CVE-2022-36846

CVE-2022-36846 is a heap-based overflow in the ConstructDictionary function of libSDKRecognitionText.spensdk.samsung.so, affecting versions prior to Samsung SMR Sep-2022 Release 1. The overflow can cause memory access faults (memory corruption). The issue is documented across multiple sources (NV...

CVE-2022-36845

CVE-2022-36845 corresponds to a heap-based overflow in the MHW_RECOG_LIB_INFO function of libSDKRecognitionText.spensdk.samsung.so. The vulnerability affects versions prior to Samsung SMR Sep-2022 Release 1. Root cause is a heap overflow in MHW_RECOG_LIB_INFO, which can lead to a memory access fa...

CVE-2022-36841

A heap-based overflow vulnerability in PrepareRecogLibraryPart function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2022-36845

A heap-based overflow vulnerability in MHWRECOGLIBINFO function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR Sep-2022 Release 1 allows attacker to cause memory access fault...

CVE-2022-36280

CVE-2022-36280: An out-of-bounds memory access in the vmwgfx GPU driver (vmwgfx_kms.c) of the Linux kernel’s vmwgfx component, affecting devices using /dev/dri/renderD128. Reported as a local privilege escalation leading to DoS. Public details in connected docs confirm the vulnerability and its p...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A denial of service vulnerability exists in the GPU component of the Linux kernel, which stems from out-of-bounds OOB memory accesses in the vmwgfx driver in...

PT-2022-23666 · Samsung · Libsdkrecognitiontext.Spensdk.Samsung.So

Name of the Vulnerable Software and Affected Versions: libSDKRecognitionText.spensdk.samsung.so affected versions not specified Description: A heap-based overflow issue in the HWR::EngineCJK::Impl::Construct function allows an attacker to cause a memory access fault. Recommendations: At the momen...

PT-2022-23659 · Iva Ctl · Iva Ctl

Name of the Vulnerable Software and Affected Versions: iva ctl driver versions prior to SMR Sep-2022 Release 1 Description: A use after free issue in the iva ctl driver allows an attacker to cause a memory access fault. Recommendations: For versions prior to SMR Sep-2022 Release 1, update to SMR...

PT-2022-23648 · Samsung · Libsdkrecognitiontext.Spensdk.Samsung.So

Name of the Vulnerable Software and Affected Versions: libSDKRecognitionText.spensdk.samsung.so affected versions not specified Description: A heap-based overflow issue in the HWR::EngJudgeModel::Construct function allows an attacker to cause a memory access fault. Recommendations: At the moment,...

PT-2022-23664 · Samsung · Libsdkrecognitiontext.Spensdk.Samsung.So

Name of the Vulnerable Software and Affected Versions: libSDKRecognitionText.spensdk.samsung.so library affected versions not specified Description: A heap-based overflow vulnerability in the LoadEnvironment function allows an attacker to cause a memory access fault. The issue is present in...

RHEL 8 : Red Hat OpenShift Service Mesh 2.1.3 (RHSA-2022:5004)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:5004 advisory. Red Hat OpenShift Service Mesh is a Red Hat distribution of the Istio service mesh project, tailored for installation into an on-premise...

Oracle Linux 8 : istio (ELSA-2022-9773)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9773 advisory. - Upgrade Istio from 1.13.5 to 1.13.7 to resolve the CVE-2022-31045 - Adress Istio CVE-2022-31045, CVE-2022-29225,...

Oracle Linux 8 : istio (ELSA-2022-9771)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9771 advisory. - Upgrade Istio from 1.13.5 to 1.13.7 to resolve the CVE-2022-31045 - Istio CVE-2022-31045, CVE-2022-29225,...

PT-2022-37258 · Geos · Geos

Name of the Vulnerable Software and Affected Versions: GEOS affected versions not specified Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This can lead to a crash. The error is specifically...

Oracle Linux 7 : istio (ELSA-2022-9774)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9774 advisory. - Upgrade Istio from 1.13.5 to 1.13.7 to resolve the CVE-2022-31045 - Adress Istio CVE-2022-31045, CVE-2022-29225,...

Oracle Linux 7 : istio (ELSA-2022-9772)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-9772 advisory. - Upgrade Istio from 1.13.5 to 1.13.7 to resolve the CVE-2022-31045 - Istio CVE-2022-31045, CVE-2022-29225,...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-5594-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5594-1 advisory. Asaf Modelevsky discovered that the IntelR 10GbE PCI Express ixgbe Ethernet driver for the Linux kernel performed insufficient control flow...

CVE-2022-2320

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker...

CVE-2022-2320

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker...

Buffer overflow

A flaw was found in the Xorg-x11-server. The specific flaw exists within the handling of ProcXkbSetDeviceInfo requests. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. This flaw allows an attacker...