UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which stems from a heap-based out-of-bounds read that can be implemented by an attacker via a carefully crafted Mach-O file to the getle64 function of its bele.h component...

UPX 安全漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which originates from an attacker being able to cause invalid memory address references to the elflookup function of its plxelf.cpp component via a carefully crafted Mach-O file...

UPX 数字错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which stems from an attacker being able to cause a floating-point exception in the elflookup function of its plxelf.cpp component via a carefully crafted Mach-O file...

CVE-2020-27802: Improper Restriction of Operations within the Bounds of a Memory Buffer

An floating point exception was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27797: Improper Restriction of Operations within the Bounds of a Memory Buffer

An invalid memory address reference was discovered in the elflookup function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27796: Improper Restriction of Operations within the Bounds of a Memory Buffer

A heap-based buffer over-read was discovered in the invertptdynamic function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27801: Improper Restriction of Operations within the Bounds of a Memory Buffer

A heap-based buffer over-read was discovered in the getle64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27799: Improper Restriction of Operations within the Bounds of a Memory Buffer

A heap-based buffer over-read was discovered in the accuagetbe32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file...

CVE-2020-27798: Improper Restriction of Operations within the Bounds of a Memory Buffer

An invalid memory address reference was discovered in the adjABS function in plxelf.cpp in UPX 4.0.0 via a crafted Mach-O file...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which stems from a heap-based out-of-bounds read that can be implemented by an attacker via a carefully crafted Mach-O file to the invertptdynamic function of its plxelf.cpp...

CVE-2020-27800: Improper Restriction of Operations within the Bounds of a Memory Buffer

A heap-based buffer over-read was discovered in the getle32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file...

UPX 缓冲区错误漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 4.0.0, which originates from a heap-based out-of-bounds read that can be implemented by an attacker via a carefully crafted Mach-O file to the getle32 function of its bele.h component...

North Korea Hackers Spotted Targeting Job Seekers with macOS Malware

The North Korea-backed Lazarus Group has been observed targeting job seekers with malware capable of executing on Apple Macs with Intel and M1 chipsets. Slovak cybersecurity firm ESET linked it to a campaign dubbed "Operation Interception" that was first disclosed in June 2020 and involved using...

binutils:fuzz_objcopy: Use-of-uninitialized-value in bfd_mach_o_layout_commands

Detailed Report: https://oss-fuzz.com/testcase?key=6268141897908224 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjcopy Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: bfdmacholayoutcommands bfdmachobuildcomman...

CVE-2022-20174

In exynossecEnvinit of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

CVE-2022-20174: Out-of-bounds Read

In exynossecEnvinit of mach-gs101.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

PT-2022-14403

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an out of bounds read in the exynos secEnv init function of mach-gs101.c due to an incorrect bounds check. This could lead to local information disclosure, requiring System execution privilege...

Google Android out-of-bounds read vulnerability (CNVD-2022-53386)

Google Android is a Linux-based open source operating system from Google, Inc. An out-of-bounds read vulnerability exists in Google Android, which originates in exynossecEnvinit in mach-gs101.c. An out-of-bounds read may occur due to a boundary checking error. An attacker could exploit this...

binutils:fuzz_objcopy: Use-of-uninitialized-value in cache_bwrite

Detailed Report: https://oss-fuzz.com/testcase?key=5849560635801600 Project: binutils Fuzzing Engine: libFuzzer Fuzz Target: fuzzobjcopy Job Type: libfuzzermsanbinutils Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: cachebwrite bfdbwrite bfdmachowritecontent...

Radare2 buffer overflow vulnerability (CNVD-2022-77073)

Radare2 is a set of libraries and tools for working with binary files. A buffer overflow vulnerability exists in Radare2 version 5.5.2, which originates from a boundary error in the /libr/core/analobjc.c mach-o parser when processing untrusted input. A remote attacker could exploit this...