Lucene search
+L

3092 matches found

OSV
OSV
•added 2022/04/27 12:00 p.m.•21 views

RUSTSEC-2022-0017 `array!` macro is unsound when its length is impure constant

Affected versions of this crate did substitute the array length provided by an user at compile-time multiple times. When an impure constant expression is passed as an array length such as a result of an impure procedural macro, this can result in the initialization of an array with uninitialized...

7.6AI score
SaveExploits0References3
RustSec
RustSec
•added 2022/04/27 12:00 p.m.•25 views

`array!` macro is unsound when its length is impure constant

Affected versions of this crate did substitute the array length provided by an user at compile-time multiple times. When an impure constant expression is passed as an array length such as a result of an impure procedural macro, this can result in the initialization of an array with uninitialized...

3.3AI score
SaveExploits0Affected Software1
osv-gsd
osv-gsd
•added 2022/04/24 8:59 p.m.•20 views

GSD-2022-1001263 ASoC: codecs: va-macro: fix accessing array out of bounds for enum type

ASoC: codecs: va-macro: fix accessing array out of bounds for enum type This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

7.3AI score
SaveExploits0
osv-gsd
osv-gsd
•added 2022/04/24 8:59 p.m.•19 views

GSD-2022-1001262 ASoC: codecs: rx-macro: fix accessing compander for aux

ASoC: codecs: rx-macro: fix accessing compander for aux This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-29843

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.16.18 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: rx-macro component. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•4 views

PT-2022-29840

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to accessing an array out of bounds for an enum type in the va-macro codec. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-29536

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.17.1 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: va-macro component. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•3 views

PT-2022-29537

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.17.1 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: rx-macro component. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•1 views

PT-2022-29844

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.16.18 Description The issue is related to accessing compander for aux in the ASoC: codecs: rx-macro. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-30153

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to accessing an array out of bounds for an enum type in the ASoC: codecs: rx-macro component. The actual impact and attack plausibility have not yet been proven...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•3 views

PT-2022-29535

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.17.1 Description The issue is related to accessing compander for aux in the ASoC: codecs: rx-macro. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-30151

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.11 through v5.15.32 Description The issue is related to accessing an array out of bounds for an enum type in the va-macro codec. The actual impact and attack plausibility have not yet been proven. Recommendations For...

5.8AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/04/24 12:00 a.m.•2 views

PT-2022-30154

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.12 through v5.15.32 Description The issue is related to accessing compander for aux in the ASoC: codecs: rx-macro component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

5.8AI score
SaveExploits0References1
osv-debian
osv-debian
•added 2022/04/14 8:15 p.m.•13 views

DEBIAN-CVE-2021-40400

An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit d7f42a9a. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious...

7.5CVSS8.1AI score0.01288EPSS
SaveExploits1References1
osv-debian
osv-debian
•added 2022/04/14 8:15 p.m.•14 views

DEBIAN-CVE-2021-40402

An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file...

7.5CVSS8.1AI score0.01484EPSS
SaveExploits1References1
osv-cve
osv-cve
•added 2022/04/14 8:15 p.m.•20 views

CVE-2021-40400

An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit d7f42a9a. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious...

7.5CVSS6.2AI score
SaveExploits0References1
NVD
NVD
•added 2022/04/14 8:15 p.m.•54 views

CVE-2021-40400

An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit d7f42a9a. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious...

9.3CVSS0.01288EPSS
SaveExploits1References1
Prion
Prion
•added 2022/04/14 8:15 p.m.•25 views

Design/Logic Flaw

An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit d7f42a9a. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious...

5CVSS7.1AI score0.01288EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/04/14 8:15 p.m.•30 views

Design/Logic Flaw

An out-of-bounds read vulnerability exists in the RS-274X aperture macro multiple outline primitives functionality of Gerbv 2.7.0 and dev commit b5f1eacd, and Gerbv forked 2.7.1 and 2.8.0. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious file...

5CVSS7.2AI score0.01484EPSS
SaveExploits1References1Affected Software1
osv-ubuntu
osv-ubuntu
•added 2022/04/14 8:15 p.m.•18 views

UBUNTU-CVE-2021-40400

An out-of-bounds read vulnerability exists in the RS-274X aperture macro outline primitive functionality of Gerbv 2.7.0 and dev commit b5f1eacd and the forked version of Gerbv commit d7f42a9a. A specially-crafted Gerber file can lead to information disclosure. An attacker can provide a malicious...

9.3CVSS7.2AI score0.01288EPSS
SaveExploits1References5
Rows per page
Query Builder