Lucene search
K

24 matches found

Redos
Redos
added 2026/06/22 12:0 a.m.5 views

ROS-20260622-73-0015

The vulnerability in Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.5CVSS6.5AI score0.00314EPSS
Exploits0
EUVD
EUVD
added 2026/05/15 2:36 a.m.11 views

EUVD-2023-35627

Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor ASP could allow an attacker with the ability to write outside the trusted memory range TMR to change the execution flow of the Video Core Next VCN firmware potentially...

7.1CVSS5.9AI score0.00095EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/04/09 11:0 p.m.4 views

CVE-2026-35195

A flaw was found in Wasmtime, a runtime for WebAssembly. A malicious guest component can exploit an issue where the host does not validate memory allocation requests. This allows the guest to write arbitrary data to locations outside its designated memory. Depending on the configuration, this cou...

6.3CVSS6.1AI score0.00216EPSS
Exploits0References4
OSV
OSV
added 2025/08/07 11:15 p.m.5 views

CVE-2025-30405

An integer overflow vulnerability in the loading of ExecuTorch models can cause objects to be placed outside their allocated memory area, potentially resulting in code execution or other undesirable effects. This issue affects ExecuTorch prior to commit 0830af8207240df8d7f35b984cdf8bc35d74fa73...

9.8CVSS7.5AI score0.00571EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/09 12:0 a.m.5 views

The vulnerability of TOTOLINK N150RT router microprogramming software, related to the execution of operations outside the buffer in memory, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of TOTOLINK N150RT router microprogramming software lies in the fact that the operation values are stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

9CVSS7.8AI score0.00852EPSS
Exploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/04/30 12:0 a.m.6 views

The vulnerability of the loginAuth function in the TOTOlink EX1800T Wi-Fi extension software allows a perpetrator to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the loginAuth function in the TOTOlink EX1800T Wi-Fi extension software lies in the fact that the operation results are stored outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility...

9CVSS7.9AI score0.00771EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/04 12:0 a.m.6 views

The vulnerability of the Intel PROSet/Wireless WiFi networking utility lies in the fact that operations are performed outside the buffer in memory, allowing a malicious actor to cause a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

6.1CVSS5.8AI score0.0027EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2025/01/13 12:0 a.m.4 views

Imagination GPU Driver 安全漏洞

Imagination GPU Driver is a graphics driver from Imagination. A security vulnerability exists in the Imagination GPU Driver that originates from kernel software installed and running in a guest virtual machine that may issue incorrect commands to the GPU firmware to write data outside of the memo...

4.4CVSS6.8AI score0.00186EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/24 12:0 a.m.3 views

The vulnerability of embedded software developed by Qualcomm, related to operations that occur outside of the buffer in memory, allows attackers to cause system failures.

The vulnerability of embedded Qualcomm software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

7.8CVSS5.9AI score0.00311EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2024/09/03 12:0 a.m.5 views

The vulnerability of the ngx_http_v4_module in NGINX Plus and NGINX OSS web servers, related to reading data from outside of memory, allows attackers to cause service interruptions.

The vulnerability of the ngxhttpv4module in NGINX Plus and NGINX OSS web servers is related to reading data from outside of the memory boundaries. Exploiting this vulnerability can allow attackers to cause service failures...

4.7CVSS6.5AI score0.0032EPSS
Exploits0References8Affected Software6
SUSE CVE
SUSE CVE
added 2024/08/23 2:53 a.m.3 views

SUSE CVE-2022-48923

In the Linux kernel, the following vulnerability has been resolved: btrfs: prevent copying too big compressed lzo segment Compressed length can be corrupted to be a lot larger than memory we have allocated for buffer. This will cause memcpy in copycompressedsegment to write outside of allocated...

7.8CVSS6.3AI score0.0021EPSS
Exploits0References16
Redos
Redos
added 2024/08/07 12:0 a.m.17 views

ROS-20240725-13

A vulnerability in the NVIDIA GPU Display Driver software driver for Linux is related to privilege management errors. Exploitation of the vulnerability could allow an attacker to disclose protected information and cause a denial of service A vulnerability in the NVIDIA GPU Display Driver for Linu...

7.8CVSS8.1AI score0.00275EPSS
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/07/17 12:0 a.m.5 views

The vulnerability of Juniper Networks’ Junos OS operating system in MX and EX9200 devices, related to operations that go beyond the buffer in memory, allows attackers to cause service interruptions.

The vulnerability of Juniper Networks’ Junos OS operating system in MX and EX9200 devices is related to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

5.9CVSS5.7AI score0.00581EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/13 12:0 a.m.4 views

The vulnerability of the formexeCommand() function in Tenda i21 router microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formexeCommand function in Tenda i21 router microprogramming software is related to the operation that occurs outside the buffer in memory when processing the cmdinput parameter. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality,...

9CVSS8AI score0.01453EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/04/12 12:0 a.m.5 views

The vulnerability in the Intel oneAPI Toolkit’s software development tools relates to the execution of operations outside of the buffer in memory, allowing attackers to exploit their privileges.

The vulnerability in the Intel oneAPI Toolkit development tools relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

6CVSS7.2AI score0.0017EPSS
Exploits0References2Affected Software17
BDU FSTEC
BDU FSTEC
added 2023/11/01 12:0 a.m.7 views

The vulnerability of the registerRequestHandle() function in TP-LINK TL-WR886N router software allows a hacker to manipulate the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the registerRequestHandle function in TP-LINK’s TL-WR886N router software lies in the fact that the operation’s output is stored outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity, availability, and...

10CVSS8.1AI score0.01027EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.4 views

The vulnerability of the Control FPWIN Pro PLC programming software lies in the possibility of data being written outside of the buffer in memory, which allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the PLC programming software Control FPWIN Pro relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.8CVSS7.6AI score0.00279EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/12/24 12:0 a.m.7 views

The vulnerabilities of Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IoT, Snapdragon Industrial IoT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables software in embedded chips from Qualcomm arise from operations that occur outside of the buffer in memory. This allows attackers to disclose sensitive information or cause system failures.

The vulnerabilities of Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IoT, Snapdragon Industrial IoT, Snapdragon Mobile, Snapdragon Voice & Music, and Snapdragon Wearables software are due to operations occurring outside of the buffer in memory. Exploiting these...

7.1CVSS7.6AI score0.01589EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2022/10/24 12:0 a.m.7 views

The vulnerability of the ngx_http_hls_module module in the NGINX Application Monitoring and Management Platform Ingress Controller allows a attacker to cause service interruptions or potentially exert other effects.

The vulnerability of the ngxhttphlsmodule module in the NGINX Application Monitoring and Management Controller platform relates to operations that occur outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause service failures or potentially have other adver...

7CVSS7.4AI score0.00214EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/25 12:0 a.m.6 views

The vulnerability of the Apache HTTP Server web server relates to the occurrence of operations outside the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Apache HTTP Server is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.41861EPSS
Exploits0References17Affected Software7
Rows per page
Query Builder