The vulnerability of the qcom component in the Linux operating system’s kernel allows a hacker to manipulate the accessibility of protected information.

The vulnerability of the qcom component in the Linux operating system’s kernel is related to errors in reading beyond the boundary of the function F. Exploiting this vulnerability can allow an attacker to influence the accessibility of protected information...

The vulnerability of the rc component in the Linux operating system’s kernel allows a hacker to gain access to protected information.

The vulnerability of the rc component in the Linux operating system’s kernel is related to read-out errors beyond the boundary. Exploiting this vulnerability can allow an attacker to gain access to protected information...

The vulnerability of the check_rstbl() function in the NTFS3 file system of Linux operating systems allows attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of the checkrstbl function in the fs/ntfs3/fslog.c file of the NTFS3 file system in the Linux operating system is related to reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of t...

wolfSSL 安全漏洞

wolfSSL CyaSSL is the United States wolfSSL company for embedded systems developers to use a small, portable embedded SSL programming library. WolfSSL suffers from an out-of-bounds read vulnerability that stems from the failure to check user input in the MatchDomainName function, which can be...

golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests

A flaw was found in the Golang net/http/internal package. This issue may allow a malicious user to send an HTTP request and cause the receiver to read more bytes from network than are in the body up to 1GiB, causing the receiver to fail reading the response, possibly leading to a Denial of Servic...

CVE-2024-21920

A memory buffer vulnerability in Rockwell Automation Arena Simulation could potentially let a threat actor read beyond the intended memory boundaries. This could reveal sensitive information and even cause the application to crash, resulting in a denial-of-service condition. To trigger this, the...

The vulnerability of the dlpar_memory_remove_by_index() function in the Linux operating system’s PowerPC PSeries kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the dlparmemoryremovebyindex function in the Linux operating system’s PowerPC PSeries kernel memory driver relates to reading memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

PT-2024-21645

Name of the Vulnerable Software and Affected Versions OpenZeppelin Contracts versions prior to 4.9.6 OpenZeppelin Contracts versions prior to 5.0.2 Description The Base64.encode function in OpenZeppelin Contracts encodes a bytes input by iterating over it in chunks of 3 bytes. When this input is...

The vulnerability of the Adobe Photoshop graphic editor, related to reading beyond the buffer in memory, allows a hacker to bypass the ASLR protection mechanism.

The vulnerability of the Adobe Photoshop graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to bypass the ASLR protection mechanism...

PT-2023-8813 · Kofax · Kofax Power Pdf

Name of the Vulnerable Software and Affected Versions: Kofax Power PDF affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Kofax Power PDF. It requires user interaction, where the target must visit a malicious page...

CLSA-2023-1695752598 httpd: Fix of 4 CVEs

CVE-2022-23943: Fix out-of-bound write in modsed - CVE-2022-22721: Fix integer overflow which resulted in out-of-bounds write - CVE-2022-28615: Fix read beyond bounds in apstrcmpmatch - CVE-2022-31813: Fix possible bypass of IP based authentication...

The vulnerability of the Fortinet FortiOS operating system, related to reading data beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the Fortinet FortiOS operating system is related to reading data beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-25005

A maliciously crafted DLL file can be forced to read beyond allocated boundaries in Autodesk InfraWorks 2023, and 2021 when parsing the DLL files could lead to a resource injection vulnerability...

Sonos One Speaker 缓冲区错误漏洞

Sonos One Speaker is a smart speaker from Sonos USA. Sonos One Speaker version 70.3-35220 suffers from a buffer error vulnerability that stems from a lack of proper validation of user-supplied data, which could result in a read beyond the end of the allocated buffer, which could be exploited by a...

SUSE CVE-2019-3832

It was discovered the fix for CVE-2018-19758 libsndfile was not complete and still allows a read beyond the limits of a buffer in wavwriteheader function in wav.c. A local attacker may use this flaw to make the application crash...

SUSE CVE-2019-14513

Improper bounds checking in Dnsmasq before 2.76 allows an attacker controlled DNS server to send large DNS packets that result in a read operation beyond the buffer allocated for the packet, a different vulnerability than CVE-2017-14491...

PT-2023-6675 · Siemens · Solid Edge Se2022 +1

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2022 versions prior to V222.0MP12 Solid Edge SE2023 versions prior to V223.0Update2 Description: The issue is related to an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This...

The vulnerability of the libxrdp_send_to_channel() function on the XRDP server allows a hacker to gain unauthorized access to protected information.

The vulnerability of the libxrdpsendtochannel function on the XRDP server is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2022-33884

Parsing a maliciously crafted XB file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2022-33884

Parsing a maliciously crafted XB file can force Autodesk AutoCAD 2023 and 2022 to read beyond allocated boundaries. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...