Juniper Networks Junos OS Information Disclosure Vulnerability (CNVD-2022-21488)

Juniper Networks Junos OS is a network operating system from Juniper Networks, Inc. for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS is vulnerable to information disclosure, and no details of the...

CVE-2021-38784

There is a NULL pointer dereference in the syscall openexec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash...

CVE-2021-38785

There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedardev that could use the ioctl cmd IOCTLGETIOMMUADDR to cause a system crash...

Null pointer dereference

There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedardev that could use the ioctl cmd IOCTLGETIOMMUADDR to cause a system crash...

CVE-2021-38785

CVE-2021-38785 describes a NULL pointer dereference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev. The issue can be triggered by the IOCTL_GET_IOMMU_ADDR ioctl, leading to a system crash. The available documents identify the affected component and the crash impact but ...

CVE-2021-38784

There is a NULL pointer dereference in the syscall openexec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash...

CVE-2021-38784

CVE-2021-38784 affects Allwinner R818 SoC Android Q SDK V1.0. A NULL pointer dereference in the syscall open_exec function could allow a malicious file to trigger a system crash. This is described across multiple sources in the provided documents, which confirm the underlying cause as a NULL poin...

CVE-2021-38783

CVE-2021-38783 affects the Allwinner R818 SoC Android Q SDK V1.0 camera driver, exposing /dev/cedar_dev to iotcl IOCTL_SET_PROC_INFO and IOCTL_COPY_PROC_INFO. The root cause is an out-of-bounds write in the driver, which can cause a system crash or privilege escalation. Provided documents do not ...

CVE-2021-38783

There is a Out-of-Bound Write in the Allwinner R818 SoC Android Q SDK V1.0 camera driver "/dev/cedardev" through iotcl cmd IOCTLSETPROCINFO and IOCTLCOPYPROCINFO, which could cause a system crash or EoP...

Allwinner Technology R818 缓冲区错误漏洞

The Allwinner Technology R818 is a quad-core intelligent voice with screen chip from Allwinner Technology Zhuhai, China. The Allwinner Technology R818 SoC Android Q SDK V1.0 suffers from a buffer error vulnerability that could lead to a system crash or EoP...

CVE-2022-23095

Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads to memory corruption. An attacker can leverage this vulnerability to execute code in the context of the current process...

Memory corruption

Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads to memory corruption. An attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2022-23095

Open Design Alliance Drawings SDK before 2022.12.1 mishandles the loading of JPG files. Unchecked input data from a crafted JPG file leads to memory corruption. An attacker can leverage this vulnerability to execute code in the context of the current process...

CVE-2022-23095

CVE-2022-23095 affects the Open Design Alliance Drawings SDK. It arises from improper handling during JPG loading, allowing crafted input to cause memory corruption and, per sources, potential code execution in the affected process. Public advisories (ZDI, NVD/CVE entries, Red Hat context) identi...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - October 2021 - Includes Oracle October 2021 CPU (minus CVE-2021-35550/35561/35603) plus CVE-2021-41035

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7, and 8 that are used by Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas and Maximo for...

PT-2022-7150 · Open Design Alliance · Open Design Alliance Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Open Design Alliance Drawings SDK versions prior to 2022.12.1 Description: The issue is related to a buffer overflow in the Drawings SDK, which can be exploited by an attacker using a specially crafted file, potentially leading to the executi...

.NET 6.0 bugfix update

An update is available for dotnet6.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

.NET 6.0 bugfix update

.NET Core is a managed-software framework. It implements a subset of the .NET framework APIs and several new APIs, and it includes a CLR implementation. Bug Fixes and Enhancements: Update .NET 6.0 to SDK 6.0.101 and Runtime 6.0.1 almalinux-8.5.0.z BZ2030391...

Allocation of Resources Without Limits or Throttling in Apache Avro

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...

GHSA-868X-RG4C-CJQG Allocation of Resources Without Limits or Throttling in Apache Avro

A vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro version 1.10.2 and prior versions. Users should update to version 1.11.0 which addresses this...