CODESYS 缓冲区错误漏洞

CODESYS is a controller development system from Germany's 3S-Smart Software Solutions. A buffer error vulnerability exists in several CODESYS products and stems from a lack of internal buffer read limits in the application. An attacker can exploit this vulnerability to craft a request with an...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel 5.17, which stems from a small table perturbation that causes insufficient randomization in net/ipv4/tcp.c when the Linux kernel...

Intel BIOS firmware缓冲区错误漏洞

Intel BIOS firmware is a set of programs from the U.S. company Intel that are solidified onto a ROM chip on the motherboard inside a computer. A security vulnerability exists in the Intel BIOS firmware that arises from the use of out-of-range pointer offsets. An attacker could exploit the...

relan exFAT 安全漏洞

relan exFAT is the project's attempt to provide a fully functional exFAT file system implementation for Unix-like systems. A security vulnerability exists in relan exFAT version 1.3.0, which originates from obtaining sensitive information data from deleted files in the filesystem in certain...

CVE-2020-13495

An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access that could lead to the disclosure of sensitive information. This vulnerability could be used to bypa...

CVE-2020-13495

An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access that could lead to the disclosure of sensitive information. This vulnerability could be used to bypa...

CLSA-2022-1648142109 Fix CVE(s): CVE-2020-27762, CVE-2020-27770, CVE-2020-27760, CVE-2020-25665, CVE-2020-19667, CVE-2020-25674, CVE-2017-13144, CVE-2020-25676, CVE-2020-25664, CVE-2020-27753, CVE-2020-27750

SECURITY UPDATE: Crash if image dimensions are too large - debian/patches/CVE-2017-13144-.patch: Fix memory leak in MPC image format - CVE-2017-13144 SECURITY UPDATE: Stack-based buffer overflow - debian/patches/CVE-2020-19667.patch: Zero-out memory before use - CVE-2020-19667 SECURITY UPDATE:...

An unspecified vulnerability exists in vim (CNVD-2022-13206)

Vim is a UNIX-based editor. vim versions prior to 8.2.4418 contain a security vulnerability that stems from the use of out-of-range pointer offsets in vim. No details of the vulnerability are currently available...

vim 安全漏洞

Vim is a UNIX-based editor. vim versions prior to 8.2.4418 contain a security vulnerability that stems from the use of out-of-range pointer offsets in vim. No details of the vulnerability are currently available...

Unspecified vulnerability exists in mruby (CNVD-2022-12747)

mruby is a lightweight implementation of the Ruby language. mruby 3.2 previously had a security vulnerability that stemmed from the use of out-of-range pointer offsets. No detailed vulnerability details are currently available...

mruby 缓冲区错误漏洞

mruby is a lightweight implementation of the Ruby language. mruby 3.2 previously had a security vulnerability that stemmed from the use of out-of-range pointer offsets. No detailed vulnerability details are currently available...

PT-2022-7498 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the CDC-NCM component in the Linux kernel, where a broken device may provide an extreme offset and a reasonable length for a fragment, causing an integer overfl...

DEBIAN-CVE-2021-45764

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shiftchunkoffsets.isra...

CVE-2021-45764

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shiftchunkoffsets.isra...

UBUNTU-CVE-2021-45764

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shiftchunkoffsets.isra...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. GPAC has a security vulnerability that stems from the discovery, via the function shiftchunkoffsets.isra, that GPAC v1.1.0 contains an invalid memory address dereference. No detailed vulnerability details are currently available...

PT-2022-12394 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.1.0 Description: An issue was discovered in GPAC, where an invalid memory address dereference occurs via the function shift chunk offsets.isra. Recommendations: For GPAC version 1.1.0, at the moment, there is no information abo...

CVE-2021-46039

A Pointer Dereference Vulnerabilty exists in GPAC 1.0.1 via the shiftchunkoffsets.part function, which causes a Denial of Service context-dependent...

PT-2022-12521 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Pointer Dereference issue exists via the finplace shift moov meta offsets function, which causes a Denial of Service. Recommendations: For GPAC version 1.0.1, consider disabling the finplace shift moov meta...

SUSE: Security Advisory (SUSE-SU-2021:4063-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...