PT-2022-5871 · Unknown · Raw Image Extension

Name of the Vulnerable Software and Affected Versions: Raw Image Extension affected versions not specified Description: The issue is related to insufficient input validation in the Raw Image Extension plugin, which can be exploited to execute arbitrary code using specially crafted data...

CVE-2022-44687: Undefined Security Weakness

Raw Image Extension Remote Code Execution Vulnerability...

Microsoft Windows Codecs Library security vulnerabilities

The Microsoft Windows Codecs Library is a library of features for the Microsoft Windows system from Microsoft Corporation. A security vulnerability exists in the Microsoft Windows Codecs Library. The following products and versions are affected: Raw Image Extension for Windows 11 for ARM64-based...

Microsoft Windows Raw Image Extensions Library RCE (December 2022)

The Windows 'Raw Image Extensions' app installed on the remote host is affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. %NASLMINLEVEL 80900 C Tenable Network Security, Inc. The descriptive text an...

CVE-2022-44687

CVE-2022-44687 is a Remote Code Execution vulnerability in the Windows Raw Image Extensions component. Public details indicate the issue stems from insufficient input validation in the Raw Image Extension, allowing crafted data to trigger arbitrary code execution. Public exploits exist. Affected ...

OESA-2022-2132 kubernetes security update

Container cluster management. Security Fixes: kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not limited to the unstructured string fields in objects such as Events.CVE-2021-25743...

Input validation

go-merkledag implements the 'DAGService' interface and adds two ipld node types, Protobuf and Raw for the ipfs project. A ProtoNode may be modified in such a way as to cause various encode errors which will trigger a panic on common method calls that don't allow for error returns. A ProtoNode...

PT-2022-35938

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.10 Description The issue is related to the prevention of bpf program recursion for raw tracepoint probes. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2025-49468

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue exists in the ath11k wireless driver. When a network interface is brought up in monitor mode, the driver attempts to extract the packet type for a Socket...

`tf.raw_ops.Mfcc` crashes in Tensorflow

...

Google TensorFlow Input Validation Error Vulnerability (CNVD-2023-15778)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. An input validation error vulnerability exists in Google TensorFlow, which stems from the fact that input encoded to an invalid CompositeTensorVariant tensor will trigger a segment error in tf...

GHSA-RMG2-F698-WQ35 `tf.raw_ops.Mfcc` crashes

Impact If ThreadUnsafeUnigramCandidateSampler is given input filterbankchannelcount greater than the allowed max size, TensorFlow will crash. python import tensorflow as tf tf.rawops.Mfcc spectrogram = 1.38, 6.32, 5.75, 9.51, samplerate = 2, upperfrequencylimit = 5.0, lowerfrequencylimit = 1.0,...

openvswitch: use-after-free in decode_NXAST_RAW_ENCAP during the decoding of a RAW_ENCAP action

Open vSwitch aka openvswitch has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

PT-2024-11843

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc4-syzkaller-00159-g4bbf3422df78 Description The issue is related to a shift-out-of-bounds bug in the hid report raw event function. This bug occurs when the size of the integer n is bigger than 32 in the...

Microsoft Raw Image Extension CR2 File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Raw Image Extension. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

kernel: net/packet: slab-out-of-bounds access in packet_recvmsg()

An out-of-bounds access issue was found in the Linux kernel networking subsystem in the way raw packet sockets AFPACKET used PACKETCOPYTHRESH and mmap operations. A local attacker with CAPNETRAW capability could use this flaw to trigger a buffer overflow resulting in a system crash or privilege...

kernel: net/packet: slab-out-of-bounds access in packet_recvmsg()

An out-of-bounds access issue was found in the Linux kernel networking subsystem in the way raw packet sockets AFPACKET used PACKETCOPYTHRESH and mmap operations. A local attacker with CAPNETRAW capability could use this flaw to trigger a buffer overflow resulting in a system crash or privilege...

PT-2022-35678

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.212 through 5.4.219 Description A potential security issue exists due to the acceptance of zero-sized raw sendmsg in the net/ieee802154 module. The actual impact and attack plausibility have not yet been proven...

PT-2024-11889

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to an out-of-bounds read in the afe4404 read|write raw function. A KASAN report indicates a global-out-of-bounds read in afe4404 read raw+0x2ce/0x380. The bug is...

kernel: net/packet: slab-out-of-bounds access in packet_recvmsg()

An out-of-bounds access issue was found in the Linux kernel networking subsystem in the way raw packet sockets AFPACKET used PACKETCOPYTHRESH and mmap operations. A local attacker with CAPNETRAW capability could use this flaw to trigger a buffer overflow resulting in a system crash or privilege...