CVE-2022-38696: Improper Restriction of Operations within the Bounds of a Memory Buffer

In BootRom, there's a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38693: Improper Restriction of Operations within the Bounds of a Memory Buffer

In FDL1, there is a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

PT-2025-35466

Name of the Vulnerable Software and Affected Versions: BootRom affected versions not specified Description: A missing payload size check in BootRom could lead to a memory buffer overflow, and does not require additional execution privileges. Recommendations: At the moment, there is no information...

The vulnerability of the software used for developing and executing applications in the ABAP language of SAP NetWeaver Application Server ABAP (BIC Document) allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the software used for developing and executing applications in the ABAP language on the SAP NetWeaver Application Server ABAP BIC Document is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker,...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of payload size checking and could result in a memory buffer overflow...

CVE-2022-38692: Improper Restriction of Operations within the Bounds of a Memory Buffer

In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation. This could lead to memory buffer overflow without requiring additional execution privileges...

Linux Distros Unpatched Vulnerability : CVE-2020-6923

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The HP Linux Imaging and Printing HPLIP software may potentially be affected by memory buffer overflow. CVE-2020-6923 Note that Nessus relies on the presence of...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer in memory, allowing an attacker to cause a service failure.

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading data outside the buffer in memory, allows attackers to exploit the protected information.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

ROS-20250827-09

Vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries. operation outside of the memory buffer. Exploitation of the vulnerability could allow an attacker acting remotely to affect the confidentiality, integrity,...

The vulnerability of the SISF security function in Cisco IOS and Cisco IOS XE operating systems allows a hacker to trigger a service failure.

The vulnerability of the SISF security function in Cisco IOS and Cisco IOS XE operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading data outside the buffer in memory, allows attackers to exploit the protected information.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading data outside the buffer in memory, allows attackers to exploit the protected information.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to reading data outside the buffer in memory, allows attackers to exploit the protected information.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the formaddUserName() function (/goform/addUserName) in the Tenda CH22 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formaddUserName function /goform/addUserName of the Tenda CH22 router’s software lies in the fact that the operation may be executed outside the buffer in memory when processing the Password parameter. Exploiting this vulnerability could allow an attacker to compromise th...

The vulnerability of the Linux operating system’s kernel allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the Linux operating system’s kernel is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and accessibility of the protected information...

The vulnerability of the formSetSchedLed function in the /goform/SetLEDCfg file of the Tenda AC router’s microprogramming software allows a attacker to execute arbitrary code.

The vulnerability of the formSetSchedLed function in the /goform/SetLEDCfg file of the Tenda AC router microprogramming system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

CVE-2025-38669 Revert "drm/gem-shmem: Use dma_buf from GEM object instance"

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/gem-shmem: Use dmabuf from GEM object instance" This reverts commit 1a148af06000e545e714fe3210af3d77ff903c11. The dmabuf field in struct drmgemobject is not stable over the object instance's lifetime. The field become...

A vulnerability in the firmware of AMD graphics processors’ microprogramming system, related to the execution of operations outside the buffer in memory, allows attackers to access confidential information.

The vulnerability in the firmware of AMD graphics processors’ microprogramming system relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

The vulnerability of the `compilePassOpcode(compileTranslationTable.c)` function in the Liblouis translator, related to the execution of operations outside of the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the compilePassOpcodecompileTranslationTable.c function in the Liblouis translator is related to the execution of an operation outside of the buffer in memory. Exploiting this vulnerability could allow a attacker to execute arbitrary code...