Siemens SmartVNC Memory Out-of-Bounds Access Vulnerability

Siemens SmartVNC is an industrial control device from Siemens, Germany. A memory out-of-bounds access vulnerability exists in Siemens SmartVNC, which can be exploited by a remote attacker to submit a specially crafted request that could crash the application or execute arbitrary code in the conte...

GHSA-6VQP-H455-42MR Uncontrolled Memory Allocation in Apache PDFBox

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions...

CAJViewer suffers from a memory corruption vulnerability (CNVD-2021-37438)

CAJviewer is a specialized full-text format reader for China Journal Network CJN, which supports TEB, NH, CAJ, KDH and PDF files of CJN. CAJViewer suffers from a memory corruption vulnerability. An attacker can exploit this vulnerability to cause the program to crash...

Design/Logic Flaw

Locked memory can be unlocked and modified by non secure boot loader through improper system call sequence making the memory region untrusted source of input for secure boot loader in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructur...

CVE-2021-30473

aomimage.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap...

Parallels Desktop Toolgate Uninitialized Memory Information Disclosure Vulnerability (CNVD-2021-34179)

Parallels Desktop is a virtual machine software that runs on Mac computers. A security vulnerability exists in the Toolgate component in Parallels Desktop version 15.1.4-47270. The vulnerability stems from failure to properly initialize memory before accessing it. A local attacker could exploit t...

CVE-2021-22332

There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. When a function is called, the same memory pointer is copied to two functional modules. Attackers can exploit this vulnerability by performing a malicious...

CVE-2021-21219

CVE-2021-21219 concerns uninitialized data in PDFium used by Google Chrome prior to 90.0.4430.72, enabling a remote attacker to glean potentially sensitive information from process memory via a crafted PDF. The connected documents corroborate this information-disclosure impact via PDFium across C...

Wireshark Memory Consumption Vulnerability

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A memory consumption vulnerabilit...

Wireshark SQL注入漏洞

Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A memory consumption vulnerabilit...

CVE-2021-29950

Thunderbird unprotects a secret OpenPGP key prior to using it for a decryption, signing or key import task. If the task runs into a failure, the secret key may remain in memory in its unprotected state. This vulnerability affects Thunderbird 78.8.1...

The vulnerabilities of Huawei’s micro-programming software for routers allow attackers to trigger service interruptions.

The vulnerability of Huawei’s microprogrammed router software relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Corel Parallels Desktop 缓冲区错误漏洞

Parallels Desktop is a virtual machine software that runs on Mac computers. A security vulnerability exists in the Toolgate component in Parallels Desktop version 15.1.4-47270. The vulnerability stems from failure to properly initialize memory before accessing it. A local attacker could exploit t...

NVIDIA Windows GPU Display Driver 代码问题漏洞

Nvidia NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver for the Windows platform from Nvidia. NVIDIA Windows GPU Display Driver for Windows suffers from a code issue vulnerability that originates when the handler's program dereferences a pointer, containing a...

CVE-2021-31261

The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...

Double free

A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in FBX's Review causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system...

Important: kernel-livepatch-4.14.219-164.354

Issue Overview: A flaw was found in the way access to sessions and handles was handled in the iSCSI driver in the Linux kernel. A local user could use this flaw to leak iSCSI transport handle kernel address or end arbitrary iSCSI connections on the system. CVE-2021-27363 A flaw was found in the...

The vulnerability in the implementation of the fts_driver_test_write function in the Touch component of Android operating systems allows a malicious actor to escalate their privileges.

The vulnerability of the ftsdrivertestwrite function implementation in the Touch component of Android operating systems lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow attackers to gain increased privileges...

The vulnerability in the implementation of the MIDI protocol in Linux kernel allows attackers to increase their privileges.

The vulnerability of the Linux operating system’s MIDI kernel implementation relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

Huawei Emui Buffer Overflow Vulnerability (CNVD-2021-28305)

Huawei Emui is an Android-based mobile operating system developed by Huawei, a Chinese company. A memory buffer overflow vulnerability exists in the Huawei Emui component interface. A local attacker can exploit this vulnerability by carefully constructing an attack scenario to cause an...