PT-2021-28554

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.12.3 Description The issue is related to the removal of the WQ MEM RECLAIM flag from the state workqueue in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations...

PT-2021-24595

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to the removal of the WQ MEM RECLAIM flag from the state workqueue in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2021-28589

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description The issue is related to the removal of the WQ MEM RECLAIM flag from the state workqueue in the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendation...

PT-2021-24560

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.12.3 Description: The issue is related to the removal of the WQ MEM RECLAIM flag from the state workqueue in the Linux Kernel. The actual impact and attack plausibility have not yet been proven...

UBUNTU-CVE-2021-28903

A stack overflow in libyang = v1.0.225 can cause a denial of service through function lyxmlparsemem. lyxmlparseelem function will be called recursively, which will consume stack space and lead to crash...

CVE-2021-3491

A flaw was found in the Linux kernel. The iouring PROVIDEBUFFERS operation allowed the MAXRWCOUNT limit to be bypassed, which led to negative values being used in memrw when reading /proc//mem. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

PT-2021-8024 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an unbalanced device enable/disable in suspend/resume, caused by the removal of pci enable device mem from ixgbe resume in commit 6f82b2558735. This removal led...

PT-2021-4098 · Libyang +2 · Libyang +2

Name of the Vulnerable Software and Affected Versions: libyang versions prior to 1.0.225 Description: The issue is related to a stack overflow in the libyang library, which can cause a denial of service. This occurs due to uncontrolled recursion of the lyxml parse elem function when lyxml parse m...

CVE-2021-26958

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because transmutation to the wrong type can happen after xcb::base::castevent uses std::mem::transmute to return a reference to an arbitrary type...

CVE-2021-26958: Unchecked Return Value

An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because transmutation to the wrong type can happen after xcb::base::castevent uses std::mem::transmute to return a reference to an arbitrary type...

PT-2021-11933 · Libmysofa +1 · Libmysofa +1

Name of the Vulnerable Software and Affected Versions: libmysofa versions 0.5 through 1.1 Description: The issue arises from incorrect handling of input data in the mysofa resampler reset mem function, leading to a heap buffer overflow and the potential overwriting of a large memory block...

PT-2021-27573

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read crash. Technical details include a crash type of Heap-buffer-overflow READ 8 and a crash state...

PT-2021-27979

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow issue has been identified, which can cause a crash. The crash occurs due to a write operation in the heap buffer. The issue is related to the H5MM memcpy, H5D scatter mem,...

PT-2020-22146

Name of the Vulnerable Software and Affected Versions HDF5 affected versions not specified Description A heap buffer overflow issue has been identified, which can cause a crash. The crash occurs in the H5D scatter mem function, and is related to the H5D scatgath read and H5D contig read functions...

PT-2020-22023

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash occurred due to an unknown read issue, as reported by OSS-Fuzz. The crash state involves functions such as mem mapped4 fill rectangle, ngx dc pure...

PT-2020-21949

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read crash has been reported. The crash state includes mem src read, src peek, and src eof. Recommendations At the moment, there is ...

Microsoft Azure Sphere Normal World application /proc/self/mem unsigned code execution vulnerability

Summary A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.05. A specially crafted shellcode can cause a process’ non-writable memory to be written. An attacker can execute a shellcode that modifies the program at runtime v...

CVE-2020-15503

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength occurs without validating T.tlength...

CVE-2020-14059

An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list...

CVE-2020-14059

An issue was discovered in Squid 5.x before 5.0.3. Due to an Incorrect Synchronization, a Denial of Service can occur when processing objects in an SMP cache because of an Ipc::Mem::PageStack::pop ABA problem during access to the memory page/slot management list...