Lucene search
+L

416 matches found

CNVD
CNVD
added 2022/04/26 12:00 a.m.44 views

radare2 out-of-bounds read vulnerability (CNVD-2022-38159)

radare2 is a set of libraries and tools for working with binary files. radare2 has a security vulnerability that could be exploited by an attacker to read sensitive information from other memory locations or cause a crash...

7.1CVSS2.5AI score0.008EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2022/04/24 9:15 p.m.29 views

CVE-2022-1451

Out-of-bounds Read in rbinjavaconstantvalueattrnew function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a...

7.1CVSS7.1AI score0.008EPSS
SaveExploits1References3
Prion
Prion
added 2022/04/24 9:15 p.m.19 views

Out-of-bounds

Out-of-bounds Read in rbinjavaconstantvalueattrnew function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a...

5.8CVSS6.7AI score0.008EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/04/24 8:50 p.m.28 views

CVE-2022-1451 Out-of-bounds Read in r_bin_java_constant_value_attr_new function in radareorg/radare2

Out-of-bounds Read in rbinjavaconstantvalueattrnew function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a...

7.1CVSS7AI score
SaveExploits0References4
Debian CVE
Debian CVE
added 2022/04/24 8:50 p.m.79 views

CVE-2022-1451

Out-of-bounds Read in rbinjavaconstantvalueattrnew function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a...

7.1CVSS7AI score0.008EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2022/04/22 3:15 p.m.20 views

CVE-2022-1437

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash...

7.1CVSS6.8AI score0.00757EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2022/04/22 2:00 p.m.63 views

CVE-2022-1437

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash...

7.1CVSS5.6AI score0.00757EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2022/04/18 1:15 a.m.35 views

CVE-2022-1383

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash...

6.1CVSS6.6AI score0.00739EPSS
SaveExploits1References3
AlpineLinux
AlpineLinux
added 2022/04/17 12:05 a.m.79 views

CVE-2022-1383

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a crash...

6.1CVSS5.9AI score0.00739EPSS
SaveExploits1
NVD
NVD
added 2022/04/04 8:15 p.m.18 views

CVE-2021-32994

Softing OPC UA C++ SDK Software Development Kit versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locatio...

7.5CVSS0.01694EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/04 8:15 p.m.24 views

Memory corruption

Softing OPC UA C++ SDK Software Development Kit versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locatio...

5CVSS7.4AI score0.01694EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/04 7:45 p.m.35 views

CVE-2021-32994 Softing OPC-UA C++ SDK Improper Restriction of Operations within the Bounds of a Memory Buffer

Softing OPC UA C++ SDK Software Development Kit versions from 5.59 to 5.64 exported library functions don't properly validate received extension objects, which may allow an attacker to crash the software by sending a variety of specially crafted packets to access several unexpected memory locatio...

7.5CVSS7.6AI score0.01694EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/03/01 4:31 a.m.40 views

CVE-2021-43619

Trusted Firmware M 1.4.x through 1.4.1 has a buffer overflow issue in the Firmware Update partition. In the IPC model, a psafwuwrite caller from SPE or NSPE can overwrite stack memory locations...

8.1AI score0.0042EPSS
SaveExploits1References4
Veracode
Veracode
added 2022/02/21 8:13 a.m.21 views

Out-of-Bounds Read

mruby is vulnerable to out-of-bound read. The vulnerability exists due to a lack of sanitization in the vm.c file, allowing attackers to read sensitive information using memory locations or crash the system...

7.1CVSS3.9AI score0.00992EPSS
SaveExploits1References3Affected Software1
Veracode
Veracode
added 2022/02/18 8:04 a.m.22 views

Out-of-Bounds Read

mruby is vulnerable to out-of-bound read. The vulnerability exists due to a lack of sanitization in the vm.c file, allowing attackers to read sensitive information using memory locations or crash the system...

9.1CVSS3.9AI score0.01637EPSS
SaveExploits1References5Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/02/13 12:00 a.m.30 views

EulerOS Virtualization 3.0.6.0 : libtomcrypt (EulerOS-SA-2022-1079)

According to the versions of the libtomcrypt package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In LibTomCrypt through 1.18.2, the derdecodeutf8string function in derdecodeutf8string.c does not properly detect certain...

9.1CVSS7AI score0.03108EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/01/14 12:00 a.m.78 views

Binaryen Stack Buffer Overflow Vulnerability

Binaryen is a compiler infrastructure and toolchain library for WebAssembly written in C++. Binaryen has a stack buffer overflow vulnerability in version 103, which originates when the software printf public function performs an operation in memory, and can be exploited by an attacker to cause...

5.5CVSS5.5AI score0.00679EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2022/01/06 10:11 p.m.36 views

Use of Uninitialized Resource in messagepack-rs.

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializebinary may read from uninitialized memory locations...

9.8CVSS1.7AI score0.01191EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2021/12/27 12:15 a.m.21 views

CVE-2021-45692

An issue was discovered in the messagepack-rs crate through 2021-01-26 for Rust. deserializeextensionothers may read from uninitialized memory locations...

9.8CVSS0.01372EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/27 12:15 a.m.16 views

CVE-2021-45688

An issue was discovered in the ash crate before 0.33.1 for Rust. util::readspv may read from uninitialized memory locations...

9.8CVSS6.7AI score
SaveExploits0References2
Rows per page
Query Builder