CVE-2022-1508

An out-of-bounds read flaw was found in the Linux kernel’s iouring module in the way a user triggers the ioread function with some special parameters. This flaw allows a local user to read some memory out of bounds...

SUSE-SU-2022:1436-1 Security update for libaom

This update for libaom fixes the following issues: - CVE-2021-30473: AOMedia in aomimage.c frees memory that is not located on the heap bsc1185778...

PHP zend_shared_memdup Heap Buffer Overflow DoS

The vulnerability of the zendsharedmemdup function zendsharedalloc.c in the PHP programming language is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or have other adverse effects...

Pillow Heap Buffer Overflow

The vulnerability of the Pillow image processing library arises from an overflow in the buffer of dynamic memory. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality and integrity of the protected information...

PHP process_nested_data Code Execution

The vulnerability of the processnesteddata function in the PHP programming language is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

PHP php_zip.c Code Execution

The vulnerability of the phpzip.c component of the PHP programming language interpreter relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary PHP code or cause a service failure by using specially created serialized data containing a...

Adobe Illustrator Buffer Overflow Info Disclosure

The vulnerability of Adobe Illustrator’s graphic editor arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to protected information through a specially crafted PDF file...

PHP imagegammacorrect Heap Buffer Overflow DoS

The vulnerability of the imagegammacorrect function ext/gd/gd.c in the PHP programming language is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause service interruptions or potentially cause other adverse effects...

MariaDB my_mb_wc_latin1 component memory misreference vulnerability

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A memory misreference vulnerability exists in the MariaDB mymbwclatin1 component, no details of the vulnerability are provided at this time...

MariaDB Binary_string::free_buffer() component memory misreference vulnerability

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A memory misreference vulnerability exists in Mariadb v10.9 and earlier versions, which originates in the /sql/sqlstring.h component...

PDF Viewer Memory Use Code Execution

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this...

PJSIP Use-After-Free DoS

The vulnerability of the PJSIP multimedia communication library is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Adobe Animate Buffer Overflow Information Disclosure

The vulnerability of the Adobe Animate software for creating multimedia and computer animations relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Cluster Component Code Execution

Vulnerability of the Cluster component: General database management systems like MySQL Cluster involve reading data beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Cluster Component Code Execution

Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable due to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

QR Code Generator Extension Data Compromise

The vulnerability of the QR Code Generator browser extensions for Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Portals Components DoS

The vulnerability of the Portals components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Adobe Bridge Buffer Overflow Code Execution

The vulnerability of the Adobe Bridge file manager is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system remotely...

Google Chrome Microsoft Edge Unauthorized Access

The vulnerability of the Tab Strip control element in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page...

Vulnerabilities fixed in Apple products

Two different vulnerabilities have been fixed by Apple. The vulnerability with CVE attribute CVE-2022-22675 allows a malicious person able to execute arbitrary code with kernel privileges. This vulnerability has been fixed in macOS, iOS and iPadOS. The second vulnerability, CVE-2022-22674, allows...