Double free

A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in FBX's Review causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system...

Important: kernel-livepatch-4.14.219-164.354

Issue Overview: A flaw was found in the way access to sessions and handles was handled in the iSCSI driver in the Linux kernel. A local user could use this flaw to leak iSCSI transport handle kernel address or end arbitrary iSCSI connections on the system. CVE-2021-27363 A flaw was found in the...

The vulnerability in the implementation of the MIDI protocol in Linux kernel allows attackers to increase their privileges.

The vulnerability of the Linux operating system’s MIDI kernel implementation relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability in the implementation of the fts_driver_test_write function in the Touch component of Android operating systems allows a malicious actor to escalate their privileges.

The vulnerability of the ftsdrivertestwrite function implementation in the Touch component of Android operating systems lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

Huawei Emui Buffer Overflow Vulnerability (CNVD-2021-28305)

Huawei Emui is an Android-based mobile operating system developed by Huawei, a Chinese company. A memory buffer overflow vulnerability exists in the Huawei Emui component interface. A local attacker can exploit this vulnerability by carefully constructing an attack scenario to cause an...

Huawei P30 Memory Write Vulnerability

Huawei P30 is a smartphone from Chinese company Huawei Huawei. The Huawei P30 suffers from a memory write vulnerability when handling file parsing. The vulnerability stems from the program not properly validating input files. An attacker could exploit the vulnerability to cause the program to ser...

CVE-2021-29934

CVE-2021-29934 affects PartialReader in the uu_od crate for Rust prior to 0.0.4. The underlying issue is that PartialReader can pass an uninitialized memory buffer to a user-provided Read implementation, allowing an attacker to read contents of uninitialized memory. The vulnerability is documente...

CVE-2021-29937

CVE-2021-29937 affects the Rust telemetry crate (through 2021-02-17). The issue is a drop of uninitialized memory if a value.clone() panics inside misc::vec_with_size(), as described across multiple sources (e.g., Red Hat, OSV, GHSA). The vulnerability details consistently identify the root cause...

CVE-2021-29647

A flaw was found in the Linux kernel. This flaw allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure. The highest threat from this vulnerability is to confidentiality...

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System (IGSS), arises from operations that go beyond the buffer boundaries in memory, allowing attackers to execute arbitrary code.

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Samba networking software server’s LDAP server lies in the use of memory after it is freed, allowing an attacker to cause a service failure.

The vulnerability of the Samba networking software’s LDAP server relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Samsung SMR 安全漏洞

Samsung DSP driver is a digital signal processing driver for Samsung mobile devices. The Samsung DSP driver suffers from an out-of-bounds write vulnerability that stems from incorrect boundary checking, which can be exploited by an attacker to perform out-of-bounds memory accesses...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to gain access to confidential information.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. These vulnerabilities allow unauthorized access to confidential information within the...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Arbitrary code can be executed in the context of the current user using a specially crafte...

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to memory usage after it is freed. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Arbitrary code can be executed in the context of the current user using a specially crafte...

Memory Out-of-Bounds Access Vulnerability in WebAccess/HMI Designer

WebAccess/HMI Designer is an integrated human-machine interface development tool. A memory out-of-bounds access vulnerability exists in WebAccess/HMI Designer, which can be exploited by an attacker to cause a denial of service...

Memory Out-of-Bounds Access Vulnerability in WebAccess/HMI Designer (CNVD-2021-24532)

WebAccess/HMI Designer is an integrated human-machine interface development tool. A memory out-of-bounds access vulnerability exists in WebAccess/HMI Designer, which can be exploited by an attacker to cause a denial of service...

CVE-2021-22321

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include...

多款Huawei产品资源管理错误漏洞

Huawei S2700, etc. are products of Huawei, China.S2700 is an enterprise switch.USG9500 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a...

The vulnerability of the image conversion module from TIFF to RGBA format in the LibTIFF library allows a hacker to induce a service failure.

The vulnerability of the TIFF-to-RGBA tiff2rgba conversion module in the LibTIFF library is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created TI...