CVE-2024-34627

Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

CVE-2024-34627

Out-of-bounds read in parsing implemention in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

CVE-2024-34626

Out-of-bounds read in applying own binary in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially read memory...

CVE-2024-34624

Summary: CVE-2024-34624 is an out-of-bounds read in Samsung Notes when applying paragraphs, affecting versions prior to 4.4.21.62. The issue allows local attackers to potentially read memory. Affected product/versions: Samsung Notes (before 4.4.21.62). Root cause (as described): Out-of-bounds rea...

PT-2024-26042 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.21.62 Description: The issue is related to an out-of-bounds read in applying connection points, which could allow local attackers to potentially read memory. Recommendations: For versions prior to 4.4.21.62...

PT-2024-26041 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.21.62 Description: The issue is related to an out-of-bounds read in applying paragraphs, which allows local attackers to potentially read memory. Recommendations: For versions prior to 4.4.21.62, update to...

The vulnerability of the tpm_tis_spi_init() function in the Linux operating system’s TPM driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tpmtisspiinit function in the drivers/char/tpm/tpmtisspimain.c file of the Trusted Platform Module TPM driver for the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the...

PT-2024-26049 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.21.62 Description: The issue is related to an out-of-bounds read that occurs when applying a new binary. This could potentially allow local attackers to read memory. Recommendations: For versions prior to...

PT-2024-26046 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.21.62 Description: The issue is related to an out-of-bounds read in applying binary with text common object. This could potentially allow local attackers to read memory. Recommendations: For versions prior ...

PT-2024-26045 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.21.62 Description: The issue is related to an out-of-bounds read in applying binary with path, which allows local attackers to potentially read memory. Recommendations: For versions prior to 4.4.21.62, upda...

The vulnerability of the bond_option_arp_ip_targets_set() function of the Linux kernel network component, which allows a hacker to compromise the confidentiality and accessibility of protected information

The vulnerability of the bondoptionarpiptargetsset function in the kernel networking component of the drivers/net/bonding/bondoptions.c module in the Linux operating system is related to reading memory beyond the bounds of the allocated buffer. Exploiting this vulnerability could allow an attacke...

AMD SEV-SNP 安全漏洞

AMD SEV-SNP is a secure encrypted virtualization firmware from UltraMicroelectronics AMD. A single key is used to encrypt system memory. AMD SEV-SNP suffers from a security vulnerability that stems from an improper restriction on write operations causing a malicious hypervisor to overwrite the...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that originates in the net:txgbe module when using MSI/INTx interrupts, where shared interrupts are still processed during...

Medium: krb5

Issue Overview: krb5: GSS message token handling CVE-2024-37370 In MIT Kerberos 5 aka krb5 before 1.21.3, an attacker can cause invalid memory reads during GSS message token handling by sending message tokens with invalid length fields. CVE-2024-37371 Affected Packages: krb5 Note: This advisory i...

DEBIAN-CVE-2022-48806

In the Linux kernel, the following vulnerability has been resolved: eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX Commit effa453168a7 "i2c: i801: Don't silently correct invalid transfer size" revealed that ee1004eepromread did not properly limit how many bytes to read at once. In particular...

Relating IntelliCache and In-memory Read Caching

Introduced in XenServer 5.6 SP1, IntelliCache is designed to reduce the volume of storage I/O hitting the network and the storage repository SR shared with other hosts. Introduced in XenServer 6.5, in-memory read-caching is designed to reduce the volume of storage I/O hitting an SR and reduce I/O...

ruby: Arbitrary memory address read vulnerability with Regex search

A flaw was found in Ruby. If attacker-supplied data is provided to the Ruby regex compiler, it is possible to extract arbitrary heap data relative to the start of the text, including pointers and sensitive strings...

openSUSE: Security Advisory for krb5 (SUSE-SU-2024:2303-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DEBIAN-CVE-2024-39487

In the Linux kernel, the following vulnerability has been resolved: bonding: Fix out-of-bounds read in bondoptionarpiptargetsset In function bondoptionarpiptargetsset, if newval-string is an empty string, newval-string+1 will point to the byte after the string, causing an out-of-bound read. BUG:...