The vulnerability in the implementation of the mm_malloc() function in the Mongoose OS operating system allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the mmmalloc function implementation in the Mongoose OS operating system is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

Integer Overflow

autotrace is vulnerable integer overflows. A biWidthbiBitCnt integer overflow in input-bmp.c allows attackers to provide an unexpected input value to malloc via a malformed bitmap image resulting in a system hang...

autotrace: integer overflow in input-bmp.c

A biWidthbiBitCnt integer overflow in input-bmp.c in autotrace 0.31.1 allows attackers to provide an unexpected input value to malloc via a malformed bitmap image...

The vulnerability of the malloc() function in the Klibc environment library, related to integer overflow, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the malloc function in the Klibc environment library is related to integer overflow. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

The vulnerability in the implementation of the malloc() function (source/ti/posix/freertos/memory.c) of the software development kit for microcontroller families SimpleLink (CC13XX, CC26XX, CC32XX, and MSP432E4) allows a malicious actor to execute arbitrary code or cause a service failure.

The vulnerability of the malloc function implementation source/ti/posix/freertos/memory.c in the software development kit for microcontroller families SimpleLink CC13XX, CC26XX, CC32XX, and MSP432E4 is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to execute...

The vulnerability in the implementation of the malloc, realloc, and memalign functions of the Apache Nuttx operating system allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the malloc, realloc, and memalign functions in the Apache Nuttx operating system arises due to integer overflow. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

Huawei EulerOS: Security Advisory for jbigkit (EulerOS-SA-2021-2390)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-4789

Name of the Vulnerable Software and Affected Versions Cesanta Software Mongoose-OS version 2.17.0 Description The issue is related to an integer wrap-around in the mm malloc function, leading to improper memory assignment. This can result in arbitrary memory allocation, causing unexpected behavio...

PT-2021-3724

Name of the Vulnerable Software and Affected Versions Manage Engine Asset Explorer Agent version 1.0.34 Description The issue is related to a memory leak in the Manage Engine Asset Explorer Agent. The agent listens on port 9000 for incoming commands over HTTPS from the Manage Engine Server, but i...

Huawei EulerOS: Security Advisory for jbigkit (EulerOS-SA-2021-2074)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2021-2003)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-34372

Trusty the trusted OS produced by NVIDIA for Jetson devices driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where an integer overflow in a malloc size calculation leads to a buffer overflow on the heap, which might result in information disclosure, escalation of...

CVE-2021-34372

Trusty the trusted OS produced by NVIDIA for Jetson devices driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where an integer overflow in a malloc size calculation leads to a buffer overflow on the heap, which might result in information disclosure, escalation of...

CVE-2021-34372

Trusty the trusted OS produced by NVIDIA for Jetson devices driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where an integer overflow in a malloc size calculation leads to a buffer overflow on the heap, which might result in information disclosure, escalation of...

PT-2021-4189

Name of the Vulnerable Software and Affected Versions Apache Nuttx versions prior to 10.1.0 Description The issue is related to an integer wrap-around in the malloc, realloc, and memalign functions, leading to improper memory assignment. This can result in arbitrary memory allocation, causing...

CVE-2021-26461: Integer Overflow or Wraparound

Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution...

Heap-based Buffer Overflow in squell/id3

✍️ Description While testing id3 built from commit 0de713 with Clang 13 +ASan on Ubuntu 20.04.2, we discovered a POC which triggers a heap-buffer-overflow in tag::unbinarize. This particular flaw was discovered with the help of honggfuzz. 🕵️‍♂️ Proof of Concept echo...

Integer overflow in TFLite memory allocation

Impact The TFLite code for allocating TFLiteIntArrays is vulnerable to an integer overflow issue: cc int TfLiteIntArrayGetSizeInBytesint size static TfLiteIntArray dummy; return sizeofdummy + sizeofdummy.data0 size; An attacker can craft a model such that the size multiplier is so large that the...

PYSEC-2021-731

TensorFlow is an end-to-end open source platform for machine learning. The TFLite code for allocating TFLiteIntArrays is vulnerable to an integer overflow issuehttps://github.com/tensorflow/tensorflow/blob/4ceffae632721e52bf3501b736e4fe9d1221cdfa/tensorflow/lite/c/common.cL24-L27. An attacker can...

PYSEC-2021-533

TensorFlow is an end-to-end open source platform for machine learning. The TFLite code for allocating TFLiteIntArrays is vulnerable to an integer overflow issuehttps://github.com/tensorflow/tensorflow/blob/4ceffae632721e52bf3501b736e4fe9d1221cdfa/tensorflow/lite/c/common.cL24-L27. An attacker can...