CVE-2023-22396

An Uncontrolled Resource Consumption vulnerability in TCP processing on the Routing Engine RE of Juniper Networks Junos OS allows an unauthenticated network-based attacker to send crafted TCP packets destined to the device, resulting in an MBUF leak that ultimately leads to a Denial of Service Do...

CVE-2022-23813: Improper Restriction of Operations within the Bounds of a Memory Buffer

The software interfaces to ASP and SMU may not enforce the SNP memory security policy resulting in a potential loss of integrity of guest memory in a confidential compute environment...

Siemens Solid Edge before V2023 MP1

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Avast Script Shield Buffer Overflow DoS

The vulnerability of the detection and prevention mechanism of Avast Script Shield lies in the fact that the operation escapes the buffer in memory during the loading of the aswjsflt.dll library. Exploiting this vulnerability can allow a malicious actor to bypass the sandbox’s security mechanisms...

CVE-2022-2584: Improper Restriction of Operations within the Bounds of a Memory Buffer

The dag-pb codec can panic when decoding invalid blocks...

Adobe Illustrator Heap Buffer Overflow Info Disclosure

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

Siemens SIMATIC and SINAMICS Software Code Execution

The vulnerability of Siemens SIMATIC and SINAMICS software products arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Qualcomm Snapdragon Vulnerability Information Disclosure System Failure

The vulnerabilities of Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IoT, Snapdragon Industrial IoT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables software are due to operations occurring outside of the buffer in memory. Exploiting these...

Adobe Illustrator Heap Buffer Overflow Info Disclosure

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created file...

CVE-2022-31740: Improper Restriction of Operations within the Bounds of a Memory Buffer

On arm64, WASM code could have resulted in incorrect assembly generation leading to a register allocation problem, and a potentially exploitable crash. This vulnerability affects Thunderbird 91.10, Firefox 101, and Firefox ESR 91.10...

Linux driver Heap Buffer Overflow DoS

The vulnerability in the driver drivers/usb/mon/monbin.c of Linux operating systems arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

exploits

Blog Post https://blog.as...

NewStart CGSL CORE 5.04 / MAIN 5.04 : rsyslog Vulnerability (NS-SA-2022-0103)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has rsyslog packages installed that are affected by a vulnerability: - Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is use...

CVE-2022-20601: Improper Restriction of Operations within the Bounds of a Memory Buffer

Product: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/A...

CVE-2022-20602: Improper Restriction of Operations within the Bounds of a Memory Buffer

Product: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/A...

CVE-2022-20599: Improper Restriction of Operations within the Bounds of a Memory Buffer

In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

CVE-2022-20560: Improper Restriction of Operations within the Bounds of a Memory Buffer

Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A...

CVE-2022-20570: Improper Restriction of Operations within the Bounds of a Memory Buffer

Product: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/A...

CVE-2022-42844: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2. An app may be able to break out of its sandbox...

CVE-2022-42846: Improper Restriction of Operations within the Bounds of a Memory Buffer

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2. Parsing a maliciously crafted video file may lead to unexpected system termination...