CVE-2021-29937

CVE-2021-29937 affects the Rust telemetry crate (through 2021-02-17). The issue is a drop of uninitialized memory if a value.clone() panics inside misc::vec_with_size(), as described across multiple sources (e.g., Red Hat, OSV, GHSA). The vulnerability details consistently identify the root cause...

CVE-2021-29647

A flaw was found in the Linux kernel. This flaw allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure. The highest threat from this vulnerability is to confidentiality...

Interactive Graphical SCADA System Buffer Overflow

The vulnerability of the interactive graphical SCADA system, Interactive Graphical SCADA System IGSS, arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Samba Memory Use After Free DoS

The vulnerability of the Samba networking software’s LDAP server relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Samsung SMR 安全漏洞

Samsung DSP driver is a digital signal processing driver for Samsung mobile devices. The Samsung DSP driver suffers from an out-of-bounds write vulnerability that stems from incorrect boundary checking, which can be exploited by an attacker to perform out-of-bounds memory accesses...

PDF viewer Memory Use Disclosure

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. These vulnerabilities allow unauthorized access to confidential information within the...

PDF viewer Memory Use Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Arbitrary code can be executed in the context of the current user using a specially crafte...

PDF viewer Memory Use Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat and Document Cloud, are related to the use of memory after it is freed. Arbitrary code can be executed in the context of the current user using a specially crafte...

Memory Out-of-Bounds Access Vulnerability in WebAccess/HMI Designer

WebAccess/HMI Designer is an integrated human-machine interface development tool. A memory out-of-bounds access vulnerability exists in WebAccess/HMI Designer, which can be exploited by an attacker to cause a denial of service...

Memory Out-of-Bounds Access Vulnerability in WebAccess/HMI Designer (CNVD-2021-24532)

WebAccess/HMI Designer is an integrated human-machine interface development tool. A memory out-of-bounds access vulnerability exists in WebAccess/HMI Designer, which can be exploited by an attacker to cause a denial of service...

CVE-2021-22321

There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include...

多款Huawei产品资源管理错误漏洞

Huawei S2700, etc. are products of Huawei, China.S2700 is an enterprise switch.USG9500 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a data center firewall.USG6600 is a...

LibTIFF Image Conversion DoS

The vulnerability of the TIFF-to-RGBA tiff2rgba conversion module in the LibTIFF library is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by using a specially created TI...

Katy Voor HHVM 缓冲区错误漏洞

Katy Voor HHVM is an open source application by Katy Voor. Provides an open source virtual machine designed to execute programs written in Hack. A security vulnerability exists in HHVM that allows memory to be read before memory buffers. The following products and versions are affected: HHVM...

PT-2021-3889

Name of the Vulnerable Software and Affected Versions PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 affected versions not specified Description The issue is related to a buffer overflow in the memory, which could allow a remote attacker to cause the device to...

CVE-2020-27779

A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory creating an opportunity to circumvent SecureBoot protections after proper triage about grub's memory layout. The highest...

Memory Out-of-Bounds Access Vulnerability in GX Works2

GX Works2 is a PLC programming software. A memory out-of-bounds access vulnerability exists in GX Works2. An attacker could exploit this vulnerability to cause the program to crash...

Denial of Service Vulnerability in GX Works2 (CNVD-2021-16895)

GX Works2 is a PLC programming software. A memory out-of-bounds access vulnerability exists in GX Works2. An attacker could exploit this vulnerability to cause the program to crash...

Rust Information Disclosure Vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. An information disclosure vulnerability exists in versions of Rust prior to 0.1.3, which can be exploited to obtain sensitive information via a memory location that is never initialized by IoReader :: read...

Payments component Google Chrome Code Execution

The vulnerability of the Payments component in the Google Chrome web browser is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...