libdwarf Resource Management Error Vulnerability

libdwarf is a library and command line tool for reading and writing DWARF2 standardized debug data format. A resource management error vulnerability exists in libdwarf that stems from the presence of a double release vulnerability...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. The Linux kernel suffers from a security vulnerability that stems from memory reuse after release...

media-server security vulnerability

media-server is a library from Chen's personal developer. A security vulnerability exists in media-server v1.0.0, which was discovered via the sipuacstoptimer function in /uac/sip-uac-transaction.c to contain a memory reuse after release vulnerability...

CVE-2024-21611

A Missing Release of Memory after Effective Lifetime vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. In a Juniper Flow Monitoring jflow scenario route churn that...

mojoPortal File Upload Vulnerability

mojoPortal is a cross-platform object-oriented web framework . A file upload vulnerability exists in mojoPortal, which can be exploited by a remote attacker to submit a special request that can upload malicious files and execute arbitrary code in the context of the application...

JTEKT Kostac PLC Programming Software Resource Management Error Vulnerability

JTEKT Kostac PLC Programming Software is PLC programmer software for personal computers from JTEKT Japan. A security vulnerability exists in JTEKT Kostac PLC Programming Software version 1.6.11.0 and earlier, which stems from the presence of a double release...

PT-2023-32965 · Unknown · Cosmovisor

Name of the Vulnerable Software and Affected Versions: Cosmovisor versions prior to v1.0.0 Description: An issue has been identified in Cosmovisor that may result in a Denial of Service or Remote Code Execution path depending on configuration for a node or validator using the vulnerable version t...

Artifex Software MuPDF 资源管理错误漏洞

Artifex Software MuPDF is a free and lightweight PDF reader from Artifex Software, USA. A security vulnerability exists in Artifex Software MuPDF version 1.16.0, which originates from a post-release reuse vulnerability in the svgdevtextspanaspathsdefs function in source/fitz/svg-device.c. The...

Adobe Acrobat Reader Post-Release Usage Vulnerability (CNVD-2024-25606)

Adobe Acrobat Reader is a tool for opening and using Adobe PDFs created in Adobe Acrobat. Although it is not possible to create PDFs in Reader, it is possible to view, print, and manage PDFs using Adobe Acrobat Reader.Once you have opened a PDF in Reader, you can use a variety of tools to find...

The vulnerability of the Envoy proxy server, related to an incorrect handling after release, allows a attacker to perform a DoS attack.

The vulnerability of the Envoy proxy server is related to an error that occurs after liberation. Exploiting this vulnerability allows a remote attacker to carry out a DoS attack...

The vulnerability of GPS HLOS driver for Android operating systems in Qualcomm embedded chips allows a hacker to trigger a service failure.

The vulnerability of the GPS HLOS driver for Android operating systems in Qualcomm embedded chips is related to the re-release of memory upon calling the cancellation registration function after registration. Exploiting this vulnerability can allow a hacker to cause a service failure...

Google Pixel 资源管理错误漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from the presence of a post-release reuse vulnerability, which could lead to local privilege escalation that requires system execution privileges...

ccxvii mujs 资源管理错误漏洞

ccxvii mujs is an open source embeddable C language interpreter. A security vulnerability exists in MuJS versions prior to 1.1.2, which stems from the presence of a memory reuse after release issue that could lead to a system denial of service...

Linux kernel 资源管理错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in versions of Linux kernel prior to 6.3.2, which stems from a memory reuse after release issue found in rkvdecremove in...

Ichitaro 2022 安全漏洞

JustSystems Ichitaro is a Japanese word processing software from JustSystems. A security vulnerability exists in Ichitaro 2022 version 1.0.1.57600, which stems from an invalid release vulnerability that can be exploited by an attacker to cause memory corruption by releasing the stack pointer via...

Linux kernel double release vulnerability (CNVD-2023-34466)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a double-release vulnerability that stems from a double-release flaw in the TUN/TAP device driver, which can be exploited by an attacker to crash a...

Virtualsquare picoTCP 资源管理错误漏洞

Virtualsquare picoTCP is a free offshoot of PicoTCP by the individual developers of Virtualsquare, originally distributed by Altran.be. A security vulnerability exists in virtualsquare picoTCP version v1.7.0, picoTCP-NG v2.1, which stems from the presence of a double release vulnerability. An...

CVE-2022-31733

Starting with diego-release 2.55.0 and up to 2.69.0, and starting with CF Deployment 17.1 and up to 23.2.0, apps are accessible via another port on diego cells, allowing application ingress without a client certificate. If mTLS route integrity is enabled AND unproxied ports are turned off, then a...

ARM Mali GPU 资源管理错误漏洞

ARM Mali GPUs are a family of mobile display chipsets GPUs from the British company ARM. Like other 3D display chips based on IP cores embedded technology, the Mali display chipset does not provide a display controller similar to a graphics card specifically designed to drive an LCD monitor to...

Design/Logic Flaw

A Missing Release of Memory after Effective Lifetime vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker to cause a Denial of Service DoS. In a segment-routing scenario with OSPF as IGP, when a peer interface continuously flap...