CVE-2022-23747

CVE-2022-23747 affects Sony Xperia series 1, 5, and Pro. Connected PT-2022-4245 details a buffer/overrun in the ALAC decoder (libMtkOmxAlacDec.so) caused by missing validation of the number of frames during music playback, leading to out-of-bounds memory access and potential remote arbitrary code...

Fixed CVE-2022-2581 in vim

CVE-2022-2581: fix illegal memory access when pattern starts with illegal byte...

CLSA-2022-1660762683 Fixed CVE-2022-2581 in vim

CVE-2022-2581: fix illegal memory access when pattern starts with illegal byte...

CLSA-2022-1660761469 Fix CVE(s): CVE-2022-2581

SECURITY UPDATE: Illegal memory access when pattern starts with illegal byte - debian/patches/CVE-2022-2581.patch: Do not match a character with an illegal byte - CVE-2022-2581...

CVE-2022-2816

An out-of-bounds read vulnerability was found in Vim in the checkvim9unlet function in the vim9cmds.c file. This issue occurs because of invalid memory access when compiling the unlet command when a specially crafted input is processed. This flaw allows an attacker who can trick a user into openi...

CVE-2022-2819

A flaw was found in vim. The vulnerability occurs due to illegal memory access and leads to a heap buffer overflow vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s scriptin are not...

SUSE-SU-2022:2806-1 Security update for open-iscsi

This update for open-iscsi fixes the following issues: Fixed various vulnerabilities in the embedded TCP/IP stack bsc1179908: - CVE-2020-13987: Fixed an out of bounds memory access when calculating the checksums for IP packets. - CVE-2020-13988: Fixed an integer overflow when parsing TCP MSS...

The vulnerability of the packet_recvmsg() function in the Android operating system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the packetrecvmsg function in the Android operating system’s kernel is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GLSA-202208-29 : Nokogiri: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-29 Nokogiri: Multiple Vulnerabilities - Nokogiri is a Rubygem providing HTML, XML, SAX, and Reader parsers with XPath and CSS selector support. In Nokogiri before version 1.11.0.rc4 there is an XXE vulnerability. XML Schema...

CVE-2022-2612

Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page...

PT-2022-6092

Name of the Vulnerable Software and Affected Versions Arm Mali GPU kernel driver versions Bifrost r0p0 through r39p0 Arm Mali GPU kernel driver versions Valhall r19p0 through r39p0 Arm Mali GPU kernel driver versions Midgard r4p0 through r32p0 Description The issue is related to the mishandling o...

Denial Of Service (DoS)

wavpack:sid is vulnerable to denial of service. A null pointer dereference bug due to the signal caused by a WRITE memory access. ==84257==Hint: address points to the zero page. 0 0x561b47a970c5 in main cli/wvunpack.c:834 1 0x7efc4f5c0082 in libcstartmain /lib/x8664-linux-gnu/libc.so.6+0x24082 2...

kernel: kernel info leak issue in pfkey_register

A vulnerability was found in the pfkeyregister function in net/key/afkey.c in the Linux kernel. This flaw allows a local, unprivileged user to gain access to kernel memory, leading to a system crash or a leak of internal kernel information...

CVE-2022-2598

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to a heap buffer overflow vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s scriptin are not...

CVE-2022-2581

A flaw was found in vim. The vulnerability occurs due to illegal memory access and leads to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s scriptin are not recommended to run...

CVE-2022-2571

A flaw was found in vim. The vulnerability occurs due to illegal memory access and leads to a heap buffer overflow vulnerability. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s scriptin are not...

CVE-2022-2580

A flaw was found in vim. The vulnerability occurs due to illegal memory access and leads to a heap buffer overflow. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution. Mitigation Untrusted vim scripts with -s scriptin are not recommended to run...

Out-of-bounds Write

vim:sid is vulnerable to Out-of-bounds Write. It causes a memory access error when substitute expression changes window...

vim: out-of-bounds write in vim_regsub_both() in regexp.c

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to an out-of-bounds write vulnerability in the vimregsubboth function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution...

vim: Out-of-bounds Write

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to an out-of-bounds write vulnerability in the excmds function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution...