glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits

An integer wraparound was discovered in glib due to passing a 64 bit sized value to function gmemdup which accepts a 32 bits number as argument. An attacker may abuse this flaw when an application linked against the glib library uses gbytesnew function or possibly other functions that use gmemdup...

glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits

An integer wraparound was discovered in glib due to passing a 64 bit sized value to function gmemdup which accepts a 32 bits number as argument. An attacker may abuse this flaw when an application linked against the glib library uses gbytesnew function or possibly other functions that use gmemdup...

in mcfriend99/bird

✍️ Description Heap-based 1-byte write violation. Certain programs can cause the parser/syntax-checker to write out of bounds. The below program writes a single byte out of bounds. 🕵️‍♂️ Proof of Concept Program: var a = 'outer' def test var a = 'inner' echo 'It works! $a' echo a echo test test def...

Vmware VMware Workstation 和 Horizon Client 缓冲区错误漏洞

VMware Workstation and VMware Horizon Client are both products of Vmware, Inc.VMware Workstation is a suite of virtual machine software. VMware Workstation is a suite of virtual machine software that provides the ability to run multiple virtual machines with different operating systems at the sam...

CVE-2021-31321

Telegram Android 7.1.0 2090, Telegram iOS 7.1, and Telegram macOS 7.1 are affected by a Stack Based Overflow in the graysplitcubic function of their custom fork of the rlottie library. A remote attacker might be able to overwrite Telegram's stack memory out-of-bounds on a victim device via a...

EulerOS 2.0 SP8 : grub2 (EulerOS-SA-2021-1875)

According to the versions of the grub2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in grub2 in versions prior to 2.06. Setparamprefix in the menu rendering code performs a length calculation on the assumption th...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. An attacker is able to send a malicious input to cause a memory overflow in ParseAttrValue from nested tensors...

PT-2021-4214 · Texas Instruments · Simplelink

Name of the Vulnerable Software and Affected Versions: Texas Instruments SimpleLink series CC13XX, CC26XX, CC32XX, and MSP432E4 affected versions not specified Description: The issue is caused by an integer overflow in the implementation of the malloc function in the FreeRTOS component of the...

CVE-2021-21529

Dell System Update DSU 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to cause the system to run out of memory by running multiple instances of the vulnerable application...

Important: kernel

Issue Overview: An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be...

dpdk: librte_vhost Integer overflow in vhost_user_set_log_base()

A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhostusersetlogbase could result in a smaller memory map than requested, possibly allowing memory corruption...

EulerOS Virtualization 2.9.1 : cryptsetup (EulerOS-SA-2021-1594)

According to the version of the cryptsetup package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - A vulnerability was found in upstream release cryptsetup-2.2.0 where, there's a bug in LUKS2 format validation code, that is...

Vulnerability of the extract_name() function (rfc1035.c): The DNS server dnsmasq has a vulnerability related to buffer overflow in dynamic memory, allowing an attacker to execute arbitrary code.

The vulnerability of the extractname function rfc1035.c in the dnsmasq DNS server is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Dekart Private Disk Code Issue Vulnerability

Dekart Private Disk is an automated mail processing software from Dekart USA. provides the best AES 256-bit data encryption software for Windows. A code issue vulnerability exists in Dekart Private Disk that originates when a networked system or product performs an operation in memory without...

PT-2021-7373

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description The issue is related to a buffer overflow in the memory of the QEMU hardware emulator. Exploitation of this issue allows an attacker to access confidential data, compromise its integrity, and...

dnsmasq: heap-based buffer overflow in sort_rrset() when DNSSEC is enabled

A flaw was found in dnsmasq. A heap-based buffer overflow was discovered in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buffer overflow with arbitrary da...

The vulnerability in the `FeatureRef::applyValToFeature` function of the Graphite font library in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to trigger a service failure.

The vulnerability of the FeatureRef::applyValToFeature function in the Graphite font library for browsers Firefox, Firefox ESR, and the email client Thunderbird is related to memory buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Google Chrome web browser’s exchange buffer allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s web browser exchange buffer is related to overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:2904-1)

The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-26088: Fixed an improper CAPNETRAW check in NFC socket creation could have been used by local attackers to create raw sockets, bypassing security...

SUSE SLES15 Security Update : kernel (SUSE-SU-2020:3230-1)

The SUSE Linux Enterprise 15 SP2 kernel RT was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2020-25212: Fixed getxattr kernel panic and memory overflow bsc1176381. CVE-2020-25643: Added range checks in pppcpparsecr bsc1177206. CVE-2020-25641:...