The vulnerability of the Linux operating system’s DVB driver allows a hacker to cause a service failure or gain increased privileges.

The vulnerability of the Linux operating system’s DVB kernel driver is related to the use of previously freed memory in the drivers/media/dvb-core/dvbcaen50221.c file when the device is closed, provided that it was turned off beforehand. Exploiting this vulnerability can allow an attacker to caus...

USN-5850-1: Linux kernel vulnerabilities

It was discovered that the Bluetooth HCI implementation in the Linux kernel did not properly deallocate memory in some situations. An attacker could possibly use this cause a denial of service memory exhaustion. CVE-2022-3619 It was discovered that the Broadcom FullMAC USB WiFi driver in the Linu...

PT-2023-15671 · Unknown · Bluetooth Module

Name of the Vulnerable Software and Affected Versions: Bluetooth module affected versions not specified Description: The Bluetooth module has an out-of-memory OOM vulnerability. Successful exploitation of this issue may affect data confidentiality. Recommendations: At the moment, there is no...

The vulnerability of the from_header function in the GNU Tar editor, related to out-of-memory reading, allows an attacker to gain access to confidential data.

The vulnerability of the fromheader function in the GNU Tar editor involves out-of-memory reading. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

OpenBSD OpenSSH 9.1 Memory Safety Vulnerability

OpenBSD OpenSSH is prone to a memory safety vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh";...

Apple tvOS 安全漏洞

Apple tvOS is a set of smart TV operating systems from Apple USA. A security vulnerability exists in Apple tvOS versions prior to 16.3, which stems from a memory handling issue that could allow applications to disclose sensitive kernel state...

CVE-2006-20001 Apache HTTP Server: mod_dav out of bounds read, or write of zero byte

A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier...

The vulnerability of Adobe Dimension’s 3D design software, related to reading data beyond the buffer in memory, allows attackers to gain unauthorized access to protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created malicious file...

The vulnerability of the Overview Mode function in Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Overview Mode function in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PT-2023-1045 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Layer 2 Tunneling Protocol L2TP in Microsoft Windows, specifically involving the use of memory after it has been freed. This can be exploit...

The vulnerability of the Mozilla Firefox browser, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Mozilla Firefox browser is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Adobe Illustrator’s graphic editor, related to reading data beyond the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created CDR file...

The vulnerability of the Foxit PDF Reader program for viewing and editing PDF files lies in its use of memory after deallocation, allowing an attacker to execute arbitrary code.

The vulnerability of the Foxit PDF Reader software for viewing and editing PDF files relates to the use of memory after deallocation. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the decon_set_win_config() function in the Display and Enhancement Controller (DECON) driver of the Display Processing Unit (DPU) for Android mobile devices from Samsung allows a malicious actor to gain access to read, modify, or delete files, or to cause a service failure.

The vulnerability of the deconsetwinconfig function in the Display and Enhancement Controller DECON driver of the Display Processing Unit DPU for Android mobile devices from Samsung relates to the use of memory after it is freed during the processing of file descriptors. Exploiting this...

The vulnerability of Microsoft Visio graphical editors, Microsoft Office programs, and 365 Apps for Enterprise, related to memory usage after it is freed, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Visio graphic editors, Microsoft Office programs, and 365 Apps for Enterprise is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created DWG file...

CVE-2022-38475

An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox 104...

CVE-2022-22740

Certain network request objects were freed too early when releasing a network request handle. This could have lead to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

Design/Logic Flaw

Within the lginit function, if several allocations succeed but then one fails, an uninitialized pointer would have been freed despite never being allocated. This vulnerability affects Firefox 102...

CVE-2022-38475

CVE-2022-38475 affects Firefox up to version 104. An attacker could write to the first element of a zero-length JavaScript array; the value is not written to an invalid memory address, but the issue is listed with memory safety implications (I: High). Exploitation context is not described in thes...

Memory corruption

Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to the use of uninitialized memory vulnerability during parsing of H3D files. A DWORD is extracted from an uninitialized buffer and, after sign extension, is used as an index into a stack variable to increment a counter leading...