The vulnerability of the Cisco AsyncOS operating system proxy server of Cisco Web Security Appliance allows a perpetrator to cause a service failure or execute arbitrary code.

The vulnerability of the Cisco AsyncOS operating system’s proxy server, which is part of the Cisco Web Security Appliance internet gateway, relates to memory release errors. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability in the Google Chrome web browser, related to the ICU library for handling Unicode, allows a malicious actor to repeatedly release memory, enabling them to access confidential data, compromise its integrity, and cause service failures.

The vulnerability in the Google Chrome web browser, related to the ICU Unicode library, involves repeated memory release. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures through a specially created HTML pa...

The vulnerability of the WriteDIBImage component in the console-based image editing tool ImageMagick, which stems from improper memory release before deleting last references, allows a hacker to trigger a service failure.

The vulnerability of the WriteDIBImage component in the console-based ImageMagick graphics editor is related to improper memory release before deleting the last references. Exploiting this vulnerability may allow an attacker to cause a service failure...

The vulnerability of the GnuTLS cryptographic library, related to the repeated memory release mechanism, allows a hacker to cause a service failure.

The vulnerability of the GnuTLS cryptographic library is related to the repeated release of memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2021-31367

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on PTX Series allows an adjacent attacker to cause a Denial of Service DoS by sending genuine BGP flowspec packets which cause an FPC heap memory leak. Once having r...

The vulnerability of the MessageTasks operation in the Mozilla Firefox browser allows a hacker to execute arbitrary code within the system.

The vulnerability of the MessageTasks operation in the Mozilla Firefox browser is related to a memory release error. Exploiting this vulnerability could allow an attacker to execute arbitrary code on the system remotely...

The vulnerability of the copy_from_user() function in the file system of the shiftfs filesystem in Linux’s operating system, which is related to the repeated release of memory, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the copyfromuser function in the file system of the shiftfs filesystem in Linux’s operating system is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause service...

The vulnerability of the hci_dev_do_open() function in the Linux kernel’s device initialization subsystem, related to the repeated memory release, allows a attacker to trigger a service failure.

The vulnerability of the hcidevdoopen function in the Linux kernel’s device initialization subsystem is related to the repeated release of memory. Exploiting this vulnerability allows an attacker to cause a service failure using the malicious HCI TTY Bluetooth device...

The vulnerability of the show-status function of the CGI proxy HTTP Privoxy handler, related to improper memory release before deleting last links, allows a hacker to trigger a service failure.

The vulnerability of the show-status function in the CGI proxy HTTP Privoxy handler is related to improper memory release before deleting last links. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the kernel of the Junos operating system’s CLI component, which allows a attacker to trigger an emergency shutdown of the application

The vulnerability of the kernel of the Junos operating system’s CLI component is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause the application to terminate abnormally...

The vulnerability of the Webmail component of the FortiMail email protection system allows a hacker to cause a service failure.

The vulnerability of the Webmail component of the FortiMail email protection system is related to a memory release error. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially crafted login requests to the system...

ROS-2-538

2.538 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

GHSA-5RWJ-J5M3-3CHJ Missing Release of Memory after Effective Lifetime in detect-character-encoding

Impact In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. Patches The problem has been patched in detect-character-encoding v0.3.1. CVSS score CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/RL:O/RC:C Base Score: 7.5 High Temporal Score: 7.2 High Since...

Missing Release of Memory after Effective Lifetime in detect-character-encoding

Impact In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. Patches The problem has been patched in detect-character-encoding v0.3.1. CVSS score CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/RL:O/RC:C Base Score: 7.5 High Temporal Score: 7.2 High Since...

CVE-2021-39176 Missing Release of Memory after Effective Lifetime in detect-character-encoding

detect-character-encoding is a package for detecting character encoding using ICU. In detect-character-encoding v0.3.0 and earlier, allocated memory is not released. The problem has been patched in detect-character-encoding v0.3.1...

Use after free in internment

ArcIntern::drop has a race condition where it can release memory which is about to get another user. The new user will get a reference to freed memory. This was fixed by serializing access to an interned object while it is being deallocated. Versions prior to 0.3.12 used stronger locking which...

GHSA-RFGG-VCCR-M46M Missing release of memory in sized-chunks

An issue was discovered in the sized-chunks crate through 0.6.2 for Rust. In the Chunk implementation, clone can have a memory-safety issue upon a panic...

GHSA-X54V-QXXR-93QC Missing release of memory in sized-chunks

Chunk: Array size is not checked when constructed with unit and pair. Array size is not checked when constructed with From. Clone and insertfrom are not panic-safe; A panicking iterator causes memory safety issues with them. InlineArray: Generates unaligned references for types with a large...

Missing release of memory in sized-chunks

Chunk: Array size is not checked when constructed with unit and pair. Array size is not checked when constructed with From. Clone and insertfrom are not panic-safe; A panicking iterator causes memory safety issues with them. InlineArray: Generates unaligned references for types with a large...

The vulnerability of the gatttool disconnect_cb() subroutine in the shared/att.c component of the Bluetooth technology stack for Linux BlueZ allows a intruder to access confidential data, compromise its integrity, and cause a service failure.

The vulnerability of the gatttool disconnectcb subroutine in the shared/att.c component of the Bluetooth technology stack for Linux BlueZ is related to the repeated release of a memory area due to an excessive disconnection event from MGMT. Exploiting this vulnerability allows an attacker to gain...