CVE-2021-4157

CVE-2021-4157 concerns the Linux kernel NFS subsystem and a memory-bound write flaw. The description in the initial document states an out-of-bounds write of 1–2 bytes could be triggered when using mirroring/replication over NFS, potentially allowing a user with NFS mount access to crash the syst...

CVE-2021-4157

An out of memory bounds write flaw 1 or 2 bytes of memory in the Linux kernel NFS subsystem was found in the way users use mirroring replication of files with NFS. A user, having access to the NFS mount, could potentially use this flaw to crash the system or escalate privileges on the system...

The vulnerability of BIOS microprogramming software in Dell laptops arises from an operation that goes beyond buffer boundaries in memory, allowing a hacker to execute arbitrary code.

The vulnerability of BIOS microprogramming software in Dell laptops arises from operations that occur outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the memory boundaries. This allows attackers to gain unauthorized access to protected information and also cause system failures.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information, as well as cause service failures...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the memory boundaries. This allows attackers to gain unauthorized access to protected information and also cause system failures.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the memory boundaries. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information, as well as cause service failures for the current user...

多款 Apple 产品缓冲区错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system for mobile devices, Apple iPadOS is an operating system for iPad tablets, Apple watchOS is an operating system for smartwatches, and Apple tvOS is an operating system for smartphones. Apple tvOS is a smart TV...

Tenda AC9 Stack Overflow Vulnerability

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 is vulnerable to a stack overflow vulnerability, which stems from the product's NPTR parameter failing to properly handle memory bounds. An attacker could exploit this vulnerability to cause a buffer overflow...

Vim Buffer Overflow Vulnerability (CNVD-2022-20695)

A buffer overflow vulnerability exists in Vim, a UNIX-based editor, which stems from a product src/regexpbt.c file that does not effectively check for memory bounds. An attacker could cause a buffer overflow via this vulnerability...

Tenda AC9 缓冲区错误漏洞

Tenda AC9 is a wireless router from Tenda, China. Tenda AC9 is vulnerable to a stack overflow vulnerability, which stems from the product's NPTR parameter failing to properly handle memory bounds. An attacker could exploit this vulnerability to cause a buffer overflow...

Vim 缓冲区错误漏洞

A buffer overflow vulnerability exists in Vim, a UNIX-based editor, which stems from a product src/regexpbt.c file that does not effectively check for memory bounds. An attacker could cause a buffer overflow via this vulnerability...

virglrenderer 缓冲区错误漏洞

virglrenderer is a VirGL virtual OpenGL renderer. A buffer error vulnerability exists in Virglrenderer that stems from a failure of the product's readtransferdata function to properly handle memory boundaries. An attacker could use this vulnerability to trigger a denial of service and possibly ru...

Tenda Ax12 缓冲区错误漏洞

Tenda Ax12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China.A buffer overflow vulnerability exists in Tenda AX12, which stems from a failure of the sub422CE4 function in the product's goform/setIPv6Status file to properly handle memory bounds. An attacker could exploit this...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A buffer overflow vulnerability exists in the Linux kernel, which stems from the yamsiocdevprivate function in the product/net/hamradio/yam.c file that does not effectively lim...

The vulnerability of the Imf_3_1::LineCompositeTask::execute function in the OpenEXR library allows a hacker to trigger a buffer overflow.

The vulnerability of the Imf31::LineCompositeTask::execute function in the OpenEXR library is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a buffer overflow...

ffjpeg 缓冲区错误漏洞

ffjpeg is a JPEG encoder/decoder. ffjpeg suffers from a buffer overflow vulnerability that stems from a failure of the jfifdecode function in the product/src/jfif.c file to properly handle memory boundaries, which could be exploited by an attacker to cause a denial of service via a special jpeg...

Facebook WhatsApp 缓冲区错误漏洞

Facebook WhatsApp is a suite of mobile applications from Facebook Inc. in the United States that use the Internet to send text messages. The application uses contact information in a smartphone to find contacts using the software to send texts, pictures, etc. WhatsApp Business is the commercial...

CVE-2021-40158

A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2021-34402

NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC, where a user with high privileges might be able to read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service, Information disclosure, loss of Integrity, or...

The vulnerability of the Wi-Fi driver microprogramming software for MediaTek’s MC7603E, MC7610, MC7612, MC7613, MC7615, MC7620, MC7622, MC7628, MC7629, and MC7915 microchips allows a hacker to trigger a service failure.

The vulnerability of the Wi-Fi driver microprogramming software for MediaTek’s MC7603E, MC7610, MC7612, MC7613, MC7615, MC7620, MC7622, MC7628, MC7629, and MC7915 lies in the reading of data outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause servic...

Grok Buffer Overflow Vulnerability

Grok is a regular expression that uses a combination of multiple predefined . A tool used to match split text and map to keywords. Often used to preprocess log data. A buffer overflow vulnerability exists in Grok version 9.5.0, which stems from the product's openhtj2k::T1OpenHTJ2K::decompress...