CVE-2021-39258

A crafted NTFS image can cause out-of-bounds reads in ntfsattrfind and ntfsexternalattrfind in NTFS-3G 2021.8.22...

CVE-2021-39258

A crafted NTFS image can cause out-of-bounds reads in ntfsattrfind and ntfsexternalattrfind in NTFS-3G 2021.8.22...

CVE-2021-39258

CVE-2021-39258 affects NTFS-3G prior to 2021.8.22, causing out-of-bounds reads in ntfs_attr_find and ntfs_external_attr_find when processing a crafted NTFS image. Public references list the issue in NTFS-3G and note that upgrading to version 2021.8.22 or later resolves the vulnerability. Connecte...

CVE-2021-39258

A crafted NTFS image can cause out-of-bounds reads in ntfsattrfind and ntfsexternalattrfind in NTFS-3G 2021.8.22...

Huawei Smartphone 缓冲区错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. A stack buffer overflow vulnerability exists in the Kernel module of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attack...

Huawei Smartphone 缓冲区错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. A stack buffer overflow vulnerability exists in the Kernel module of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attack...

Laurent Rineau CGAL Code Execution Vulnerability

Laurent Rineau CGAL is an open source application from Laurent Rineau. Providing access to geometric algorithms in the form of a C library, Laurent Rineau CGAL suffers from a security vulnerability that could be exploited by an attacker to cause out-of-range reads and type obfuscation through the...

Tuxera NTFS-3G 缓冲区错误漏洞

NTFS-3G is a stable, full-featured, read/write NTFS driver for Linux, Android, Mac OS X, FreeBSD, NetBSD, OpenSolaris, QNX, Haiku, and other operating systems. ntfsrunlistsmergei in versions prior to NTFS-3G 2021.8.22 is vulnerable to an out-of-bounds read. runlistsmergei is vulnerable to...

Laurent Rineau CGAL Code Execution Vulnerability (CNVD-2022-32787)

Laurent Rineau CGAL is an open source application from Laurent Rineau. It provides access to geometric algorithms in the form of C libraries. Laurent Rineau CGAL suffers from a security vulnerability that can be exploited by an attacker to cause out-of-range reads and type obfuscation via a...

Laurent Rineau CGAL Code Execution Vulnerability (CNVD-2022-32788)

Laurent Rineau CGAL is an open source application from Laurent Rineau. It provides access to geometric algorithms in the form of C libraries. Laurent Rineau CGAL suffers from a security vulnerability that can be exploited by an attacker to cause out-of-range reads and type obfuscation via a...

CGAL 输入验证错误漏洞

Laurent Rineau CGAL is an open source application from Laurent Rineau. It provides access to geometric algorithms in the form of C libraries. Laurent Rineau CGAL suffers from a security vulnerability that can be exploited by an attacker to cause out-of-range reads and type obfuscation via a...

Laurent Rineau CGAL 输入验证错误漏洞

Laurent Rineau CGAL is an open source application from Laurent Rineau. Providing access to geometric algorithms in the form of a C library, Laurent Rineau CGAL suffers from a security vulnerability that could be exploited by an attacker to cause out-of-range reads and type obfuscation through the...

CGAL 输入验证错误漏洞

Laurent Rineau CGAL is an open source application from Laurent Rineau. It provides access to geometric algorithms in the form of C libraries. Laurent Rineau CGAL suffers from a security vulnerability that can be exploited by an attacker to cause out-of-range reads and type obfuscation via a...

A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory.

...

MAC1100 PLC 信息泄露漏洞

The MAC1100 PLC is an industrial control product PLC. An information disclosure vulnerability exists in the EPA protocol of the MAC1100 PLC, which could allow an attacker to read a specific storage area and collect relevant device information in the PLC via an unauthorized EPA read operation, whi...

PYSEC-2021-572

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can cause undefined behavior via binding a reference to null pointer in all binary cwise operations that don't require broadcasting e.g., gradients of binary cwise operations. The implementatio...

CVE-2021-27791

The function that is used to parse the Authentication header in Brocade Fabric OS Web application service before Brocade Fabric OS v9.0.1a and v8.2.3a fails to properly process a malformed authentication header from the client, resulting in reading memory addresses outside the intended range. An...

Google TensorFlow 缓冲区错误漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A buffer overflow vulnerability exists in Google TensorFlow, which stems from the fact that in affected versions, an attacker could exploit the vulnerability by sending an invalid argument to tf.rawops...

The vulnerability of the proto-max-bulk-len configuration parameter in the Redis database management system allows a hacker to execute arbitrary code.

The vulnerability of the proto-max-bulk-len configuration parameter in the Redis database management system is related to reading beyond the range and integer overflow of the buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2021-21806 · Google · Tensorflow

Name of the Vulnerable Software and Affected Versions: TensorFlow versions prior to 2.6.0 TensorFlow versions 2.5.1 and earlier TensorFlow versions 2.4.3 and earlier TensorFlow versions 2.3.4 and earlier Description: The issue arises from TFLite's GatherNd implementation not supporting negative...