CVE-2021-44509

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in opfnj3 in srport/opfnj3.c in order to cause a segmentation fault and crash the application...

CVE-2021-44509

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in opfnj3 in srport/opfnj3.c in order to cause a segmentation fault and crash the application...

CVE-2021-44509

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in opfnj3 in srport/opfnj3.c in order to cause a segmentation fault and crash the application...

CVE-2021-44489

CVE-2021-44489 affects YottaDB r1.32 and earlier. The issue is an integer underflow/overflow in the size of memset calls inside sr_port/op_fnj3.c (op_fnj3), caused by crafted input, leading to a segmentation fault and application crash. The available sources describe the root cause (memset size u...

CVE-2021-44489

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in opfnj3 in srport/opfnj3.c in order to cause a segmentation fault and crash the application. This is a "- digs" subtraction...

CVE-2021-44489

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in opfnj3 in srport/opfnj3.c in order to cause a segmentation fault and crash the application. This is a "- digs" subtraction...

CVE-2021-44509: Integer Underflow (Wrap or Wraparound)

An issue was discovered in FIS GT.M through V7.0-000 related to the YottaDB code base. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in opfnj3 in srport/opfnj3.c in order to cause a segmentation fault and crash the application...

CVE-2021-44489: Integer Underflow (Wrap or Wraparound)

An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can cause an integer underflow of the size of calls to memset in opfnj3 in srport/opfnj3.c in order to cause a segmentation fault and crash the application. This is a "- digs" subtraction...

PT-2022-12136

Name of the Vulnerable Software and Affected Versions YottaDB versions prior to r1.32 and V7.0-000 Description An issue was discovered that allows attackers to cause an integer underflow of the size of calls to memset in op fnj3 in sr port/op fnj3.c. This can be achieved by using crafted input,...

PT-2022-12156 · Fis Gt.M +3 · Fis Gt.M +3

Name of the Vulnerable Software and Affected Versions: FIS GT.M versions through V7.0-000 Description: An issue allows attackers to cause an integer underflow of the size of calls to memset in op fnj3 in sr port/op fnj3.c, leading to a segmentation fault and application crash, using crafted input...

FIS GT.M: Numerical error vulnerability

FIS GT.M is a database platform. A security vulnerability exists in versions prior to FIS GT.M V7.0-000, which can be exploited by an attacker to cause an integer underflow to the size of the memset call in opfnj3 in srport/opfnj3.c, resulting in a segmentation error and crashing the application...

CVE-2022-20073

In preloader usb, there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2022-20073

In preloader usb, there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2022-20073

In preloader usb, there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2022-20073

CVE-2022-20073 affects the preloader (usb) on MediaTek devices, where an integer underflow can trigger an out-of-bounds write. This can enable local escalation of privilege for an attacker with physical device access, with user interaction required for exploitation. The issue is documented with P...

CVE-2022-20073: Integer Underflow (Wrap or Wraparound)

In preloader usb, there is a possible out of bounds write due to a integer underflow. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

PT-2022-14318

Name of the Vulnerable Software and Affected Versions No specific software name or affected versions are mentioned in the provided descriptions. Description The issue is related to a possible out of bounds write due to an integer underflow in the preloader usb. This could lead to local escalation...

Multiple MediaTek products have vulnerabilities related to digital errors

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in multiple MediaTek products that originates from an integer underflow in the preloader usb, which may result in out-of-bounds writes...

Exploit for Integer Overflow or Wraparound in Linux Linux_Kernel

CVE-2022-0185 pipe version Using pipe-primit...

Debian DLA-2962-1 : pjproject - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2962 advisory. Multiple security issues were discovered in pjproject, is a free and open source multimedia communication library. CVE-2021-32686 A race condition between callback...