561 matches found
CVE-2023-20800
In imgsys, there is a possible system crash due to a mssing ptr check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07420968; Issue ID: ALPS07420955...
CVE-2023-20800
In imgsys, there is a possible system crash due to a mssing ptr check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS07420968; Issue ID: ALPS07420955...
PT-2023-5567 · Mediatek · Mediatek Imgsys
Name of the Vulnerable Software and Affected Versions: MediaTek imgsys affected versions not specified Description: The issue is related to insufficient input validation in the imgsys component of MediaTek microprogram software, which can lead to a system crash due to a missing pointer check. Thi...
MediaTek Chip Security Breach
MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips, which stems from a missing ptr check in the imgsys module, and may cause a system crash...
CVE-2023-0359 ipv6: Missing ipv6 nullptr-check in handle_ra_input
A missing nullptr-check in handlerainput can cause a nullptr-deref...
CLSA-2023-1685634253 vim: Fix of CVE-2023-2609
CVE-2023-2609: check "yarray" is not NULL...
SUSE CVE-2017-9345
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DNS dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-dns.c by trying to detect self-referencing pointers...
CVE-2022-32955
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the NvmExpressDxe buffer used by SMM and non-SMM code could cause TOCTOU race-condition issues that could lead to corruption of SMRAM and escalation of privileges. This attack can be mitigated by using IOMMU...
PT-2023-33155 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.12 Description: The issue is related to a null pointer check in the coretemp component of the hwmon subsystem. It was introduced in version v3.0 and fixed in version v6.0.12. The actual impact and attack...
PT-2023-33320 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue is related to a null pointer check in the coretemp hwmon driver. It was introduced in version v3.0 and fixed in version v5.10.158. The actual impact and attack plausibility have...
PT-2023-33414 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.268 Description: The issue is related to a null pointer check in the coretemp hardware monitoring component. It was introduced in version v3.0 and fixed in version v4.19.268. The actual impact and attack...
PT-2025-37898
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The btrtl set quirks function accessed a memory location without verifying its validity, potentially leading to a kernel error when a Realtek Bluetooth controller without a supported...
PT-2022-19517 · Intel · Fwblockservicesmm
Name of the Vulnerable Software and Affected Versions: FwBlockServiceSmm driver versions prior to 05.21.51.0048 FwBlockServiceSmm driver versions prior to 05.42.23.0066 FwBlockServiceSmm driver versions prior to 05.42.11.0021 FwBlockServiceSmm driver versions prior to 05.44.25.0052...
GSD-2022-1003296 lkdtm/bugs: Check for the NULL pointer after calling kmalloc
lkdtm/bugs: Check for the NULL pointer after calling kmalloc This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...
GSD-2021-1002817 drm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf
drm/mediatek: hdmi: Perform NULL pointer check for mtkhdmiconf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.12 by commit...
Denial Of Service (DoS)
qemu is vulnerable to denial of service. The vulnerability exists due to a NULL pointer dereference because it lacks a pointer check before an idecanceldmasync call...
UVI-2021-1000954 usb: dwc3: gadget: Bail from dwc3_gadget_exit() if dwc->gadget is NULL
usb: dwc3: gadget: Bail from dwc3gadgetexit if dwc-gadget is NULL This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.44 by commit...
UBUNTU-CVE-2021-23975
The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function was invoked we incorrectly called the sizeof function, instead of using the API method that checks for invalid pointers. This vulnerability affects...
