The vulnerability of the ata_tlink_add() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the atatlinkadd function in the Linux operating system is related to an error in pointer arithmetic. Exploiting this vulnerability can allow an attacker to cause a service failure...

OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write

Summary The DWA lossy decoder constructs temporary per-component block pointers using signed 32-bit arithmetic. For a large enough width, the calculation overflows and later decoder stores operate on a wrapped pointer outside the allocated rowBlock backing store. This bug is reachable from the...

GHSA-P8XC-W3Q4-H64X OpenEXR: DWA Lossy Decoder Heap Out-of-Bounds Write

Summary The DWA lossy decoder constructs temporary per-component block pointers using signed 32-bit arithmetic. For a large enough width, the calculation overflows and later decoder stores operate on a wrapped pointer outside the allocated rowBlock backing store. This bug is reachable from the...

The vulnerability of the icmp_tag_validation() function in Linux operating systems allows a hacker to cause a service failure.

The vulnerability of the icmptagvalidation function in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability could allow a remote attacker to cause a service failure by sending specially crafted ICMP packets...

The vulnerability of the map() function in the Sapera Memory Manager driver, a software solution for image management in Sapera LT systems, allows a malicious actor to elevate their privileges to SYSTEM level and execute arbitrary code.

The vulnerability of the map function in the Sapera Memory Manager driver, a software solution for image management in Sapera LT machine vision systems, is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level and...

The vulnerability of the xrep_revalidate_allocbt() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the xreprevalidateallocbt function in the Linux operating system is related to a pointer arithmetic error. Exploiting this vulnerability could allow an attacker to cause a service failure...

kernel: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save

In the Linux kernel, the following vulnerability has been resolved: HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save Improper use of secondary pointer &dev-i2csubipregs caused kernel crash and out-of-bounds error: BUG: KASAN: slab-out-of-bounds in...

Moderate: Red Hat Security Advisory: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

The vulnerability of Fortinet FortiWeb web applications’ network firewalls, related to pointer swapping errors, allows attackers to trigger a service failure.

The vulnerability of Fortinet FortiWeb network firewalls in web applications is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to trigger a service failure through specially crafted HTTP requests...

The vulnerability of the DRM/AMD/display components in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/amd/display components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel crash component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel crash component is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the `src/synth/fluid_synth_monopoly.c` component of the software synthesizer FluidSynth allows a hacker to cause a system failure.

The vulnerability of the src/synth/fluidsynthmonopoly.c component of the software synthesizer FluidSynth is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the net/sctp component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the net/sctp component in the Linux operating system is related to pointer dereferencing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the net/sched component in the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the net/sched component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the xe_gem_fault() function in the drivers/gpu/drm/xe/xe_bo.c kernel module of the Linux operating system allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the xegemfault function in the drivers/gpu/drm/xe/xebo.c kernel module of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the virtio-net component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the virtio-net component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the pru component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the pru component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the fs/btrfs component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the fs/btrfs component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the transport_ipc component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the transportipc component in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Linux operating system’s platform/x86/amd/hsmp kernel component, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s platform/x86/amd/hsmp kernel components is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...