202 matches found
CVE-2013-2292
bitcoind and Bitcoin-Qt 0.8.0 and earlier allow remote attackers to cause a denial of service electricity consumption by mining a block to create a nonstandard Bitcoin transaction containing multiple OPCHECKSIG script opcodes...
CVE-2019-10567
There is a way to deceive the GPU kernel driver into thinking there is room in the GPU ringbuffer and overwriting existing commands could allow unintended GPU opcodes to be executed in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...
Security update for the Linux Kernel
The SUSE Linux Enterprise Micro 6.0 and 6.1 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2024-27415: netfilter: brnetfilter: skip conntrack input hook for promisc packets bsc1224757. CVE-2024-50038: netfilter: xtables: fix typo causing so...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from an information disclosure when calling the callback function of the sound model driver from the ADSP for each valid opcode received from the sound...
kernel: Bluetooth: hci: fix null-ptr-deref in hci_read_supported_codecs
A flaw was found in the Linux kernel's Bluetooth Host Controller Interface HCI component. A null pointer dereference occurs in the hcireadsupportedcodecs function because hcicmdsyncsk incorrectly returns a NULL value for unknown opcodes. A local attacker with low privileges could exploit this...
The vulnerability of the ctl_report_supported_opcodes() function in the ctl subsystem of FreeBSD allows a hacker to execute arbitrary code.
The vulnerability of the ctlreportsupportedopcodes function in the ctl subsystem of FreeBSD stems from a pointer being moved beyond the allocated memory area due to insufficient filtering of special elements. Exploiting this vulnerability allows an attacker to execute arbitrary code...
SUSE CVE-2024-50255
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: fix null-ptr-deref in hcireadsupportedcodecs Fix hcicmdsyncsk to return not NULL for unknown opcodes. hcicmdsyncsk returns NULL if a command returns a status event. However, it also returns NULL where an opcode...
DEBIAN-CVE-2024-50255
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: fix null-ptr-deref in hcireadsupportedcodecs Fix hcicmdsyncsk to return not NULL for unknown opcodes. hcicmdsyncsk returns NULL if a command returns a status event. However, it also returns NULL where an opcode...
UBUNTU-CVE-2024-50255
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci: fix null-ptr-deref in hcireadsupportedcodecs Fix hcicmdsyncsk to return not NULL for unknown opcodes. hcicmdsyncsk returns NULL if a command returns a status event. However, it also returns NULL where an opcode...
CVE-2024-42416
The ctlreportsupportedopcodes function did not sufficiently validate a field provided by userspace, allowing an arbitrary write to a limited amount of kernel help memory. Malicious software running in a guest VM that exposes virtioscsi can exploit the vulnerabilities to achieve code execution on...
FreeBSD 安全漏洞
FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD that stems from the ctlreportsupportedopcodes function not adequately validating user-space-supplied fields, allowing arbitrary writes to a limited amount of kernel helper memor...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a problem with the ordering of password opcodes on workstations...
CVE-2023-28587
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level...
Memory corruption
Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level...
CVE-2020-35342
GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4xprintcond file opcodes/tic4x-dis.c which could allow attackers to make an information leak...
CVE-2020-35342
GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4xprintcond file opcodes/tic4x-dis.c which could allow attackers to make an information leak...
Heap overflow
GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4xprintcond file opcodes/tic4x-dis.c which could allow attackers to make an information leak...
CVE-2020-35342
GNU Binutils before 2.34 has an uninitialized-heap vulnerability in function tic4xprintcond file opcodes/tic4x-dis.c which could allow attackers to make an information leak...
SUSE CVE-2008-0668
The excelreadHLINK function in plugins/excel/ms-excel-read.c in Gnome Office Gnumeric before 1.8.1 allows user-assisted remote attackers to execute arbitrary code via a crafted XLS file containing XLS HLINK opcodes, possibly because of an integer signedness error that leads to an integer overflow...
SUSE CVE-2010-2191
The 1 parsestr, 2 pregmatch, 3 unpack, and 4 pack functions; the 5 ZENDFETCHRW, 6 ZENDCONCAT, and 7 ZENDASSIGNCONCAT opcodes; and the 8 ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents or...