CVE-2023-43788

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system...

CVE-2023-43788 Libxpm: out of bounds read in xpmcreatexpmimagefrombuffer()

A vulnerability was found in libXpm due to a boundary condition within the XpmCreateXpmImageFromBuffer function. This flaw allows a local attacker to trigger an out-of-bounds read error and read the contents of memory on the system...

PT-2023-6398 · Siemens · Tecnomatix Plant Simulation

Name of the Vulnerable Software and Affected Versions: Tecnomatix Plant Simulation V2201 versions prior to V2201.0009 Tecnomatix Plant Simulation V2302 versions prior to V2302.0003 Description: The issue is related to an out of bounds read past the end of an allocated structure while parsing...

glog:fuzz_demangle: Crash in google::ParseTemplateArg

Project: https://github.com/google/glog.git Detailed Report: https://oss-fuzz.com/testcase?key=4933329297997824 Project: glog Fuzzing Engine: libFuzzer Fuzz Target: fuzzdemangle Job Type: libfuzzerasanglog Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fff394450ef Crash State:...

D-Link DIR-X3260 prog.cgi Code Execution

The vulnerability of the prog.cgi component in D-Link DIR-X3260 Wi-Fi routers involves reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

SUSE CVE-2023-43785

A vulnerability was found in libX11 due to a boundary condition within the XkbReadKeySyms function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system...

GLSA-202310-03 : glibc: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202310-03 glibc: Multiple vulnerabilities - An issue was discovered in the GNU C Library glibc 2.36. When the syslog function is passed a crafted input string larger than 1024 bytes, it reads uninitialized memory from the heap and...

UBUNTU-CVE-2023-43785

A vulnerability was found in libX11 due to a boundary condition within the XkbReadKeySyms function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system...

PT-2023-6218

Name of the Vulnerable Software and Affected Versions libXpm affected versions not specified Description The issue is related to a boundary condition in libXpm, which can cause an out-of-bounds read error. This can allow a local user to read contents of memory on the system, potentially leading t...

PT-2023-6178

Name of the Vulnerable Software and Affected Versions libXpm affected versions not specified Description The issue is related to a boundary condition within the XpmCreateXpmImageFromBuffer function of the libXpm library, which can lead to an out-of-bounds read error. This allows a local attacker ...

PT-2024-13298

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.11 Linux kernel versions through 6.8.0 Description The issue allows a physically proximate attacker to read kernel memory by mounting a filesystem and then leveraging local access to trigger an out-of-bounds...

CVE-2023-40436

The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14. An attacker may be able to cause unexpected system termination or read kernel memory...

Apple macOS Security Breach

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which originates from an attacker who may be able to cause the system to unexpectedly terminate or read kernel memory...

PT-2023-27453 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue was addressed with improved bounds checks. An attacker may be able to cause unexpected system termination or read kernel memory. Recommendations: For versions prior to 14, update to macOS Sono...

Important: postgresql

Issue Overview: A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption. CVE-2021-23222 A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the defau...

Important: postgresql

Issue Overview: A man-in-the-middle attacker can inject false responses to the client's first few queries, despite the use of SSL certificate verification and encryption. CVE-2021-23222 A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the defau...

openssl: X.400 address type confusion in X.509 GeneralName

A type confusion vulnerability was found in OpenSSL when OpenSSL X.400 addresses processing inside an X.509 GeneralName. When CRL checking is enabled for example, the application sets the X509VFLAGCRLCHECK flag, this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call,...

GNU Binutils parse_module Buffer Overflow DoS

The vulnerability of the parsemodule function in the GNU Binutils development environment is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure or exert other adverse effects...

PT-2023-6798

Name of the Vulnerable Software and Affected Versions libX11 affected versions not specified Description A vulnerability in the libX11 library is related to a boundary condition within the XkbReadKeySyms function, allowing a local user to trigger an out-of-bounds read error and read the contents ...

An issue was discovered in lldpd before 1.0.17. By crafting a CDP PDU packet with specific CDP_TLV_ADDRESSES TLVs a malicious actor can remotely force the lldpd daemon to perform an out-of-bounds read on heap memory. This occurs in cdp_decode in daemon/protocols/cdp.c.

...