CVE-2021-47314

In the Linux kernel, the following vulnerability has been resolved: memory: fslifc: fix leak of private memory on probe failure On probe error the driver should free the memory allocated for private structure. Fix this by using resource-managed allocation...

CVE-2021-47315

In the Linux kernel, the following vulnerability has been resolved: memory: fslifc: fix leak of IO mapping on probe failure On probe error the driver should unmap the IO memory. Smatch reports: drivers/memory/fslifc.c:298 fslifcctrlprobe warn: 'fslifcctrldev-gregs' not released on lines: 298...

CVE-2021-47314

In the Linux kernel, the following vulnerability has been resolved: memory: fslifc: fix leak of private memory on probe failure On probe error the driver should free the memory allocated for private structure. Fix this by using resource-managed allocation...

CVE-2021-47315

In the Linux kernel, the following vulnerability has been resolved: memory: fslifc: fix leak of IO mapping on probe failure On probe error the driver should unmap the IO memory. Smatch reports: drivers/memory/fslifc.c:298 fslifcctrlprobe warn: 'fslifcctrldev-gregs' not released on lines: 298...

Google Chrome memory misreference vulnerability (CNVD-2024-38802)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a memory misreference vulnerability that can be exploited by an attacker to execute arbitrary code on the system...

The vulnerability of the Adobe Aero Desktop software, which is used for viewing, developing, and publishing augmented reality content, lies in its memory management after it is freed. This allows a malicious actor to execute arbitrary code.

The vulnerability of the Adobe Aero Desktop software for viewing, developing, and publishing augmented reality content is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created malicious file...

The vulnerability of Windows Cryptographic Operating Systems allows attackers to gain unauthorized access to protected information.

The vulnerability of Windows Cryptographic Operating Systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2024-35896 netfilter: validate user input for expected length

In the Linux kernel, the following vulnerability has been resolved: netfilter: validate user input for expected length I got multiple syzbot reports showing old bugs exposed by BPF after commit 20f2505fb436 "bpf: Try to avoid kzalloc in cgroup/s,getsockopt" setsockopt @optlen argument should be...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading data beyond the buffer in memory, allows a hacker to bypass the ASLR protection mechanism.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection mechanism by using a specially created file...

The vulnerability of the smc_chan_free() function in the drivers/firmware/arm_scmi/smc.c module of the ARM System Control and Management Interface (SCMI) implementation of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the smcchanfree function in the drivers/firmware/armscmi/smc.c module, which is part of the ARM System Control and Management Interface SCMI implementation in the Linux operating system, relates to the re-release of previously released memory. Exploiting this vulnerability...

AZL-44073 CVE-2024-4853 affecting package wireshark for versions less than 4.4.7-1

Memory handling issue in editcap could cause denial of service via crafted capture file...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. An out-of-bounds access vulnerability exists in the...

PT-2024-5183 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Adobe Animate versions 24.0.2, 23.0.5 and earlier Description: The issue is related to an out-of-bounds write vulnerability in memory. Exploitation of this issue could allow a remote attacker to execute arbitrary code with the help of a...

CVE-2024-4162 KW Watcher Vulnerability ALlows Malicious Read Access to Memory

A buffer error in Panasonic KW Watcher versions 1.00 through 2.83 may allow attackers malicious read access to memory...

The vulnerability of the Adobe Illustrator graphic editor lies in the ability to write beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created file...

The vulnerability of the Windows remote access system’s connection controller allows a hacker to disclose protected information.

The vulnerability of the Windows remote access device’s connection controller is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

The vulnerability of Windows operating system DNS servers, which allows a hacker to execute arbitrary code

The vulnerability of DNS servers for Windows operating systems relates to the use of memory after it is freed during request processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Windows operating system DNS servers, which allows a hacker to execute arbitrary code

The vulnerability of DNS servers for Windows operating systems relates to the use of memory after it is freed during request processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

AZL-51077 CVE-2024-2410 affecting package mysql for versions less than 8.0.40-2

The JsonToBinaryStream function is part of the protocol buffers C++ implementation and is used to parse JSON from a stream. If the input is broken up into separate chunks in a certain way, the parser will attempt to read bytes from a chunk that has already been freed...

CVE-2023-34310

CVE-2023-34310 affects Ashlar-Vellum Cobalt. The issue is an uninitialized memory access in the CO-file parser that can allow remote code execution. Exploitation requires user interaction (target must visit a malicious page or open a malicious file). The root cause is lack of proper memory initia...