GNOME GLib 缓冲区错误漏洞

GNOME Glib is a multi-platform toolkit for creating graphical user interfaces, and is the underlying core library that underlies GTK+ and GNOME projects. A buffer overflow vulnerability exists in GNOME GLib, which originates when a networked system or product performs an operation in memory witho...

The software’s vulnerability allows for manipulation of Adobe Flash files, enabling a perpetrator to cause service failure.

The vulnerability of the software for manipulating Adobe Flash FLV files, flvmeta, arises due to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause a service failure using a specially crafted file...

Tencent WeChat Buffer Error Vulnerability

Tencent WeChat 微信 is an online social networking application from the Chinese company Tencent. The program supports sending voice messages, videos, images, and text. A buffer error vulnerability exists in Tencent WeChat that originates when a network system or product performs an operation in...

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to an operation that allows data to be written beyond the buffer in memory. This allows attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015 are related to the execution of operations beyond the buffer in memory. Exploiting these...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft

This is a proof-of-concept PoC exploit for CVE-2020-0796, also known as SMBGhost, a pre-authentication remote code execution vulnerability in Windows SMBv3. The exploit is written in Python and uses the SMB protocol to inject shellcode into the Windows kernel. The shellcode is generated from a...

Google Android Buffer Overflow Vulnerability (CNVD-2021-03569)

Google Android is a Linux-based open source operating system from the USGoogleOpen Handheld Alliance Google. Google Android OS suffers from a buffer overflow vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundarie...

Google Android Buffer Error Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. Google Android OS suffers from a buffer error vulnerability that originates when a networked system or product performs an operation in memory without properly validating data boundaries, resulting...

Buffer Error Vulnerability in Multiple Qualcomm Products

A Qualcomm chip is a chip from Qualcomm Incorporated USA. It is a way of miniaturizing circuitry mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. A buffer error vulnerability exists in several Qualcomm products, which...

A flaw was found in the Linux kernel. A use-after-free was found in the way the console subsystem was using ioctls KDGKBSENT and KDSKBSENT. A local user could use this flaw to get read memory access out of bounds. The highest threat from this vulnerability is to data confidentiality.

...

The vulnerability of the Intel Stratix 10 FPGA system in the Intel Quartus Prime Pro automated design software allows a hacker to gain increased privileges.

The vulnerability of the Intel Stratix 10 FPGA system in the Intel Quartus Prime Pro automated design software arises from an operation that occurs outside the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2020-7554

A CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in IGSS Definition Def.exe version 14.0.0.20247 that could cause Remote Code Execution when malicious CGF Configuration Group File file is imported to IGSS Definition...

The vulnerability of the Adobe Illustrator graphic editor lies in the ability to write beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Adobe Illustrator graphic editor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

The vulnerability of the Adobe Photoshop graphic editor, related to reading data beyond the buffer in memory, allows attackers to disclose protected information.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

libxslt: use after free in xsltCopyText in transform.c could lead to information disclosure

In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written to, or uninitialized data could be...

PYSEC-2020-137

In TensorFlow Lite before versions 2.2.1 and 2.3.1, models using segment sum can trigger a write out bounds / segmentation fault if the segment ids are not sorted. Code assumes that the segment ids are in increasing order, using the last element of the tensor holding them to determine the...

PT-2020-4038 · Microsoft · Chakracore +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge ChakraCore affected versions not specified Description: A remote code execution issue exists in the way the ChakraCore scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute...

The vulnerability of the kernel API of Windows operating systems allows attackers to enhance their privileges within the target system.

The vulnerability of the Windows operating system’s kernel API arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a hacker to enhance their privileges in the target system through a specially created application...

JerryScript buffer overflow vulnerability (CNVD-2020-49700)

JerryScript is a lightweight JavaScript engine JerryScript project . A buffer overflow vulnerability exists in JerryScript 2.3.0 and prior versions. The vulnerability stems from a networked system or product that performs operations in memory without properly validating data boundaries, resulting...

CVE-2020-14937

Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. The length of provided input/output buffers is insufficiently verified during the encoding and decoding of data. This may lead to out-of-bounds buffer read or write access ...

Asylo Buffer Overflow Vulnerability

Asylo is Google's open source next-generation classified computing framework, designed to provide a Trusted Execution Environments Trusted Execution Environments, TEEs in the execution of the application's development framework and SDK to ensure the security of the application and information. A...