The vulnerability of the nft_verdict_init() function in the net/netfilter/nf_tables_api.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information, thereby enhancing their privileges.

The vulnerability of the nftverdictinit function in the net/netfilter/nftablesapi.c module of the Linux operating system is related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models lies in the ability to write data beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Substance 3D Sampler software for creating textures and materials for 3D models lies in the writing of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

CVE-2024-1454 Opensc: memory use after free in authentic driver when updating token info

The use-after-free vulnerability was found in the AuthentIC driver in OpenSC packages, occuring in the card enrolment process using pkcs15-init when a user or administrator enrols or modifies cards. An attacker must have physical access to the computer system and requires a crafted USB device or...

The vulnerability of the Kernel Samepage Merging (KSM) component in the Linux operating system allows a hacker to gain access to the user’s page.

The vulnerability of the Kernel Samepage Merging KSM component in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain access to the user’s page...

PT-2024-8182

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a memory corruption vulnerability caused by a buffer overflow in the ASMKERN228A.dll and ASMKERN229A.dll libraries of Autodesk AutoCAD. This can be exploite...

DEBIAN-CVE-2024-24266

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

The vulnerability of the formQosManage_auto function in the wireless access point Tenda W9 software allows a intruder to execute any code they desire.

The vulnerability of the formQosManageauto function in the wireless access point software Tenda W9 relates to reading data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Linux kernel memory misreference vulnerability (CNVD-2024-08085)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a memory misreference vulnerability that originates from a mix-up in the instruction responsible for freeing memory in the Bluetooth module. An...

Google Chrome Network module memory misreference vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Network module, which stems from a confusion in the instructions responsible for freeing memory in the Network module. An attacker can exploit this vulnerability to...

The vulnerability of the RGXBackingZSBuffer() function in the PowerVR GPU driver for Android and ChromeOS allows a hacker to execute arbitrary code and gain elevated privileges.

The vulnerability of the RGXBackingZSBuffer function in the PowerVR GPU graphics driver for Android and ChromeOS systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code and gain elevated privileges...

The vulnerability of the formSetDeviceName function in the microprogramming software for Tenda AC10U allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetDeviceName function in the Tenda AC10U router’s microprogramming software relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the __ext4_remount() function in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ext4remount function in Linux operating systems is related to the use of memory after it is freed when processing old file names with the CONFIGQUOTA configuration. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

UBUNTU-CVE-2023-52355

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64 API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A memory misreference vulnerability exists in SWFTools version 0.9.2, which stems from a messed up instruction responsible for freeing memory in the swfDeleteTag method on page rfxswf.c:1193. An attacker can exploit this...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A memory misreference vulnerability exists in SWFTools version 0.9.2, which stems from a confusion in the instructions responsible for freeing memory in the bufferWriteData method of the swftools/lib/action/compile.c pag...

EulerOS 2.0 SP10 : cups (EulerOS-SA-2023-2782)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacke...

CVE-2024-21599

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. If an MX Series device receives PTP packets on an MPC3E that doesn't...

GTKWave memory misreference vulnerability (CNVD-2024-39043)

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave suffers from a memory misreference vulnerability that can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

The vulnerability of the application programming interface for working with computer graphics in the WebGPU browser interfaces of Google Chrome and Microsoft Edge allows a perpetrator to disclose protected information.

The vulnerability of the application programming interface for working with computer graphics in WebGPU browsers like Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

CVE-2024-0340

A vulnerability was found in vhostnewmsg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhostnewmsg function. This issue can allow local privileged users to read...