235 matches found
CVE-2024-33034
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time...
CVE-2024-33034 Use After Free in Graphics Linux
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time...
CVE-2024-33034 Use After Free in Graphics Linux
Memory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time...
The vulnerability of embedded Qualcomm microprogramming software, related to the ability to read data beyond the buffer in memory, allows attackers to execute arbitrary code.
The vulnerability of embedded Qualcomm software relates to the ability to read data beyond the buffer in memory. Exploiting this vulnerability can allow a hacker to execute arbitrary code...
The vulnerability of the libarchive library, related to reading beyond the buffer boundaries of memory, allows a hacker to cause a service failure.
The vulnerability of the libarchive library is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through a specially created archive...
The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.
The vulnerability of the Secure Boot protocol for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions remotely...
UBUNTU-CVE-2024-26912
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix several DMA buffer leaks Nouveau manages GSP-RM DMA buffers with nvkmgspmem objects. Several of these buffers are never dealloced. Some of them can be deallocated right after GSP-RM is initialized, but the rest...
The vulnerability in the Intel oneAPI Toolkit’s software development tools relates to the execution of operations outside of the buffer in memory, allowing attackers to exploit their privileges.
The vulnerability in the Intel oneAPI Toolkit development tools relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2024-22041
A vulnerability has been identified in Cerberus PRO EN Engineering Tool All versions, Cerberus PRO EN Fire Panel FC72x IP6 All versions, Cerberus PRO EN Fire Panel FC72x IP7 All versions, Cerberus PRO EN Fire Panel FC72x IP8 All versions IP8 SR4, Cerberus PRO EN X200 Cloud Distribution IP7 All...
The vulnerability of the Intel QuickAssist Motherboard Chipset Devices Windows Utility driver package, which allows a hacker to trigger a service failure.
The vulnerability of the Intel QuickAssist Motherboard Chipset Devices Windows Utility driver package, known as Intel QuickAssist QAT, relates to reading data outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a system failure...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Reader 2020 lies in their ability to read data beyond the buffer in memory, allowing attackers to gain unauthorized access to protected information.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Reader 2020 is related to reading data outside of the buffer in memory during the processing of the CharStringsOffset array for OpenType...
The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.
The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...
The vulnerability of the OLE2 form file analysis component in the ClamAV antivirus program allows a hacker to trigger a service failure.
The vulnerability of the OLE2 file analysis component in the ClamAV antivirus program lies in the ability to read data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted OLE2 file...
Amazon Linux 2 : redis (ALASREDIS6-2024-009)
The version of redis installed on the remote host is prior to 6.2.14-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2REDIS6-2024-009 advisory. Redis is an in-memory database that persists on disk. Redis incorrectly handles resizing of memory buffers which can...
The vulnerability of embedded Qualcomm microprogramming software, related to reading data outside the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of embedded Qualcomm software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
CVE-2023-41056
A flaw was found in Redis. When processing a certain sequence of payloads, Redis may incorrectly handle the resizing of memory buffers, leading to a heap-based buffer overflow, potentially resulting in a denial of service or remote code execution. Mitigation Mitigation for this issue is either no...
The vulnerability of the MagicLine 4 authentication software lies in the possibility of data being written outside of the buffer in memory. This allows a malicious actor to gain unauthorized access to protected information and carry out a “Watering Hole” attack.
The vulnerability of the MagicLine 4 authentication software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information and carry out a “Watering Hole” attack...
The vulnerability of the 3D graphics editor Autodesk Maya, related to reading data beyond the buffer in memory, allows a hacker to execute arbitrary code.
The vulnerability of the 3D graphics editor Autodesk Maya is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of Zoom’s video conferencing software lies in its ability to copy input data into memory without checking its size. This allows attackers to trigger a service failure.
The vulnerability of Zoom video conferencing software relates to the copying of input data into buffers without checking their size. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
Ubuntu 23.04 / 23.10 : OpenVPN vulnerabilities (USN-6484-1)
The remote Ubuntu 23.04 / 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6484-1 advisory. It was discovered that OpenVPN incorrectly handled the --fragment option in certain configurations. A remote attacker could possibly use this issue t...