CVE-2022-33021

CVE-2022-33021 affects CVA6 (OpenHW Group) where committing 909d85a allows an invalid memory read when accessing MHPMCOUNTER30. The NVD entry lists CVSSv3.1 base score 7.5 (Network, Low complexity, None privileges, High confidentiality impact) and CVSSv2 base score 5.0 (Partial confidentiality). ...

OESA-2022-1727 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hwparams. The hwfree ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw...

kernel: out-of-bounds read in fbcon_get_font function

An out-of-bounds OOB memory access flaw was found in fbcongetfont in drivers/video/fbdev/core/fbcon.c in fbcon driver module in the Linux kernel. A bound check failure allows a local attacker with special user privilege to gain access to out-of-bounds memory, leading to a system crash or a leak o...

FFmpeg add_yblock() function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability in the FFmpeg addyblock function can be exploited by an attacker to trigger an out-of-bounds read memory access...

FFmpeg decode_slice_header() function denial of service vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A denial of service vulnerability exists in the FFmpeg decodesliceheader function, which can be exploited by an attacker to trigger an out-of-bounds read memory access...

FFmpeg 缓冲区错误漏洞

FFmpeg is a complete solution for recording, converting and streaming audio and video from the Ffmpeg team. A buffer overflow vulnerability exists in the FFmpeg readvarblockdata function, which can be exploited by an attacker to trigger an out-of-bounds read memory access...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-1896)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP5 : libtiff (EulerOS-SA-2022-1900)

According to the versions of the libtiff packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out ...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-1900)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2022-0232 Updated chromium-browser-stable packages fix security vulnerability

The chromium-browser-stable package has been updated to the 102.0.5005.115 version, fixing many bugs and 7 CVE. Some of them are listed below: Use after free in WebGPU. CVE-2022-2007 Out of bounds memory access in WebGL. CVE-2022-2008 Out of bounds read in compositing. CVE-2022-2010 Use after fre...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-1869)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-40727

Access of Memory Location After End of Buffer CWE-788...

Buffer overflow

Access of Memory Location After End of Buffer CWE-788...

OPENSUSE-SU-2022:10010-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 102.0.5005.115 boo1200423 CVE-2022-2007: Use after free in WebGPU CVE-2022-2008: Out of bounds memory access in WebGL CVE-2022-2010: Out of bounds read in compositing CVE-2022-2011: Use after free in ANGLE...

OPENSUSE-SU-2022:10009-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 102.0.5005.115 boo1200423 CVE-2022-2007: Use after free in WebGPU CVE-2022-2008: Out of bounds memory access in WebGL CVE-2022-2010: Out of bounds read in compositing CVE-2022-2011: Use after free in ANGLE Chromium 102.0.5001.61...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Jun 2022)

This host is missing an important security update according to Microsoft Edge Chromium-Based update. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

EulerOS 2.0 SP9 : libtiff (EulerOS-SA-2022-1845)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Null source pointer passed as an argument to memcpy function within TIFFFetchStripThing in tifdirread.c in libtiff versions from 3.9.0 to 4.3.0...

USN-5477-1 ncurses vulnerabilities

Hosein Askari discovered that ncurses was incorrectly performing memory management operations when dealing with long filenames while writing structures into the file system. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. CVE-2017-16879 Chung-Yi L...

The vulnerability of the asynchronous Moxa NPort 5110 server lies in its ability to write data beyond the allowed range, allowing an attacker to restrict access to certain values in memory.

The vulnerability of the asynchronous Moxa NPort 5110 server lies in its ability to write data beyond the allowed range. Exploiting this vulnerability allows a malicious actor to restrict access to certain values in memory...

Chromium: CVE-2022-2008 Out of bounds memory access in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...