Butterfly 安全漏洞

Butterfly is a modular web application framework open-sourced by OpenRefine. A security vulnerability exists in Butterfly versions prior to 1.2.6, which stems from improper handling of the file protocol in URLs, and could lead to path traversal, server-side request forgery, and cross-site scripti...

CVE-2024-49882

CVE-2024-49882 : In the Linux kernel’s ext4 code, a double free/UAF issue was fixed in ext4_ext_try_to_merge_up() where path[1].p_bh could be freed twice if not NULL after release. The problem manifested as a warning “brelse a buffer twice” during writeback when ext4 extents were merged and buffe...

Google Chrome post-release reuse vulnerability (CNVD-2024-39737)

Google Chrome is a web browser from Google, an American company. A post-release reuse vulnerability exists in versions of Google Chrome prior to 129.0.6668.70, which can be exploited by a remote attacker to potentially leverage heap corruption via a crafted HTML page...

Google Chrome post-release reuse vulnerability (CNVD-2024-44542)

Google Chrome is a web browser from Google, an American company. A post-release reuse vulnerability exists in versions of Google Chrome prior to 128.0.6613.84, which can be exploited by an attacker to cause heap corruption via a crafted HTML page...

Google Chrome post-release reuse vulnerability (CNVD-2024-34501)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a post-release reuse vulnerability, which can be exploited by an attacker to potentially exploit heap corruption via a crafted HTML page...

Vulnerability of QTS and QuTS operating systems, as well as Qnap network devices, related to the re-release of memory allows attackers to execute arbitrary code.

The vulnerability of QTS and QuTS operating systems, as well as Qnap network devices, is related to the re-release of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data...

CVE-2024-39549

CVE-2024-39549 affects Junos OS and Junos OS Evolved. A crafted BGP Path attribute update can trigger a Missing Release of Memory after Effective Lifetime in the routing process daemon (rpd), causing memory to be allocated but not freed in all paths and leading to a DoS. Impact is memory exhausti...

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved Security Vulnerabilities

Juniper Networks Junos OS and Juniper Networks Junos OS Evolved are both products of Juniper Networks, Inc.Juniper Networks Junos OS is a network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper...

Juniper Junos OS Vulnerability (JSA82999)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA82999 advisory. - A Missing Release of Memory after Effective Lifetime vulnerability in Juniper Networks Junos OS on MX Series allows an unauthenticated adjacent attacker to cause a...

The vulnerability of the adev_release() function in the Linux operating system’s Platform Environment Control Interface (PECI) kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the adevrelease function in the drivers/peci/cpu.c module of the Linux operating system’s Platform Environment Control Interface PECI kernel is related to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

Mozilla Firefox post-release reuse vulnerability (CNVD-2024-29144)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox is prone to a post-release reuse vulnerability that can be exploited by an attacker to execute arbitrary code on the system...

Mozilla Firefox post-release reuse vulnerability (CNVD-2024-29142)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a post-release reuse vulnerability that can be exploited by attackers to corrupt the stack and cause the browser to crash...

A vulnerability exists in the Mediatek DRAM driver’s drivers/gpu/drm/mediatek/mtk_drm_crtc.c file of the Linux operating system’s kernel. This vulnerability allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the driver/gpu/drm/mediatek/mtkdrmcrtc.c module of the DRM driver for Mediatek’s Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Huawei EMUI/HarmonyOS Double Release Vulnerability (CNVD-2025-18900)

Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a mobile operating system based on Android, and Huawei HarmonyOS, a distributed operating system developed by Huawei for the whole scenario, aiming at realizing intelligent interconnection and resource sharing among people, devices, an...

Huawei EMUI/HarmonyOS Double Release Vulnerability

Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a mobile operating system based on Android, and Huawei HarmonyOS, a distributed operating system developed by Huawei for the whole scenario, aiming at realizing intelligent interconnection and resource sharing among people, devices, an...

Huawei HarmonyOS 安全漏洞

Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a mobile operating system based on Android, and Huawei HarmonyOS, a distributed operating system developed by Huawei for the whole scenario, aiming at realizing intelligent interconnection and resource sharing among people, devices, an...

Maxon Cinema 4D 安全漏洞

Maxon Cinema 4D is a 3D drawing software from Maxon, a German company. A security vulnerability exists in Maxon Cinema 4D that originates from a post-release reuse vulnerability in the analysis of SKP files. An attacker can exploit the vulnerability to execute remote code...

Google Chrome post-release reuse vulnerability (CNVD-2024-29289)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a post-release reuse vulnerability that can be exploited by an attacker to execute arbitrary code on a system...

QEMU Resource Management Error Vulnerability (CNVD-2024-20282)

QEMU Quick Emulator is a set of simulation processor software. The software is fast and cross-platform. A resource management error vulnerability exists in QEMU virtio, which stems from a double-release vulnerability in virtio-gpu, virtio-serial-bus, and virtio-crypto, with an insufficient...

CVE-2024-20845

CVE-2024-20845 describes an out-of-bounds write vulnerability in libsavsac.so when releasing memory, allowing a local attacker to execute arbitrary code. Affected: libsavsac.so prior to SMR Apr-2024 Release 1. Root cause: memory release path triggers out-of-bounds write. Impact: local code execut...