EUVD-2022-36312

Malicious code in bioql PyPI...

CVE-2021-22684

Tizen RT RTOS version 3.0.GBB is vulnerable to integer wrap-around in functionscalloc and mmzalloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash...

SUSE CVE-2021-47012

In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Fix a use after free in siwallocmr Our code analyzer reported a UAF. In siwallocmr, it calls siwmraddmemmr,... In the implementation of siwmraddmem, mem is assigned to mr-mem and then mem is freed via kfreemem if...

CVE-2022-33269

Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment...

CVE-2022-33269 Integer overflow or wraparound in Core

Memory corruption due to integer overflow or wraparound in Core while DDR memory assignment...

PT-2023-13275 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption caused by integer overflow or wraparound in Core during DDR memory assignment. Recommendations: At the moment, there is no information about a newer...

CVE-2021-28707

PoD operations on misaligned GFNs This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. x86 HVM and PVH guests may be started in populate-on-demand PoD mode, to provide a way for them to later easily have more memory assigne...

CVE-2021-22684

CVE-2021-22684 affects Samsung Tizen RT RTOS 3.0.GBB. It is caused by integer wrap-around in memory allocation helpers calloc and mm_zalloc, leading to improper memory assignment and potential arbitrary memory allocation or a crash. Connected sources confirm the vulnerability and CVE assignment; ...

Microsoft Windows CSRSS SrvDeviceEvent Code Execution (MS11-063; CVE-2011-1967)

A code execution vulnerability has been reported in Windows CSRSS. The vulnerability is due to a CSRSS memory assignment issue. An attacker can exploit this vulnerability by convincing an unsuspecting user to open a malicious executable file. Successful exploitation of this vulnerability may enab...

CVE-2011-1870

Integer overflow in the Client/Server Run-time Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3, and Windows Server 2003 SP2, allows local users to gain privileges or cause a denial of service memory corruption via a crafted application that triggers an incorrect...

CVE-2002-1182

IIS 5.0 and 5.1 allows remote attackers to cause a denial of service crash via malformed WebDAV requests that cause a large amount of memory to be assigned...