7680 matches found
PT-2023-18708 · Arm · Arm Android Gralloc Module
Name of the Vulnerable Software and Affected Versions: Arm Android Gralloc Module versions r24p0 through r41p0 before r42p0 Description: An issue was discovered in the Arm Android Gralloc Module, allowing a non-privileged user to read a small portion of the allocator process memory...
CVE-2023-22808
The CVE-2023-22808 entry describes an improper memory access in the Arm Android Gralloc Module (Mali GPU Kernel Driver) where a non-privileged user can read a small portion of the allocator process memory. Affected are Arm Mali variants: Bifrost r24p0–r41p0 before r42p0, Valhall r24p0–r41p0 befor...
CVE-2023-22808
An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost r24p0 through r41p0 before r42p0, Valhall r24p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0...
ARM Mali GPU Kernel Driver buffer error vulnerability
ARM Mali GPU Kernel Driver is a driver for a graphics processor unit from ARM UK. A security vulnerability exists in the ARM Mali GPU Kernel Driver that originates from an unprivileged user being able to read a small portion of the allocator process memory...
naga:wgsl_parser: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5393059834888192 Project: naga Fuzzing Engine: libFuzzer Fuzz Target: wgslparser Job Type: libfuzzerasannaga Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x63ffff9e52a8 Crash State: NULL Sanitizer: address ASAN Recommended Security...
SUSE CVE-2023-1819
Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...
CVE-2023-1819
Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2023-1819
Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...
Out-of-bounds
Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...
CVE-2023-1819
Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...
CorelDRAW Graphics Suite buffer error vulnerability
Corel CorelDRAW Graphics Suite is a vector graphics editing software from Corel Digital Technology Canada. A buffer overflow vulnerability exists in Corel CorelDRAW Graphics Suite, which can be exploited by an attacker to read more than the end of the allocated object...
CVE-2023-25884
Adobe Dimension versions 3.4.7 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...
CBL Mariner 2.0 Security Update: kernel (CVE-2022-2785)
The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2785 advisory. - There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in...
Oracle Linux 8 : openssl (ELSA-2023-12213)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12213 advisory. - Fixed Timing Oracle in RSA Decryption Resolves: CVE-2022-4304 - Fixed Double free after calling PEMreadbioex Resolves: CVE-2022-4450 - Fixed...
PT-2023-8409 · Apple · Ipados +4
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.3 tvOS versions prior to 16.4 iOS versions prior to 16.4 iPadOS versions prior to 16.4 watchOS versions prior to 9.4 Description: The issue is related to an out-of-bounds read in memory, which may allow a remote...
openssl: X.400 address type confusion in X.509 GeneralName
A type confusion vulnerability was found in OpenSSL when OpenSSL X.400 addresses processing inside an X.509 GeneralName. When CRL checking is enabled for example, the application sets the X509VFLAGCRLCHECK flag, this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call,...
openssl: X.400 address type confusion in X.509 GeneralName
A type confusion vulnerability was found in OpenSSL when OpenSSL X.400 addresses processing inside an X.509 GeneralName. When CRL checking is enabled for example, the application sets the X509VFLAGCRLCHECK flag, this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call,...
openssl: X.400 address type confusion in X.509 GeneralName
A type confusion vulnerability was found in OpenSSL when OpenSSL X.400 addresses processing inside an X.509 GeneralName. When CRL checking is enabled for example, the application sets the X509VFLAGCRLCHECK flag, this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call,...
Important: httpd
Issue Overview: A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool heap memory location beyond the header value sent. This could cause the process to crash. This issue affects Apache HTTP Server 2.4.54 and earlier. CVE-2006-20001 Inconsistent...
Substance 3D Stager Buffer Overflow
The vulnerability of the Substance 3D Stager software lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...