for Workstations version 5.44 and earlier F-Secure Anti-Virus for Windows Servers version 5.52 and earlier F-Secure...
Security-Assessment.com Advisory: Asterisk remote heap overflow
======================================================================== = Asterisk - chanskinny Remote Unauthenticated Heap Overflow = = Vendor Website: = http://www.asterisk.org = = Affected Version: = All 1.2-branch releases prior to and including 1.2.12.1 = All 1.0-branch releases prior to an...