7470 matches found
envoy:evaluator_fuzz_test: Use-after-poison in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5620971127504896 Project: envoy Fuzzing Engine: honggfuzz Fuzz Target: evaluatorfuzztest Job Type: honggfuzzasanenvoy Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address:...
Pure-FTPd domlsd() Function Interrupt Connection
The vulnerability of the domlsd function in the ls.c file of the FTP server Pure-FTPd involves reading data beyond the allowed range of memory. Exploiting this vulnerability could allow a remote attacker to interrupt the user’s connection to the server...
GigaDevice GD32 device controllers insufficient access control
The vulnerability of GigaDevice’s GD32 microprogrammed device controllers, such as GD32F1x0, GD32F4xx, and GD32F3x0, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to read data from the RAM or alter its state...
CVE-2024-42387: Use of Out-of-range Pointer Offset
Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force the application to read unintended heap memory space...
Cesanta Mongoose Web Server 安全漏洞
Cesanta Mongoose Web Server is a cross-platform embedded server and web library written in C from Cesanta Ireland. A security vulnerability exists in Cesanta Mongoose Web Server version v7.14, which stems from the presence of out-of-range pointer offsets that allow an attacker to send unexpected...
GRUB NTFS Buffer Overflow
The vulnerability of the GRUB loader driver for NTFS operating systems involves reading memory beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to read the contents of the RAM...
OpenEXR: Heap Overflow in Scanline Deep Data Parsing
A vulnerability was found in the Academy Software Foundation OpenEXR and requires that a malicious EXR file image is parsed by the target device or environment using OpenEXR. This issue occurs due to a failure in validating the number of scanline samples of an OpenEXR file containing deep scanlin...
kernel: tcp_metrics: validate source addr length
A vulnerability was found in the Linux kernel's tcpmetrics.c, where insufficient validation of the length of the source address for TCP metrics could lead to incorrect memory read out of boundary read...
FreeBSD 安全漏洞
FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD that stems from the vulnerability of the hda driver to buffer over-reading, which allows an attacker to perform a denial-of-service DoS attack against the host computer and read...
Huawei EulerOS: Security Advisory for c-ares (EulerOS-SA-2024-2824)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-10368
Certain Cypress and Broadcom Wireless Combo chips, when a January 2021 firmware update is not present, allow memory read access via a "Spectra" attack...
CVE-2020-10368
Certain Cypress and Broadcom Wireless Combo chips, when a January 2021 firmware update is not present, allow memory read access via a "Spectra" attack...
CVE-2020-10368
Certain Cypress and Broadcom Wireless Combo chips, when a January 2021 firmware update is not present, allow memory read access via a "Spectra" attack...
CVE-2020-10368
Certain Cypress (and Broadcom) Wireless Combo chips are vulnerable to memory read access via a "Spectra" attack . This issue affects hardware versions that lack the January 2021 firmware update . To mitigate this risk, users are urged to update to the latest firmware and apply all recommended pat...
CVE-2020-10368: Insecure Storage of Sensitive Information
Certain Cypress and Broadcom Wireless Combo chips, when a January 2021 firmware update is not present, allow memory read access via a "Spectra" attack...
pywasm3 has an Invalid Memory Read, Leading to DoS and Potential Code Execution
wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution...
GHSA-MHG9-MM8C-C683 pywasm3 has an Invalid Memory Read, Leading to DoS and Potential Code Execution
wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution...
PYSEC-2024-304
wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution...
