For more DirectX kernel vulnerability analysis-vulnerability warning-the black bar safety net

Operating systemthe kernel, is often every well-known vulnerability is the use of chain final goal. Throughout the years of Zero Day Initiative, ZDI）Pwn2Own contest relates to the vulnerability, in fact, it can be found in this law. For a long time, the Windows kernel has always been to attack th...

UBUNTU-CVE-2018-20095

An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...

CVE-2018-20095

An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...

CVE-2018-20095

An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...

CVE-2018-20095

An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...

CVE-2018-20095

An issue was discovered in EnsureCapacity in Core/Ap4Array.h in Bento4 1.5.1-627. Crafted MP4 input triggers an attempt at excessive memory allocation, as demonstrated by mp42hls...

CVE-2018-20095

CVE-2018-20095 affects Bento4 1.5.1-627, where a bug in EnsureCapacity within Core/Ap4Array.h can trigger excessive memory allocation on crafted MP4 input (e.g., mp42hls). The vulnerability is tied to the AP4_Array::EnsureCapacity routine, leading to potential denial of service or resource exhaus...

From DirectX to the Windows Kernel--a few of the CVE vulnerability analysis-vulnerability warning-the black bar safety net

One, Foreword Operating systemthe kernel is each vulnerability the use of chain final goal, we can view the Zero Day Initiative ZDI Pwn2Own calendar year, race, and understand this aspect of the content. Windows kernel has always been the attacker keen to target, my favorite is the abuse of the...

Design/Logic Flaw

In FreeBSD before 11.2-STABLEr340854 and 11.2-RELEASE-p5, the NFS server lacks a bounds check in the READDIRPLUS NFS request. Unprivileged remote users with access to the NFS server can cause a resource exhaustion by forcing the server to allocate an arbitrarily large memory allocation...

Heap-based Buffer Over-read

libsndfile.so is vulnerable to heap-based buffer over-read. The vulnerability exists because wavwriteheader in wav.c does not properly handle heap memory allocation, allowing a over-read on address 0x61200000be50...

Denial Of Service (DoS)

libcroco-0.6.so is vulnerable to denial of service. A memory allocation error in the crtknzrparsecomment function in cr-tknzr.c allows a remote attacker to cause a denial of service condition via a crafted CSS file...

CVE-2018-11918

CVE-2018-11918 affects CAF Android kernel builds (Android for MSM, Firefox OS for MSM, QRD Android) where memory allocated during probe is released by the kernel on error. The description and connected records confirm the issue resides in the Linux kernel handling of probe failures, with no expli...

CVE-2018-11918

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, memory allocated is automatically released by the kernel if the 'probe' function fails with an error code...

Code injection

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, memory allocated is automatically released by the kernel if the 'probe' function fails with an error code...

Yi Technology Home Camera CRCDec Denial Of Service (CVE-2018-3935)

A denial of service vulnerability exists in the Yi Home Camera. Successful exploitation of this vulnerability could allow a remote attacker to allocate unlimited memory, resulting in denial of service...

PT-2018-2289 · Systemd +5 · Systemd-Journal-Remote +6

Name of the Vulnerable Software and Affected Versions: systemd-journald versions through v240 systemd-journal-remote versions through v240 Description: The issue is caused by an unbounded memory allocation in the systemd-journald and systemd-journal-remote binary system, which can lead to a stack...

PT-2020-6125 · Google +9 · Libwebp +9

Name of the Vulnerable Software and Affected Versions: libwebp versions prior to 1.0.1 Description: A flaw in libwebp can cause excessive memory allocation when reading a file, leading to a threat to service availability. The vulnerability is related to uncontrolled resource consumption and can b...

PT-2019-1674 · Red Hat +2 · Elfutils +2

Name of the Vulnerable Software and Affected Versions: elfutils versions 0.174 Description: The issue is related to the function read long names in the elfutils utility for modifying and analyzing ELF binary files. It involves excessive memory allocation, which can be exploited by remote attacker...

MGASA-2018-0447 Updated mutt packages fix security vulnerability

It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this to execute arbitrary code CVE-2018-14350, CVE-2018-14352, CVE-2018-14354, CVE-2018-14359, CVE-2018-14358, CVE-2018-14353 ,CVE-2018-14357. It was discovered that Mutt incorrectly handled certain...

Updated mutt packages fix security vulnerability

It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this to execute arbitrary code CVE-2018-14350, CVE-2018-14352, CVE-2018-14354, CVE-2018-14359, CVE-2018-14358, CVE-2018-14353 ,CVE-2018-14357. It was discovered that Mutt incorrectly handled certain...