Design/Logic Flaw

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. In a segment-routing scenario with OSPF as IGP, when a peer interface continuously flap...

SimpleNetwork 资源管理错误漏洞

SimpleNetwork is a simple TCP service. A security vulnerability exists in SimpleNetwork that stems from a double release vulnerability created via specially crafted TCP packets...

The vulnerability of the `rpmsg_virtio_add_ctrl_dev` function (drivers/rpmsg/virtio_rpmsg_bus.c) in the Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the rpmsgvirtioaddctrldev function drivers/rpmsg/virtiorpmsgbus.c in the Linux kernel is related to the repeated release of memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

GNU LibreDWG Double Release Vulnerability (CNVD-2022-52258)

GNU LibreDWG is a C language library from the GNU community for working with DWG files. GNU LibreDWG suffers from a double-release vulnerability, for which no detailed vulnerability details are currently available...

GPAC Double Release Vulnerability (CNVD-2022-04957)

GPAC is an open source multimedia framework. GPAC suffers from a double-release vulnerability that can be exploited by attackers to cause a denial of service...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a double-release vulnerability that can be exploited by attackers to cause denial of service, code execution, and elevation of privilege...

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. GPAC suffers from a double-release vulnerability that can be exploited by attackers to cause a denial of service...

Huawei HarmonyOS AOD module double release vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company that provides a microkernel-based distributed operating system. The Huawei HarmonyOS AOD module is vulnerable to a double-release vulnerability that could be exploited by attackers to compromise integrity...

Bentley View Code Execution Vulnerability (CNVD-2021-102033)

Bentley View is a free viewer from Bentley Systems, U.S.A. A security vulnerability exists in Bentley View, which is caused by a use-after-release vulnerability when parsing 3DS files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Bentley View Code Execution Vulnerability (CNVD-2021-102035)

Bentley View is a free viewer from Bentley Systems, U.S.A. A security vulnerability exists in Bentley View, which is caused by a use-after-release vulnerability when parsing J2K files. An attacker could exploit this vulnerability to execute arbitrary code on the system...

Adobe Premiere Pro 资源管理错误漏洞

Adobe Premiere Pro is a non-linear video editing software developed by Adobe, which is widely used in the professional production of movies, TV and web videos, providing a full-process solution from clip editing to finished output. A post-release reuse vulnerability exists in Adobe Premiere Pro,...

Google Chrome post-release reuse vulnerability (CNVD-2022-12742)

Chrome is a simple and efficiently designed web browsing tool developed by Google. A post-release reuse vulnerability exists in Storage Foundation in Google Chrome versions prior to 96.0.4664.45. An attacker can potentially exploit heap corruption via a crafted HTML page...

Adobe Acrobat Reader DC Resource Management Error Vulnerability

Adobe Acrobat Reader is a PDF viewer from Adobe. The software is used to print, sign, and annotate PDFs. Adobe Acrobat Reader DC is vulnerable to a resource management error that stems from a use-after-release vulnerability in the handling of AcroForm list boxes. No detailed vulnerability details...

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficient web browsing tool developed by Google Google Chrome 94.0.4606.71 Previous versions of Safe Browsing have a post-release reuse vulnerability. An attacker could exploit this vulnerability to potentially cause heap corruption via a crafted HTML page...

Adobe Framemaker Post-release Reuse Vulnerability

Adobe FrameMaker is a document processing program used to write and edit large or complex documents, including structured documents.A post-release reuse vulnerability exists in Adobe Framemaker 2019 Update 8, 2020 Release Update 2 and earlier versions. An attacker could exploit this vulnerability...

FFmpeg heap reuse after release vulnerability (CNVD-2021-79768)

FFmpeg is a set of open source computer programs that can be used to record, convert, and stream digital audio and video under the LGPL or GPL license. avfreep function in libavutil/mem.c in FFmpeg version 4.2 is vulnerable to a heap-release post-reuse vulnerability. An attacker can exploit this...

FFmpeg 资源管理错误漏洞

FFmpeg is a set of open source computer programs that can be used to record, convert, and stream digital audio and video under the LGPL or GPL license. avfreep function in libavutil/mem.c in FFmpeg version 4.2 is vulnerable to a heap-release post-reuse vulnerability. An attacker can exploit this...

Foxit PDF Reader has a use-after-release vulnerability

Foxit PDF Reader is a PDF reader. Foxit PDF Reader is vulnerable to a post-release exploit that could be used by remote attackers to execute arbitrary code on the target system...

Siemens JT2Go and Teamcenter Visualization Double Release Vulnerability

Siemens Jt2go is a JT file viewer.Siemens Teamcenter Visualization is a software that provides teamwork capabilities for designing 2D and 3D scenarios. A double release vulnerability exists in Siemens JT2Go versions prior to 13.2 and Teamcenter Visualization versions prior to 13.2. The...

Advisory ROSA-SA-2021-1900

Software: libvncserver 0.9.9 OS: Cobalt 7.9 CVE-ID: CVE-2016-9941 CVE-Crit: CRITICAL CVE-DESC: Heap-based buffer overflow in rfbproto.c in LibVNCClient in LibVNCServer before version 0.9.11 allows remote servers to cause a denial of service application failure or possibly execute arbitrary code v...