8457 matches found
CVE-2020-3190: Uncontrolled Resource Consumption
A vulnerability in the IPsec packet processor of Cisco IOS XR Software could allow an unauthenticated remote attacker to cause a denial of service DoS condition for IPsec sessions to an affected device. The vulnerability is due to improper handling of packets by the IPsec packet processor. An...
Intel Processor Graphics Information Disclosure
The vulnerability of microprogrammed software in Intel processors and Intel Processor Graphics is related to the lack of protection for system data. Exploiting this vulnerability can allow attackers to disclose protected information...
Buffer Overflow Vulnerability in Multiple Qualcomm Products (CNVD-2020-20203)
The Qualcomm MDM9206 and others are products of Qualcomm Incorporated, U.S.A. The MDM9206 is a central processing unit CPU product.The SDX24 is a modem.The APQ8017 is a central processing unit CPU product. A buffer overflow vulnerability exists in the Multi-Mode Call Processor in multiple Qualcom...
openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c
A heap-based buffer overflow flaw was found in the opjt1clbldecodeprocessor in openjpeg2. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c
A heap-based buffer overflow flaw was found in the opjt1clbldecodeprocessor in openjpeg2. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
PDFium PDF Content Processor Unauthorized Information Disclosure
The vulnerability of the PDFium browser for processing PDF content in Google Chrome is caused by a numerical overflow condition. Exploiting this vulnerability can allow an attacker to gain unauthorized access to information through a specially created PDF file...
CVE-2020-8860
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O8.x, P9.0, Q10.0 devices with Exynos chipsets. User interaction is required to exploit this vulnerability in that the target must answer a phone call. The...
Stack overflow
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O8.x, P9.0, Q10.0 devices with Exynos chipsets. User interaction is required to exploit this vulnerability in that the target must answer a phone call. The...
CVE-2020-8860
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O8.x, P9.0, Q10.0 devices with Exynos chipsets. User interaction is required to exploit this vulnerability in that the target must answer a phone call. The...
CVE-2020-8860
CVE-2020-8860 affects Samsung Galaxy S10 devices with Exynos SoCs (G973FXXS3ASJA etc.). The flaw is a buffer overflow in the Call Control Setup messages, caused by inadequate validation of the length of user-supplied data copied into a fixed-length, stack-based buffer. This enables remote code ex...
CVE-2020-8860: Stack-based Buffer Overflow
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O8.x, P9.0, Q10.0 devices with Exynos chipsets. User interaction is required to exploit this vulnerability in that the target must answer a phone call. The...
BSA-2020-907
Security Advisory ID : BSA-2020-907 Component : Intel Revision : 1.0: Final A potential security vulnerability in Intel® Processor Graphics may allow information disclosure.Intel is releasing software updates to mitigate this potential vulnerability. More at:...
(Pwn2Own) Samsung Galaxy S10 Call Control Setup Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy 10. User interaction is required to exploit this vulnerability in that the target must answer a phone call. The specific flaw exists within the Call Control Setup messages. The issue...
PT-2020-20335
Name of the Vulnerable Software and Affected Versions Samsung Galaxy S10 Firmware versions G973FXXS3ASJA, O8.x, P9.0, Q10.0 Description This issue allows remote attackers to execute arbitrary code on affected devices. The exploitation requires user interaction, specifically answering a phone call...
openjpeg: heap-based buffer overflow in pj_t1_clbl_decode_processor in openjp2/t1.c
A heap-based buffer overflow flaw was found in the opjt1clbldecodeprocessor in openjpeg2. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...
CVE-2019-5613
In FreeBSD 12.0-RELEASE before 12.0-RELEASE-p13, a missing check in the ipsec packet processor allows reinjection of an old packet to be accepted by the ipsec endpoint. Depending on the higher-level protocol in use over ipsec, this could allow an action to be repeated...
Design/Logic Flaw
In FreeBSD 12.0-RELEASE before 12.0-RELEASE-p13, a missing check in the ipsec packet processor allows reinjection of an old packet to be accepted by the ipsec endpoint. Depending on the higher-level protocol in use over ipsec, this could allow an action to be repeated...
CVE-2019-5613
In FreeBSD 12.0-RELEASE before 12.0-RELEASE-p13, a missing check in the ipsec packet processor allows reinjection of an old packet to be accepted by the ipsec endpoint. Depending on the higher-level protocol in use over ipsec, this could allow an action to be repeated...
CVE-2019-5613
CVE-2019-5613 : In FreeBSD 12.0-RELEASE prior to 12.0-RELEASE-p13, a missing check in the IPsec packet processor allows reinjection of an old packet to be accepted by the IPsec endpoint, potentially causing an action to be repeated depending on the higher-level protocol over IPsec. The issue is d...
