CVE-2024-34632

CVE-2024-34632 describes an out-of-bounds read in the uuid parsing code of Samsung Notes prior to version 4.4.21.62. The vulnerability allows a local attacker to access unauthorized memory. Affected product: Samsung Notes (on Samsung mobile devices). Root cause is an out-of-bounds read in uuid pa...

CVE-2024-34630

Samsung Notes (pre-4.4.21.62) is affected by CVE-2024-34630 due to an out-of-bounds read when applying the software’s own binary with a textbox, potentially allowing a local attacker to read memory. Affected component: Samsung Notes binary/textbox handling. Root cause: out-of-bounds read; impact:...

CVE-2024-34625

Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

kernel: hwmon: (mlxreg-fan) Return non-zero value when fan current state is enforced from sysfs

A vulnerability was found in the Linux kernel's hwmon subsystem, specifically in the mlxreg-fan driver. The issue arises when the driver’s sysfs interface for controlling fan speed does not properly handle cases where the requested minimum fan speed exceeds the maximum allowable value. When the...

PT-2024-26048 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.21.62 Description: The issue is related to an out-of-bounds read in Samsung Notes when applying its own binary with a textbox. This could potentially allow local attackers to read memory. Recommendations: F...

The vulnerability of the sync_print_obj() function in the dma-buf driver of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the syncprintobj function in the drivers/dma-buf/syncdebug.c file of the Linux kernel’s DMA-buf driver is related to the use of incorrect synchronization functions. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the xlog_do_recovery_pass() function in the file system xfs of the Linux operating system allows a attacker to compromise the accessibility of protected information.

The vulnerability of the xlogdorecoverypass function in the fs/xfs/xfslogrecover.c file of the Linux kernel’s file system xfs is related to access to memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

PT-2024-26044 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.21.62 Description: The issue is related to an out-of-bounds read in the parsing implementation, which could allow local attackers to potentially read memory. Recommendations: For versions prior to 4.4.21.62...

CVE-2024-7532

Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

CVE-2024-7532

Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

DEBIAN-CVE-2024-7532

Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

CVE-2024-7532

Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

CVE-2024-7532

Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

CVE-2024-7532

Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

CVE-2024-7532

CVE-2024-7532 describes an out-of-bounds memory access in ANGLE within Google Chrome/Chromium, enabling potential heap corruption via a crafted HTML page. Affected software/versions: Chrome/Chromium prior to 127.0.6533.99. Impact per sources: critical severity with network attack vector and user ...

SUSE CVE-2024-6990

Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Critical...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 5 security fixes: 350528343 Critical CVE-2024-7532: Out of bounds memory access in ANGLE. Reported by wgslfuzz on 2024-07-02 353552540 High CVE-2024-7533: Use after free in Sharing. Reported by lime@limeSec from TIANGONG Team of Legendsec at QI-ANXIN...

Google Chrome < 127.0.6533.99 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 127.0.6533.99. It is, therefore, affected by multiple vulnerabilities as referenced in the 202408stable-channel-update-for-desktop advisory. - Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a...

Stable Channel Update for Desktop

The Stable channel has been updated to 127.0.6533.99/.100 for Windows, Mac and 127.0.6533.99 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

Mozilla Firefox Security Advisory (MFSA2024-33) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2024-33. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...