PT-2022-10390 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to improper validation of data length received from a DMA buffer, which can lead to memory corruption. This affects various Qualcomm Snapdragon products,...

Tp-link TP-Link TL-WR940N 安全漏洞

Tp-link TP-Link TL-WR940N is a wireless router from China P&L Tp-link. The TP-Link TL-WR940N suffers from a buffer overflow vulnerability that stems from a lack of proper validation of the length of user-supplied data before copying it into a fixed-length stack-based buffer. An attacker could...

Bentley Systems MicroStation 安全漏洞

Bentley MicroStation CONNECT is a Cad software platform for 2D and 3D design and drafting from Bentley Systems, Inc. A buffer overflow vulnerability exists in Bentley MicroStation CONNECT 10.16.0.80 when parsing BMP images, which stems from a failure to Lack of proper validation of the length...

Bentley Systems MicroStation 安全漏洞

A remote code execution vulnerability exists in Bentley MicroStation CONNECT, a Cad software platform for 2D and 3D design and drafting from Bentley Systems, Inc. Lack of proper validation of the length before copying user-supplied data to a heap-based buffer can be exploited by an attacker to...

Samba 缓冲区错误漏洞

Samba is the standard Windows interoperability program suite for Linux and Unix. A security vulnerability exists in Samba that stems from a lack of proper validation of the length of user-supplied data before copying it into a fixed-length heap-based buffer. An attacker could exploit this...

AZL-7533 CVE-2022-23219 affecting package glibc for versions less than 2.35-1

The deprecated compatibility function clntcreate in the sunrpc module of the GNU C Library aka glibc through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or if an application is no...

CVE-2021-34892

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2021-30319

CVE-2021-30319 describes a possible integer overflow due to improper validation of command length parameters while processing WMI commands in Qualcomm Snapdragon components (Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music). The r...

MediaWiki 资源管理错误漏洞

MediaWiki is a free, free-to-use web-based wiki engine from the MediaWiki Foundation. A denial of service vulnerability exists in MediaWiki, which stems from the fact that the product does not validate the length of input data for the language name search function, and could be exploited to cause...

xorg-x11-server: SProcRenderCompositeGlyphs out-of-bounds access

A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the SProcRenderCompositeGlyphs function due to improper validation of the request length...

CVE-2021-43399

The Yubico YubiHSM YubiHSM2 library 2021.08, included in the yubihsm-shell project, does not properly validate the length of some operations including SSH signing requests, and some data operations received from a YubiHSM 2 device...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View, a free viewer from Bentley Systems, Inc. has a security vulnerability in Bentley View J2K file parsing. The upstairs is due to a failure to properly validate the length of user-supplied data before copying it to the heap buffer. An attacker could exploit this vulnerability to execut...

Bentley Systems Bentley View 缓冲区错误漏洞

Bentley View is a free viewer from Bentley Systems, Inc. Bentley View BMP file parsing heap buffer overflow remote code execution vulnerability is due to a failure to properly validate the length of user-supplied data before copying it to the heap buffer. An attacker could exploit this...

Bentley Systems Bentley View 缓冲区错误漏洞

A security vulnerability exists in Bentley View, a free viewer from Bentley Systems, U.S.A. The Bentley View BMP file parsing vulnerability is due to a failure to properly validate the length of user-supplied data before copying it to a heap buffer. An attacker could exploit this vulnerability to...

yubihsm-shell 缓冲区错误漏洞

yubihsm-shell is a component for individual developers to interact with YubiHSM 2. The component is mostly found in applications that interact with YubiHSM 2 and is geared towards user and program level interaction. A buffer error vulnerability exists in yubihsm-shell where the product does not...

AfreecaTV 缓冲区错误漏洞

AfreecaTv is a video streaming service based on P2P technology from AfreecaTV, a South Korean company. a security vulnerability exists in the AfreecaTV-related streaming service, which stems from the lack of length validation of stored data. A stack buffer overflow was found in the strcpy operati...

Drawings SDK out-of-bounds read vulnerability (CNVD-2021-94906)

Drawings SDK is a development kit from the Open Design Alliance that gives you access to all .dwg and .dgn data via an object-oriented API that lets you create and edit any type of .dwg and .dgn drawing file. OBJ file reader in versions of Drawings SDK prior to 2022.11 An out-of-bounds read...

CVE-2021-43278

An Out-of-bounds Read vulnerability exists in the OBJ file reading procedure in Open Design Alliance Drawings SDK before 2022.11. The lack of validating the input length can trigger a read past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the...

Open Design Alliance Drawings SDK 缓冲区错误漏洞

Open Design Alliance Drawings SDK is a software development kit for drawing design applications from Open Design Alliance, Inc. The development package provides access to data in .dwg and .dgn through a convenient, object-oriented API that provides a C API, support for repair files, support for t...

NETGEAR R6400v2 缓冲区错误漏洞

The NETGEAR R6400v2 is a router from Netgear, Inc. A hardware device that connects two or more networks and acts as a gateway between networks, the NETGEAR R6400v2 is vulnerable to a buffer overflow vulnerability that stems from a process failing to properly validate the length of user-supplied...