PT-2021-25966

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.286 Description A potential issue exists in the usbhid component of the Linux Kernel, where raw report buffers are not properly freed in the usbhid stop function. The actual impact and attack plausibility ha...

PT-2021-26107

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.71 Description The issue is related to the usbhid module in the Linux Kernel, specifically with the handling of raw report buffers in the usbhid stop function. The actual impact and attack plausibility have...

openvswitch: use-after-free in decode_NXAST_RAW_ENCAP during the decoding of a RAW_ENCAP action

Open vSwitch aka openvswitch has a use-after-free in decodeNXASTRAWENCAP called from ofpactdecode and ofpactsdecode during the decoding of a RAWENCAP action...

RUSTSEC-2021-0114 Aliased mutable references from `tls_rand` & `TlsWyRand`

TlsWyRand's implementation of Deref unconditionally dereferences a raw pointer, and returns multiple mutable references to the same object, which is undefined behavior...

GPAC buffer error vulnerability

GPAC is a multimedia framework for rich media and is distributed under the LGPL license. a stack buffer overflow vulnerability exists in the DumpRawUIConfig function in odfdump.c in GPAC 20200801 and earlier versions. An attacker could exploit this vulnerability to execute code...

piex:fuzzer-piex: Use-of-uninitialized-value in piex::image_type_recognition::ContainsNikonSignatures

Project: https://github.com/guidovranken/piex.git Detailed Report: https://oss-fuzz.com/testcase?key=5302045976952832 Project: piex Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-piex Job Type: libfuzzermsanpiex Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

PT-2021-7355

Name of the Vulnerable Software and Affected Versions GNU Multiple Precision Arithmetic Library GMP versions through 6.2.1 Description The issue is related to an integer overflow and resultant buffer overflow in the mpz/inp raw.c component of the GNU Multiple Precision Arithmetic Library GMP on...

USN-5065-1 openvswitch vulnerability

It was discovered that Open vSwitch incorrectly handled decoding RAWENCAP actions. A remote attacker could use this issue to cause Open vSwitch to crash, resulting in a denial of service, or possibly execute arbitrary code...

Google TensorFlow code issue vulnerability (CNVD-2022-09856)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a code issue vulnerability that stems from the fact that when recovering a tensor via the raw API, TensorFlow may be tricked into referencing a null pointer if the...

[SECURITY] Fedora 34 Update: libopenmpt-0.5.11-1.fc34

libopenmpt is a cross-platform C++ and C library to decode tracked music files modules into a raw PCM audio stream. libopenmpt is based on the player code of the OpenMPT project Open ModPlug Tracker. In order to avoid code base fragmentation, libopenmpt is developed in the same source code...

GHSA-HVQC-PC78-X9WH Soundness issue in raw-cpuid

VendorInfo::asstring, SoCVendorBrand::asstring, and ExtendedFunctionInfo::processorbrandstring construct byte slices using std::slice::fromrawparts, with data coming from reprRust structs. This is always undefined behavior. This flaw has been fixed in v9.0.0, by making the relevant structs reprC...

Soundness issue in raw-cpuid

VendorInfo::asstring, SoCVendorBrand::asstring, and ExtendedFunctionInfo::processorbrandstring construct byte slices using std::slice::fromrawparts, with data coming from reprRust structs. This is always undefined behavior. This flaw has been fixed in v9.0.0, by making the relevant structs reprC...

GHSA-JRF8-CMGG-GV2M Error on unsupported architectures in raw-cpuid

nativecpuid::cpuidcount exposes the unsafe cpuidcount intrinsic from core::arch::x86 or core::arch::x8664 as a safe function, and uses it internally, without checking the safety requirement: The CPU the program is currently running on supports the function being called. CPUID is available in most...

GHSA-GH87-6JR3-8Q47 Null pointer deference in cache

An issue was discovered in the cache crate through 2021-01-01 for Rust. A raw pointer is dereferenced...

Null pointer deference in cache

An issue was discovered in the cache crate through 2021-01-01 for Rust. A raw pointer is dereferenced...

GHSA-352P-RHVQ-7G78 Null pointer deference in av-data

An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault...

GHSA-3VJM-36RR-7QRQ NULL Pointer Dereference in cbox

An issue was discovered in the cbox crate through 2020-03-19 for Rust. The CBox API allows dereferencing raw pointers without a requirement for unsafe code...

Double free in http

An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness...

GHSA-6RHX-HQXM-8P36 Double free in http

An issue was discovered in the http crate before 0.1.20 for Rust. The HeaderMap::Drain API can use a raw pointer, defeating soundness...

Use after free in string-interner

Affected versions of this crate did not clone contained strings when an interner is cloned. Interners have raw pointers to the contained strings, and they keep pointing the strings which the old interner owns, after the interner is cloned. If a new cloned interner is alive and the old original...