SUSE CVE-2013-1723

The NativeKey widget in Mozilla Firefox before 24.0, Thunderbird before 24.0, and SeaMonkey before 2.21 processes key messages after destruction by a dispatched event listener, which allows remote attackers to cause a denial of service application crash by leveraging incorrect event usage after...

yajl: heap-based buffer overflow when handling large inputs due to an integer overflow

A flaw was found in the YAJL library in the way it reallocates a memory buffer to store more data. A very large input causes the value used to calculate the buffer size to overflow, resulting in a heap-based buffer overflow...

kernel: regmap: Fix possible double-free in regcache_rbtree_exit()

In the Linux kernel, the following vulnerability has been resolved: regmap: Fix possible double-free in regcacherbtreeexit In regcacherbtreeinserttoblock, when 'present' realloc failed, the 'blk' which is supposed to assign to 'rbnode-block' will be freed, so 'rbnode-block' points a freed memory,...

The vulnerability of the CODESYS Runtime Toolkit execution environment arises from overflowing buffers in dynamic memory, allowing attackers to trigger a service failure or reallocate memory areas.

The vulnerability of the CODESYS Runtime Toolkit execution environment is due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure or reallocate memory by sending a specially crafted request...

The vulnerability of the `package_set_ring` function in the `net/packet/af_packet.c` component of the Linux kernel allows a hacker to increase their privileges within the system or cause a service failure.

The vulnerability of the packagesetring function in the net/packet/afpacket.c component of the Linux kernel is related to the reallocation of memory. Exploiting this vulnerability could allow a remote attacker to increase their privileges within the system or cause service failures...

The vulnerability of the libxslt library in iOS, iPadOS, tvOS, watchOS, and macOS allows attackers to execute arbitrary code on the target system.

The vulnerability of the libxslt library in iOS, iPadOS, tvOS, watchOS, and macOS relates to the reallocation of memory. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system using a specially created malicious file...

The vulnerability of the OpenLDAP protocol, related to the reallocation of memory, allows a hacker to perform a denial-of-service attack.

The vulnerability of the OpenLDAP protocol lies in the repeated memory release that occurs during the processing of control elements involving value return filters. Exploiting this vulnerability allows a malicious actor to perform a denial-of-service attack by sending a specially crafted request ...

The vulnerability of the OpenLDAP protocol, related to the reallocation of memory, allows a hacker to perform a denial-of-service attack.

The vulnerability of the OpenLDAP protocol is related to the reclamation of memory. Exploiting this vulnerability allows a malicious actor to perform a service denial by sending a specially crafted request to slapd...

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack, related to the repeated memory release, allows a attacker to cause a service failure.

The vulnerability of the IPv4 tunneling implementation in the Trace TCP/IP protocol stack is related to the reallocation of memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions from a remote location...

CVE-2013-7491

An issue was discovered in the DBI module before 1.628 for Perl. Stack corruption occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack gets reallocated...

CVE-2013-7491

CVE-2013-7491 affects the Perl DBI module prior to 1.628. The issue is a stack corruption that occurs when a user-defined function requires a non-trivial amount of memory and the Perl stack is reallocated. Impact is described as potential memory corruption related to stack handling; exploitation ...

The vulnerability of the ReadableStream component in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, relates to the reallocation of memory areas. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ReadableStream component in Firefox ESR and Firefox web browsers, as well as in the Thunderbird email client, is related to the reallocation of memory areas. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity,...

PYSEC-2020-81

libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc...

The vulnerability of the Libarchive library for working with archives, related to double memory release, allows a perpetrator to trigger a service failure.

The vulnerability of the library for working with Libarchive archives libarchive/archivereadsupportformatrar.c is related to an error in the RAR format decoder, which causes resources in memory to be re-allocated. Exploiting this vulnerability could allow a remote attacker to cause service...

LAquis SCADA LGX Report Memory ReAlloc Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of LAquis SCADA Software. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

UBUNTU-CVE-2017-16796

In SWFTools 0.9.2, the pngload function in lib/png.c does not check the return value of a realloc call, which allows remote attackers to cause a denial of service invalid write and application crash or possibly have unspecified other impact via vectors involving an IDAT tag in a crafted PNG file...

openssh: Leak of host private key material to privilege-separated child process via realloc()

It was found that the host private key material could possibly leak to the privilege-separated child processes via re-allocated memory. An attacker able to compromise the privilege-separated process could therefore obtain the leaked key information...

The vulnerability of the OpenSSH cryptographic protection mechanism, which allows a hacker to gain access to the protected information

The vulnerability in authfile.c of the sshd component of the OpenSSH cryptographic protection mechanism is related to the improper handling of the effect of implementing block memory reallocation functions. Exploiting this vulnerability can allow an attacker, operating locally, to gain access to...

Microsoft Internet Explorer 9 - MSHTML CAttrArray Use-After-Free (MS14-056)

oTextArea = document.createElement'textarea'; oTextArea.dataSrc = 1; oTextArea.id = 1; oTextArea.innerHTML = 1; oTextArea.onvolumechange = 1; oTextArea.style.setProperty'list-style', "url"; !-- Analysis The CAttrArray object initially allocates a CImplAry buffer of 0x40 bytes, which can store 4...

Microsoft Internet Explorer 9 - MSHTML CAttrArray Use-After-Free (MS14-056)

Microsoft Internet Explorer 9 - MSHTML CAttrArray Use-After-Free MS14-056 oTextArea = document.createElement'textarea'; oTextArea.dataSrc = 1; oTextArea.id = 1; oTextArea.innerHTML = 1; oTextArea.onvolumechange = 1; oTextArea.style.setProperty'list-style', "url"; !-- Analysis The CAttrArray objec...