CVE-2022-41686 Out-of-bound memory read and write in /dev/mmz_userdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading sensitive to information disclosure. The proc ...

OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have an Out-of-bound memory read and write vulnerability in /dev/mmzuserdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading...

PT-2022-19635 · Altair · Altair Hyperview Player

Name of the Vulnerable Software and Affected Versions: Altair HyperView Player versions 2021.1.0.27 and prior Description: The issue arises from operations on a memory buffer that can read from or write to a memory location outside of the intended boundary of the buffer, initially hitting as a re...

CVE-2022-41686: Out-of-bounds Write

OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versions have an Out-of-bound memory read and write vulnerability in /dev/mmzuserdev device driver. The impact depends on the privileges of the attacker. The unprivileged process run on the device could read out-of-bound memory leading...

CVE-2022-3435

An out-of-bounds memory read flaw was found in the Linux kernel. The IPv4 Handler component may delete IPv4 routes containing a multipath spec while the fibinfo is using a nexthop object. This issue allows a local attacker access to unauthorized data. Mitigation No known mitigation available...

ruby: Buffer overrun in String-to-Float conversion

A buffer overrun vulnerability was found in Ruby. The issue occurs in a conversion algorithm from a String to a Float that causes process termination due to a segmentation fault, but under limited circumstances. This flaw may cause an illegal memory read...

ruby: Buffer overrun in String-to-Float conversion

A buffer overrun vulnerability was found in Ruby. The issue occurs in a conversion algorithm from a String to a Float that causes process termination due to a segmentation fault, but under limited circumstances. This flaw may cause an illegal memory read...

Medium: ruby

Issue Overview: A buffer overrun vulnerability was found in Ruby. The issue occurs in a conversion algorithm from a String to a Float that causes process termination due to a segmentation fault, but under limited circumstances. This flaw may cause an illegal memory read. CVE-2022-28739 Affected...

Medium: ruby20

Issue Overview: A buffer overrun vulnerability was found in Ruby. The issue occurs in a conversion algorithm from a String to a Float that causes process termination due to a segmentation fault, but under limited circumstances. This flaw may cause an illegal memory read. CVE-2022-28739 Affected...

EulerOS Virtualization 3.0.6.6 : httpd (EulerOS-SA-2022-2506)

According to the versions of the httpd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A carefully crafted request body can cause a buffer overflow in the modlua multipart parser r:parsebody called from Lua scripts. T...

msquic:fuzz: Stack-buffer-overflow in QuicSettingsGlobalSettingsToInternal

Project: https://github.com/microsoft/msquic.git Detailed Report: https://oss-fuzz.com/testcase?key=5679956525187072 Project: msquic Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanmsquic Platform Id: linux Crash Type: Stack-buffer-overflow READ 2 Crash Address: 0x7fffbbc3bf48...

Horner Automation Cscape buffer error vulnerability

Horner Automation Cscape is a suite of programming software for industrial control system development from Horner Automation. A buffer error vulnerability exists in Horner Automation Cscape 9.90 SP 6 and prior versions, which arises from failure to properly validate user-supplied data. If a user...

DNS BIND Buffer Overflow DoS

The vulnerability of the DNS BIND server lies in the lack of buffer length checking and the inability to read beyond the memory limit. Exploiting this vulnerability can allow a malicious actor to access protected information or cause service failures...

Arbitrary Memory read in BPF Linux Kernel

...

skia:region_set_path: Heap-buffer-overflow in SkPath::reverseAddPath

Project: https://skia.googlesource.com/skia.git Detailed Report: https://oss-fuzz.com/testcase?key=5024275493158912 Project: skia Fuzzing Engine: afl Fuzz Target: regionsetpath Job Type: aflasanskia Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x604000000248 Crash...

Linux Kernel Arbitrary Memory Read Vulnerability

The Linux kernel is an open source Unix-like operating system macro kernel for efficient resource management. A security vulnerability exists in the Linux Kernel where constants used to populate pointers in structures passed to bpfsysbpf are unverified and can point anywhere, and an attacker with...

ISC BIND Buffer Overflow Vulnerability

ISC BIND is the United States ISC company's set of open source software that implements the DNS protocol. ISC BIND suffers from a buffer overflow vulnerability that originates when reusing an HTTP connection to request statistics from the stats channel, where the length of the contents of...

CVE-2022-2785

An out-of-bounds OOB memory read problem was found in bpf in the Linux kernel's kernel/bpf/syscall.c function due to an improper check of bpfsysbpf arguments. The bounds check failure allows a local attacker to access out-of-bounds memory, leading to a leak of internal kernel information...

AZL-34860 CVE-2022-2785 affecting package kernel for versions less than 6.6.35.1-4

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

CVE-2022-2785

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...

CVE-2022-2785

There exists an arbitrary memory read within the Linux Kernel BPF - Constants provided to fill pointers in structs passed in to bpfsysbpf are not verified and can point anywhere, including memory not owned by BPF. An attacker with CAPBPF can arbitrarily read memory from anywhere on the system. We...