343 matches found
CVE-2021-33630
CVE-2021-33630 corresponds to a NULL Pointer Dereference in the openEuler kernel (network modules), specifically in net/sched/sch_cbs.C. Affected kernel versions are 4.19.90 before 4.19.90-2401.3. The vulnerability is described as enabling Pointer Manipulation with a high availability impact, and...
The vulnerability of the `bfd_make_section_with_flags` function in the `section.c` component of the GNU Binutils development environment allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the bfdmakesectionwithflags function in the section.c component of the GNU Binutils development environment is related to pointer manipulation errors. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity, and cause...
The vulnerability of the Connectivity Fault Management (CFM) function in the Cisco IOS XR operating system allows a hacker to cause a service failure.
The vulnerability of the Connectivity Fault Management CFM function in the Cisco IOS XR operating system is related to errors in pointer manipulation during the processing of CCM messages Continuity Check Messages. Exploiting this vulnerability can allow a malicious actor to cause service failure...
The vulnerability of the Mutt mail client, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.
The vulnerability of the Mutt mail client is related to the manipulation of the zero pointer. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
CVE-2023-0969
A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory...
PT-2023-16653 · Silicon · Silabs Z/Ip Gateway
Name of the Vulnerable Software and Affected Versions: SiLabs Z/IP Gateway versions 7.18.01 and earlier Description: A vulnerability allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the contents of global memory. Recommendations: For SiLabs Z/IP...
The vulnerability of the do_prlimit() function in Linux operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the doprlimit function in Linux operating systems is related to errors in pointer manipulation due to the use of hidden auxiliary channels. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
CVE-2020-36617
CVE-2020-36617 affects ewxrjk sftpserver; the issue is in the function sftp_parse_path of parse.c , where input leads to an uninitialized pointer. Patch bf4032f34832ee11d79aa60a226cc018e7ec5eed is identified as the fix. Several connected sources (Red Hat, NVD, CVE lists, vuln enrichment) describe...
Vulnerability of the Annot.h function: AnnotPath::getCoordsLength() in the Poppler PDF rendering library, which allows an attacker to cause a service failure.
Vulnerability of the Annot.h function: The AnnotPath::getCoordsLength function in the Poppler PDF rendering library is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause service interruptions...
The vulnerability of the tif_dirread.c component in the LibTIFF library, which allows a hacker to cause a service failure
The vulnerability of the tifdirread.c component in the LibTIFF library is related to pointer manipulation errors. Exploiting this vulnerability allows an attacker to cause a service failure by using a specially created TIFF file...
The vulnerability of the lg_init() function in the Mozilla Firefox browser allows a hacker to execute arbitrary code.
The vulnerability of the Mozilla Firefox browser is related to the manipulation of the zero pointer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
PUB-A-215814262
In kernel/bpf/verifier.c , there is a possible way to manipulate pointer arithmetic due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
YottaDB has an unspecified vulnerability (CNVD-2022-31932)
YottaDB is a real-time database from YottaDB, Inc. A security vulnerability exists in YottaDB r1.32 and earlier versions, which can be exploited to gain control of the execution process by manipulating the value of the function pointer used by opwrite in srport/opwrite.c using carefully crafted...
The vulnerability of the professional video editing software Adobe Premiere Pro, related to the manipulation of the zero pointer, allows a hacker to cause a service failure.
The vulnerability of the professional video editing software Adobe Premiere Pro is related to the manipulation of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the cloud-based video conversion, annotation, and format conversion application for Adobe Prelude involves a pointer manipulation issue, which allows an attacker to cause a service failure.
The vulnerability of the cloud-based application for video digitization, annotation, and format conversion in Adobe Prelude is related to the handling of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the gf_media_export Filters function in the MP4Box command of the GPAC multimedia platform, which allows a violator to cause a service failure.
The vulnerability of the gf-media-export-filters function in the MP4Box module of the GPAC multimedia platform is related to pointer manipulation errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...
The vulnerability of the compute_closed_spline() function in the trans_spline.c component of the Fig2dev file conversion tool allows a hacker to cause a service failure.
The vulnerability of the computeclosedspline function in the transspline.c component of the .fig Fig2dev conversion tool is related to pointer manipulation errors. Exploiting this vulnerability allows an attacker to cause a service failure...
The vulnerability of the WS-Addressing plugin in the gSOAP web service development environment allows a attacker to cause a service failure.
The vulnerability of the WS-Addressing plugin in the gSOAP web service development environment is related to errors in pointer manipulation during SOAP request processing. Exploiting this vulnerability allows an attacker to cause service failures by sending specially crafted HTTP requests...
The vulnerability of the WS-Addressing plugin in the gSOAP software development environment allows a attacker to trigger a service failure.
The vulnerability of the WS-Addressing plugin in the gSOAP software development environment is related to errors in pointer manipulation during SOAP request processing. Exploiting this vulnerability allows an attacker to cause service failures by sending specially crafted HTTP requests...
Null pointer dereference
Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker can manipulate API functions by writing arbitrary data into the resolved address of a raw pointer...