97 matches found
GNU GCC numeric error vulnerability
GNU GCC contains a numerical error vulnerability. This vulnerability stems from improper handling of excessively large element counts in the std::vector constructor within GCC’s libstdc++ component. As a result, integer wrap-around occurs during internal memory calculations, leading to inconsiste...
Linux kernel security vulnerabilities
A security vulnerability exists in Linux kernel versions prior to 5.10.271, 5.15.222, 6.1.189, 6.6.158, 6.12.111, and 6.18.53. This vulnerability arises because gntallocioctlalloc fails to verify whether the number of grants requested by a user exceeds the global limit prior to allocation; this m...
Apache DataSketches numerical error vulnerability
A security vulnerability exists in Apache DataSketches C++ versions from 4.1.0 up to and including 5.3.0. This vulnerability arises because the Count-Min sketch fails to include the leading part of the input size during deserialization; additionally, there is a 32-bit integer wrap-around in table...
OpenS100 Project OpenS100 buffer error vulnerability
The OpenS100 Project OpenS100 daa35b versions and earlier contain a security vulnerability. This vulnerability stems from the S102VGBathymetryCoverage::Read function within the S-102 Bathymetric Surface parser, which fails to validate the multiplication of numPointsLatitudinal and...
PT-2026-108755
dynamic object create in kernel/userspace/userspace.c computed the backing allocation for a dynamically allocated kernel object as obj size getotype + size, and for thread stack elements as STACK ELEMENT DATA SIZEsize a round-up plus fixed overhead, without checking either expression for unsigned...
CVE-2026-88035
A size check in the client-side authentication path of the MongoDB C Driver can wrap around, so an unusually large user-name value is accepted and copied past the end of a small buffer. A party able to set the driver's connection settings may cause the application that embeds the driver to...
PT-2026-89549
Name of the Vulnerable Software and Affected Versions MongoDB C Driver affected versions not specified Description A size check in the client-side authentication path can wrap around, allowing an unusually large user-name value to be accepted and copied past the end of a small buffer. This can le...
libcoap security vulnerability
Libcoap is a lightweight application protocol implementation developed by ObgM. Libcoap has a security vulnerability, which stems from out-of-bounds read operations during the CBOR decapsulation processing in OSCORE Appendix B.2. This vulnerability may lead to a heap buffer overflow attack throug...
CVE-2021-27427
RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...
CVE-2021-27425
Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mmmalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...
CVE-2021-27439
TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tosmmheapalloc incorrect calculation of effective memory allocation size. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code...
CVE-2021-27431
ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to integer wrap-around inosRtxMemoryAlloc local malloc equivalent function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or injected code execution...
CVE-2021-27435
ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in mallocwrapper function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...
CVE-2021-27419
uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...
CVE-2024-2452
In Eclipse ThreadX NetX Duo before 6.4.0, if an attacker can control parameters of portablealignedalloc could cause an integer wrap-around and an allocation smaller than expected. This could cause subsequent heap buffer overflows...
EUVD-2021-14193
Malware in sbrugna...
EUVD-2021-14189
Malware in sbrugna...
EUVD-2021-14165
Malware in sbrugna...