The vulnerability of the Kernel Samepage Merging (KSM) component in the Linux operating system allows a hacker to gain access to the user’s page.

The vulnerability of the Kernel Samepage Merging KSM component in the Linux operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain access to the user’s page...

PT-2024-8182

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: The issue is related to a memory corruption vulnerability caused by a buffer overflow in the ASMKERN228A.dll and ASMKERN229A.dll libraries of Autodesk AutoCAD. This can be exploite...

DEBIAN-CVE-2024-24266

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

The vulnerability of the formQosManage_auto function in the wireless access point Tenda W9 software allows a intruder to execute any code they desire.

The vulnerability of the formQosManageauto function in the wireless access point software Tenda W9 relates to reading data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Google Chrome Network module memory misreference vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Network module, which stems from a confusion in the instructions responsible for freeing memory in the Network module. An attacker can exploit this vulnerability to...

The vulnerability of the RGXBackingZSBuffer() function in the PowerVR GPU driver for Android and ChromeOS allows a hacker to execute arbitrary code and gain elevated privileges.

The vulnerability of the RGXBackingZSBuffer function in the PowerVR GPU graphics driver for Android and ChromeOS systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code and gain elevated privileges...

Linux kernel memory misreference vulnerability (CNVD-2024-08085)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a memory misreference vulnerability that originates from a mix-up in the instruction responsible for freeing memory in the Bluetooth module. An...

The vulnerability of the formSetDeviceName function in the microprogramming software for Tenda AC10U allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetDeviceName function in the Tenda AC10U router’s microprogramming software relates to reading data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protect...

The vulnerability of the __ext4_remount() function in Linux operating systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ext4remount function in Linux operating systems is related to the use of memory after it is freed when processing old file names with the CONFIGQUOTA configuration. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and...

UBUNTU-CVE-2023-52355

An out-of-memory flaw was found in libtiff that could be triggered by passing a crafted tiff file to the TIFFRasterScanlineSize64 API. This flaw allows a remote attacker to cause a denial of service via a crafted input with a size smaller than 379 KB...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A memory misreference vulnerability exists in SWFTools version 0.9.2, which stems from a messed up instruction responsible for freeing memory in the swfDeleteTag method on page rfxswf.c:1193. An attacker can exploit this...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A memory misreference vulnerability exists in SWFTools version 0.9.2, which stems from a confusion in the instructions responsible for freeing memory in the bufferWriteData method of the swftools/lib/action/compile.c pag...

EulerOS 2.0 SP10 : cups (EulerOS-SA-2023-2782)

According to the versions of the cups package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacke...

CVE-2024-21599

A Missing Release of Memory after Effective Lifetime vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on MX Series allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. If an MX Series device receives PTP packets on an MPC3E that doesn't...

The vulnerability of the application programming interface for working with computer graphics in the WebGPU browser interfaces of Google Chrome and Microsoft Edge allows a perpetrator to disclose protected information.

The vulnerability of the application programming interface for working with computer graphics in WebGPU browsers like Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

GTKWave memory misreference vulnerability (CNVD-2024-39043)

GTKWave is a full-featured, GTK+-based waveform viewer from GTKWave. GTKWave suffers from a memory misreference vulnerability that can be exploited by an attacker to cause arbitrary code execution via a specially crafted fst file...

CVE-2024-0340

A vulnerability was found in vhostnewmsg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhostnewmsg function. This issue can allow local privileged users to read...

The vulnerability of the rose_ioctl() function in the net/rose/af_rose.c module, which is part of the Amateur Radio X.25 PLP (Rose) protocol implementation in the Linux operating system, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the roseioctl function in the net/rose/afrose.c module, which is part of the Amateur Radio X.25 PLP Rose protocol implementation in the Linux operating system, relates to the reallocation of previously freed memory due to concurrent access to resources. Exploiting this...

Spreadsheet::ParseXLSX Security Vulnerability

Spreadsheet::ParseXLSX is an XLSX file parser. A security vulnerability exists in Spreadsheet::ParseXLSX prior to version 0.28, which stems from memoize not properly constraining merged cells, resulting in an out-of-memory condition when parsing XLSX documents...

Medium: binutils

Issue Overview: A memory consumption issue in getdata function in binutils/nm.c in GNU nm before 2.34 allows attackers to cause a denial of service via crafted command. CVE-2020-19724 Heap-based Buffer Overflow in function bfdgetl32 in Binutils objdump 3.37. CVE-2021-46174 An issue was discovered...