The vulnerability of the Microsoft Office software package, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Office package is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Ubuntu: Security Advisory (USN-6838-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2018-25103 Use-after-free vulnerabilities in lighttpd <= 1.4.50

There exists use-after-free vulnerabilities in lighttpd = 1.4.50 request parsing which might read from invalid pointers to memory used in the same request, not from other requests...

Huawei 手机安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. A memory management vulnerability exists in Huawei...

Mozilla Firefox Memory Security Flaw

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A memory security vulnerability exists in Mozilla Firefox, which can be exploited by attackers to execute arbitrary code or cause a denial of service on a vulnerable system...

PT-2024-27036 · Unknown · Boottime Module

Name of the Vulnerable Software and Affected Versions: boottime module affected versions not specified Description: The issue is related to a memory management vulnerability in the boottime module. Successful exploitation of this vulnerability can affect integrity. Recommendations: At the moment,...

Google Pixel Security Breach

Google Pixel is a smartphone from Google Inc USA. A security vulnerability exists in Google Pixel, which stems from an incorrect bounds check in the circread module of linkdevicememorylegacy.c, where out-of-bounds writes may occur...

CVE-2021-47314

In the Linux kernel, the following vulnerability has been resolved: memory: fslifc: fix leak of private memory on probe failure On probe error the driver should free the memory allocated for private structure. Fix this by using resource-managed allocation...

ARM Bifrost GPU Kernel Driver and Valhall GPU Kernel Driver Security Vulnerabilities

ARM Bifrost GPU Kernel Driver and Valhall GPU Kernel Driver are both products of ARM UK.Bifrost GPU Kernel Driver is a Bifrost GPU kernel driver.Valhall GPU Kernel Driver is a Valhall GPU Kernel Driver is a Valhall GPU kernel driver. The ARM Bifrost GPU Kernel Driver and Valhall GPU Kernel Driver...

CVE-2024-5629 Out-of-bounds read in bson module of PyMongo

An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exception which may contain arbitrary application memory...

RHEL 9 : netty (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - netty: SniHandler 16MB allocation leads to OOM CVE-2023-34462 Note that Nessus has not tested for this issue but ha...

CVE-2024-36030 octeontx2-af: fix the double free in rvu_npc_freemem()

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: fix the double free in rvunpcfreemem Clang static checkerscan-build warning： drivers/net/ethernet/marvell/octeontx2/af/rvunpc.c:line 2184, column 2 Attempt to free released memory. npcmcamrsrcsdeinit has released...

CVE-2024-24958

Several out-of-bounds write vulnerabilities exist in the Programming Software Connection FileSystem API functionality of AutomationDirect P3-550E 1.2.10.9. Specially crafted network packets can lead to heap-based memory corruption. An attacker can send malicious packets to trigger these...

CVE-2024-30212 Microchip Harmony 3 Core library allows read and write access to RAM via a SCSI READ or WRITE command

If a SCSI READ10 command is initiated via USB using the largest LBA 0xFFFFFFFF with it's default block size of 512 and a count of 1, the first 512 byte of the 0x80000000 memory area is returned to the user. If the block count is increased, the full RAM can be exposed. The same method works to wri...

The vulnerability of the tomoyo_write_control() function in the TOMAYO security subsystem of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tomoyowritecontrol function in the security/tomoyo/common.c module of the TOMAYO security subsystem in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the io_uring subsystem in the Linux operating system allows a hacker to increase their privileges.

The vulnerability of the iouring subsystem in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to reading data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Siemens Solid Edge’s design and simulation tools relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created PAR file...

The vulnerability of the Windows Common Log File System Driver in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Common Log File System Driver in the operating system is related to operations that go beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability of the CNG Key Isolation service in Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the CNG Key Isolation service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the QTS and QuTS operating systems, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of the QTS and QuTS operating systems is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...