Pillow Resource Management Error Vulnerability

Versions of Pillow prior to 13.0.0 have a resource management vulnerability. This vulnerability arises when ImagingScaleAffine encounters a failure in selective memory allocation during operations involving Transform.EXTENT or Transform.AFFINE. As a result, image memory is released twice, and und...

Linux Kernel Security Vulnerabilities

The Linux kernel version 3.1 contains security vulnerabilities. These vulnerabilities stem from the fixedrateidx field in the debugfs file, which does not validate the fixed rate index written there. This can lead to out-of-bound array indexing and damage to adjacent kernel memory...

Grigory Chudov’s buffer error vulnerability

Grigory Chudov’s libtta versions 2.3 and earlier have a buffer error vulnerability. This vulnerability arises from the lack of header checks that reject zero audio channels. An attacker can create a specially crafted .tta file that declares zero audio channels, causing the application to access...

gstreamer1-plugins-bad-free Buffer Error Vulnerability

The gstreamer1-plugins-bad-free vulnerability involves a buffer overflow issue. This vulnerability arises from the incorrect calculation of the buffer size for UTF-16LE representations when writing string metadata tags containing BMP-external Unicode characters into ASF containers. This leads to...

ROS-20260928-73-0067

The vulnerability of the imxsckeyaction function in the drivers/input/keyboard/imxsckey.c module of the imxsckey keyboard driver in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability could allow an attacker to damage memory...

FFmpeg vf_floodfill Heap Buffer Overflow DoS

The vulnerability of the vffloodfill video filter in the FFmpeg multimedia library is related to incorrect calculation of the buffer size. Exploiting this vulnerability can allow an attacker to damage memory, cause service failures, or execute arbitrary code...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from svcrdma not checking whether the size of the reply exceeds the pull-up buffer when handling RPC-over-RDMA inline replies. As a result, svcrdmaxblinearize copies data beyond the end of the buffer, causing damage to adjace...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability. This vulnerability stems from the lp8788-charger driver, which refreshes chargerwork before releasing the interrupt. As a result, the interrupt thread may re-enter the queue after the refresh, and the memory may be reclaimed after release. This can...

GNOME GVfs buffer error vulnerability

GNOME GVfs has a buffer error vulnerability. This vulnerability stems from the fact that the SFTP backend of GVfs does not verify the length provided by the server against the allocated buffer size. This can lead to out-of-buffer writes and damage to heap memory, potentially causing denial of...

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the improper order of IRQ requests and the allocation of the powersupply handle in the power...

X.Org X Server security vulnerabilities

X.Org X Server is an X Window system display server developed by the X.Org Foundation. There are security vulnerabilities in X.Org X Server, which stem from the reutilization of freed resources in the XSYNC fence trigger logic. Attackers could exploit these vulnerabilities to cause server crashes...

ONE Input Validation Error Vulnerability

ONE is a high-performance edge-side neural network inference framework developed by Samsung. Versions of ONE prior to 1.30.0 contained a vulnerability related to input validation errors. This vulnerability stemmed from integer overflows during the calculation of the copy size for output tensors,...

Qualcomm Embedded Software Memory Damage

The vulnerability of the IOCTL command implementation in Qualcomm’s embedded software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to damage the memory...

Qualcomm Embedded Software Memory Damage

The vulnerability of the IOCTL command implementation in Qualcomm’s embedded software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to damage the memory...

virtio-win security vulnerabilities

virtio-win is an open-source virtual machine simulation software developed by virtio-win. virtio-win has a security vulnerability, which stems from improper memory management during the reset of VirtIO Block devices. This vulnerability may lead to reuse of freed resources after release, as well a...

Several Apple products have security vulnerabilities

Apple iOS, among others, are products of the American company Apple. Apple iOS is an operating system developed for mobile devices. Apple macOS is a specialized operating system designed for Mac computers. Apple iPadOS is an operating system for iPad tablets. Several of Apple’s products have...

Several AMD products have security vulnerabilities

AMD EPYC and others are products of American semiconductor company AMD. AMD EPYC is a high-performance server processor. Amd Epyc™ Embedded Processors are embedded processors. AMD EPYC Processors are a series of multi-core processors. Several AMD products have security vulnerabilities; these...

CVE-2021-0635

When extracting the incorrectly formatted flv file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product:...

CVE-2021-0636

When extracting the incorrectly formatted avi file, the memory is damaged, the playback interface shows that the video cannot be played, and the log is found to be crashed. This problem may lead to hacker malicious code attacks, resulting in the loss of user rights.Product: Androidversion:...

UBUNTU-CVE-2023-54293

In the Linux kernel, the following vulnerability has been resolved: bcache: fixup btreecachewait list damage We get a kernel crash about "listadd corruption. next-prev should be prev ffff9c801bc01210, but was ffff9c77b688237c. next=ffffae586d8afe68." crash struct listhead 0xffff9c801bc01210 struc...