15851 matches found
CVE-2024-12693
Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2024-12693
Out of bounds memory access in V8 in Google Chrome prior to 131.0.6778.204 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is caused by out-of-bounds memory access in V8. An attacker can exploit the vulnerability to execute arbitrary code on the system...
CVE-2024-10972 WinPmem Improper Input Validation vulnerability
Velocidex WinPmem versions 4.1 and below suffer from an Improper Input Validation vulnerability whereby an attacker with admin access can trigger a BSOD with a parallel thread changing the memory’s access right under the control of the user-mode application. This is due to verification only being...
CVE-2024-10972 WinPmem Improper Input Validation vulnerability
Velocidex WinPmem versions 4.1 and below suffer from an Improper Input Validation vulnerability whereby an attacker with admin access can trigger a BSOD with a parallel thread changing the memory’s access right under the control of the user-mode application. This is due to verification only being...
The vulnerability of the MmMapIoSpace function in Ballistix MOD Utility software allows a hacker to increase their privileges.
The vulnerability of the MmMapIoSpace function in Ballistix MOD Utility software is related to access control deficiencies. Exploiting this vulnerability can allow attackers to elevate their privileges to “NT AUTHORITY\SYSTEM” by interacting with physical memory...
The vulnerability of the Snort module of the microprogramming software for Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows a attacker to trigger a service failure.
The vulnerability of the Snort module of the microprogramming software for Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause...
PT-2025-7896
Name of the Vulnerable Software and Affected Versions X.Org and Xwayland affected versions not specified Description An out-of-bounds write flaw was found in the function GetBarrierDevice, which searches for the pointer device based on its device ID. If no matching device ID is found, the code...
CVE-2024-47892
Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...
CVE-2024-47892
CVE-2024-47892 impacts Imagination Technologies’ PowerVR-GPU driver (Imagination hardware) and is described as a use-after-free in the GPU driver memory handling. The problem is in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory, enabling a non-privileged user to perform G...
CVE-2024-47892 GPU DDK - UAF of kernel memory in PMRUnlockPhysAddressesOSMem for on-demand non-4KB PMRs in system memory (UMA)
Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...
CVE-2024-46971
CVE-2024-46971 affects the Imagination GPU Driver. A UAF (use-after-free) in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systems may allow a non-privileged local user to conduct GPU system calls that read and write freed GPU memory. The issue is described as a local impact w...
CVE-2024-46971 GPU DDK - UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systems
Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...
SUSE CVE-2024-47543
GStreamer is a library for constructing graphs of media-handling components. An OOB-read vulnerability has been discovered in qtdemuxparsecontainer function within qtdemux.c. In the parent function qtdemuxparsenode, the value of length is not well checked. So, if length is big enough, it causes t...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-50148)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50148 advisory. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: fix wild-memory- access...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-47757)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47757 advisory. - In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential oob read in...
CBL Mariner 2.0 Security Update: kernel (CVE-2024-53063)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-53063 advisory. - In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: prevent the risk of out o...
CVE-2024-47834
A flaw was found in the GStreamer library. A use-after-free in the Matroska demuxer can cause crashes for certain input files, potentially allowing a malicious actor to trigger an application crash...
