1095 matches found
CVE-2021-46867
The HWKEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in out-of-bounds memory access...
PT-2023-12594 · Unknown · Hw Keymaster
Name of the Vulnerable Software and Affected Versions: HW KEYMASTER affected versions not specified Description: The issue is related to a problem in the HW KEYMASTER module with releasing memory. Successful exploitation may result in out-of-bounds memory access. Recommendations: At the moment,...
PT-2025-37691
Name of the Vulnerable Software and Affected Versions: linux affected versions not specified Description: The Linux kernel contains a flaw in the dmi-sysfs module related to a null-pointer dereference. A previous patch introduced kobject put to release memory, which calls dmi sysfs entry release...
Updated libtar packages fix security vulnerability
After tarclose, libtar.c releases the memory pointed to by pointer t. After tarclose is called in the list function, it continues to use pointer t: freelonglinklongnamet-thbuf . As a result, the released memory is used use-after-free. CVE-2021-33640...
MGASA-2022-0488 Updated libtar packages fix security vulnerability
After tarclose, libtar.c releases the memory pointed to by pointer t. After tarclose is called in the list function, it continues to use pointer t: freelonglinklongnamet-thbuf . As a result, the released memory is used use-after-free. CVE-2021-33640...
Fedora 36 : libtar (2022-ccc68b06cc)
The remote Fedora 36 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-ccc68b06cc advisory. - fix use-after-free bugs introduced by incorrect memleak fixes CVE-2021-33640 Tenable has extracted the preceding description block directly from t...
CVE-2021-33640
After tarclose, libtar.c releases the memory pointed to by pointer t. After tarclose is called in the list function, it continues to use pointer t: freelonglinklongnamet-thbuf . As a result, the released memory is used use-after-free...
CVE-2021-33640
CVE-2021-33640 is a use-after-free in libtar after tar_close() in tar_close/t->th_buf handling (free_longlink_longname). The issue is documented across multiple advisories and scanners: EulerOS (EulerOS-SA-2023-1575/1585), TencentOS/TSSA-2023:0136, Oracle Linux ELSA-2023-2898, Fedora 2022 advi...
Linux kernel 资源管理错误漏洞
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel, which stems from the fact that an attacker can force the Linux kernel to free up memory via split2MBgttentry resulting in a denial of service and...
The vulnerability of Moxa VPORT 06EC-2V IP camera software and Moxa VPort 461A video encoder software, related to memory release errors, allows a intruder to trigger a service failure.
The vulnerability of Moxa VPORT 06EC-2V IP camera microprogramming software and Moxa VPort 461A video encoder microprogramming software is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause service failure by sending specially crafted packets...
CVE-2022-29515
Missing release of memory after effective lifetime in firmware for IntelR SPS before versions SPSE306.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-29515
Missing release of memory after effective lifetime in firmware for IntelR SPS before versions SPSE306.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-29515
Missing release of memory after effective lifetime in firmware for IntelR SPS before versions SPSE306.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access...
PT-2022-19671 · Intel · Intel Sps
Name of the Vulnerable Software and Affected Versions: IntelR SPS versions prior to SPS E3 06.00.03.035.0 Description: The issue is related to a missing release of memory after its effective lifetime in the firmware for IntelR SPS. This could allow a privileged user to potentially enable denial o...
CVE-2022-44546
The kernel module has the vulnerability that the mapping is not cleared after the memory is automatically released. Successful exploitation of this vulnerability may cause a system restart...
PT-2022-27230 · Unknown · Kernel Module
Name of the Vulnerable Software and Affected Versions: Kernel module affected versions not specified Description: The issue is related to a kernel module that fails to clear mapping after automatic memory release. This can potentially lead to a system restart if exploited. Recommendations: At the...
The vulnerability of the cURL command-line utility, related to the repeated release of memory, allows a hacker to execute arbitrary code.
The vulnerability of the command-line tool cURL is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20221103-01
Vim text editor vulnerability is related to memory release error in qfupdatebuffer function in the quickfix.c file of the autocmd Handler component. Exploitation of the vulnerability could allow an attacker, acting remotely, trick the victim into opening a specially crafted file, causing a progra...
PT-2022-7332 · Xenstore +1 · Xenstore +1
Name of the Vulnerable Software and Affected Versions: Xenstore affected versions not specified Description: The issue is related to errors in memory release due to the creation of an arbitrary number of nodes via transactions. This can enable a malicious guest to create an arbitrary number of...
PT-2022-7319 · Xenstore +1 · Xenstore +1
Name of the Vulnerable Software and Affected Versions: Xenstore affected versions not specified Description: The issue allows guests to create an arbitrary number of nodes via transactions. If a node is created in a transaction and later deleted in the same transaction, the transaction will be...