The vulnerability of the Kostac PLC Programming Software (formerly Koyo PLC Programming Software) relates to the re-release of memory, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Kostac PLC Programming Software formerly Koyo PLC Programming Software relates to the repeated release of memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created project file...

The vulnerability of the rsvp_change() function in the net/sched/cls_rsvp.h module of the net/sched component in the Linux operating system’s kernel allows a attacker to cause a service failure.

The vulnerability of the rsvpchange function in the net/sched/clsrsvp.h module of the net/shed component in the Linux kernel is related to the release of allocated memory outside the system. Exploiting this vulnerability could allow an attacker to cause a service failure...

Missing Release of Memory after Effective Lifetime

An issue in cimg.eu Cimg Library v2.9.3 allows an attacker to obtain sensitive information via a crafted JPEG file...

The vulnerability of the `parse_stab_struct_fields` function in the GNU Binutils development environment, related to a memory leak, allows an attacker to cause a service failure.

The vulnerability of the parsestabstructfields function in the GNU development environment is related to a memory release error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Wireshark traffic analyzer, related to a memory release error, allows a hacker to cause a service failure.

The vulnerability of the Wireshark traffic analyzer is related to a memory release error. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

The vulnerability of the components colord/src/cd-device-db.c and colord/src/cd-profile-db.c of the Linux operating system’s kernel, which allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the components colord/src/cd-device-db.c and colord/src/cd-profile-db.c in the Linux operating system’s system daemon colord is related to a memory release error. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the ProFTPD FTP server, related to a memory release error, allows attackers to gain unauthorized access to protected information.

The vulnerability of the ProFTPD FTP server is related to a memory release error. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime through the /pdf/pdf-font-add.c component. An attacker can obtain sensitive information by exploiting a memory leak issue. Remediation Upgrade mupdf to version 1.18.0 or higher...

The vulnerability of the “convert” command in the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure.

The vulnerability of the ImageMagick console-based graphic editor’s “convert” command is related to the improper release of memory before deleting the last link. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created file...

PT-2023-8782 · Unknown +2 · Imagemagick +2

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 6.9.12-91 Description: The issue is related to the Magick::Draw function in the ImageMagick console graphic editor, which is associated with memory release errors. Exploitation of this issue can allow an attacker...

The vulnerability of the Python library for monitoring computer resources, Psutil, relates to the repeated release of memory, allowing a hacker to cause a service failure.

The vulnerability of the Python library for monitoring computer resources, Psutil, is related to the repeated release of memory. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of GPS HLOS driver for Android operating systems in Qualcomm embedded chips allows a hacker to trigger a service failure.

The vulnerability of the GPS HLOS driver for Android operating systems in Qualcomm embedded chips is related to the re-release of memory upon calling the cancellation registration function after registration. Exploiting this vulnerability can allow a hacker to cause a service failure...

Siemens SIMATIC MV500 Devices

1. EXECUTIVE SUMMARY ​CVSS v3 8.2 ​ATTENTION: Exploitable remotely/low attack complexity ​Vendor: Siemens ​Equipment: SIMATIC MV500 series devices ​Vulnerabilities: Exposure of Sensitive Information to an Unauthorized Actor, Missing Release of Memory after Effective Lifetime, Injection, Inadequat...

SUSE-SU-2023:2765-1 Security update for libcap

This update for libcap fixes the following issues: - CVE-2023-2602: Fixed improper memory release in libcap/psx/psx.c:wrappthreadcreate bsc1211418. - CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/capalloc.c:libcapstrdup bsc1211419...

The vulnerability of the qcom_cpufreq_hw_cpu_exit() function in the drivers/cpufreq/qcom-cpufreq-hw.c module of the cpufreq subsystem of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the qcomcpufreqhwcpuexit function in the drivers/cpufreq/qcom-cpufreq-hw.c module, within the cpufreq subsystem CPU Frequency scaling of the Linux kernel, relates to the re-release of previously released memory when a device is removed. Exploiting this vulnerability could all...

The vulnerability of microprogramming software in Siemens SIMATIC and SINAMICS products, related to a memory release error, allows attackers to trigger malfunctions during maintenance operations.

The vulnerability of microprogrammed software in Siemens SIMATIC and SINAMICS products is related to a memory release error. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

A use-after-free flaw was found in mt7921_check_offload_capability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after 'features' memory release. This vulnerability could even lead to a kernel information leak problem.

...

CVE-2023-3317

A use-after-free flaw was found in mt7921checkoffloadcapability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after 'features' memory release. This vulnerability could even lead to a...

CVE-2023-3317

A use-after-free flaw was found in mt7921checkoffloadcapability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after 'features' memory release. This vulnerability could even lead to a...

Design/Logic Flaw

A use-after-free flaw was found in mt7921checkoffloadcapability in drivers/net/wireless/mediatek/mt76/mt7921/init.c in wifi mt76/mt7921 sub-component in the Linux Kernel. This flaw could allow an attacker to crash the system after 'features' memory release. This vulnerability could even lead to a...