CVE-2022-23091

A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, but with a different root cause. An unprivileged local user process can maintain a mapping of a page after it is freed, allowing that process to read private data belonging to othe...

Code injection

A particular case of memory sharing is mishandled in the virtual memory system. This is very similar to SA-21:08.vm, but with a different root cause. An unprivileged local user process can maintain a mapping of a page after it is freed, allowing that process to read private data belonging to othe...

CVE-2022-23091

A memory disclosure vulnerability exists in FreeBSD due to the mishandling of a specific case of memory sharing within the virtual memory system . An unprivileged local user process can maintain a mapping of a page even after it has been freed, which may allow the process to read private data bel...

SUSE CVE-2015-8550

Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service host OS crash or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability...

SUSE CVE-2022-42327

x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode. Access to this shared page bypasses the expected isolation that should exist...

CVE-2022-33232

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory...

Memory corruption

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory...

Qualcomm 芯片缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuitry mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. The Qualcomm chip suffers from a security vulnerability that stems from memory...

CVE-2022-33232

CVE-2022-33232 is a memory corruption issue caused by buffer copy without checking input size during memory-sharing tests, attributed to a vulnerability in a Qualcomm closed-source component (Hypervisor). The impact is high/critical (memory corruption; local access with low privileges) as describ...

CVE-2022-33232 Buffer copy without checking size of input in Hypervisor

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory...

PT-2023-13253 · Qualcomm · Snapdragon +99

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption caused by a buffer copy without checking the size of the input. This occurs while running memory sharing tests...

CVE-2022-33232: Buffer Copy without Checking Size of Input

Memory corruption due to buffer copy without checking size of input while running memory sharing tests with large scattered memory...

Information Disclosure

xen is vulnerable to information disclosure. The vulnerability exists because of unintended memory sharing between guests On Intel systems that support the virtualize APIC accesses feature which allows an attacker to read and write the global shared xAPIC page by moving the local APIC out of xAPI...

CVE-2022-42327

x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode. Access to this shared page bypasses the expected isolation that should exist...

CVE-2022-42327

x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode. Access to this shared page bypasses the expected isolation that should exist...

Design/Logic Flaw

x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode. Access to this shared page bypasses the expected isolation that should exist...

CVE-2022-42327

x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode. Access to this shared page bypasses the expected isolation that should exist...

x86: unintended memory sharing between guests

ISSUE DESCRIPTION On Intel systems that support the "virtualize APIC accesses" feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode. Access to this shared page bypasses the expected isolation that should exist between two guests. IMPACT Guest...

PT-2022-26367 · Intel +1 · Intel +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns unintended memory sharing between guests on Intel systems that support the "virtualize APIC accesses" feature. A guest can read and...

CVE-2022-42327

CVE-2022-42327 concerns the Xen hypervisor. On Intel systems that support the “virtualize APIC accesses” feature, a guest can read and write the global shared xAPIC page by moving the local APIC out of xAPIC mode, bypassing isolation between guests. The vulnerability is classified with CVSS‑3.1: ...