CVE-2023-31307

Improper validation of array index in Power Management Firmware PMFW may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service...

CVE-2023-31307

CVE-2023-31307 involves improper validation of an array index in Power Management Firmware (PMFW), allowing a local, privileged attacker to trigger an out-of-bounds memory read and potentially cause a denial of service. The issue is documented across multiple sources, referencing PMFW as the vuln...

kernel: scsi: qedi: Fix crash while reading debugfs attribute

In the Linux kernel, the following vulnerability has been resolved: scsi: qedi: Fix crash while reading debugfs attribute The qedidbgdonotrecovercmdread function invokes sprintf directly on a user pointer, which results into the crash. To fix this issue, use a small local stack buffer for sprintf...

PT-2024-41547

Уязвимость программных продуктов просмотра и редактирования PDF-файлов Acrobat DC, Acrobat Reader DC, Acrobat 2024, Acrobat 2020, Acrobat Reader 2020 связана с чтением за границами буфера памяти. Эксплуатация уязвимости может позволить нарушителю раскрыть защищаемую информацию...

CVE-2023-31307: Improper Validation of Array Index

Improper validation of array index in Power Management Firmware PMFW may allow a privileged attacker to cause an out-of-bounds memory read within PMFW, potentially leading to a denial of service...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the rpctensor structure. An attacker can read arbitrary memory addresses by manipulating the data pointer. PoC from pwn import ALLOCBUFFER = 0 GETALIGNMENT = 1 GETMAXSIZE = 2 BUFFERGETBASE = 3 FREEBUFFER = 4...

openssl: X.400 address type confusion in X.509 GeneralName

A type confusion vulnerability was found in OpenSSL when OpenSSL X.400 addresses processing inside an X.509 GeneralName. When CRL checking is enabled for example, the application sets the X509VFLAGCRLCHECK flag, this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call,...

hw: cpu: intel: Native Branch History Injection (BHI)

A flaw was found in some Intel CPUs where mitigations for the Spectre V2/BHI vulnerability were incomplete. This issue may allow an attacker to read arbitrary memory, compromising system integrity and exposing sensitive information...

CVE-2024-34630

Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

CVE-2024-34625

Out-of-bounds read in applying connection point in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

CVE-2024-34626

Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

CVE-2024-34626

Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

CVE-2024-34631

Out-of-bounds read in applying new binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

CVE-2024-34630

Out-of-bounds read in applying own binary with textbox in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

CVE-2024-34628

Out-of-bounds read in applying binary with path in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

CVE-2024-34627

Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

CVE-2024-34627

Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

CVE-2024-34626

Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

CVE-2024-34624

Summary: CVE-2024-34624 is an out-of-bounds read in Samsung Notes when applying paragraphs, affecting versions prior to 4.4.21.62. The issue allows local attackers to potentially read memory. Affected product/versions: Samsung Notes (before 4.4.21.62). Root cause (as described): Out-of-bounds rea...

PT-2024-26046 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.21.62 Description: The issue is related to an out-of-bounds read in applying binary with text common object. This could potentially allow local attackers to read memory. Recommendations: For versions prior ...