2570 matches found
stb 安全漏洞
stb is a single-file public domain library for C/C ++. A security vulnerability exists in stb version v2.27, which stems from the inclusion of an integer shift of invalid size in the component stbijpegdecodeblockprogac...
CVE-2022-28048: Incorrect Calculation
STB v2.27 was discovered to contain an integer shift of invalid size in the component stbijpegdecodeblockprogac...
GSD-2022-1000905 ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
ASoC: ops: Shift tested values in sndsocputvolsw by +min This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.233 by commit...
GSD-2022-1000880 ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
ASoC: ops: Shift tested values in sndsocputvolsw by +min This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.183 by commit...
GSD-2022-1000839 ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
ASoC: ops: Shift tested values in sndsocputvolsw by +min This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.104 by commit...
GSD-2022-1000781 ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
ASoC: ops: Shift tested values in sndsocputvolsw by +min This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.27 by commit...
PT-2022-29179
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.233 Description The issue is related to the ASoC: ops: Shift tested values in snd soc put volsw by +min. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-29113
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.104 Description A potential issue exists in the snd soc put volsw function, where shift tested values are not properly handled. The actual impact and attack plausibility have not yet been proven...
PT-2022-28986
Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16.8 through v5.16.12 Description A potential issue exists in the snd soc put volsw function, where shift tested values are not properly handled. The actual impact and attack plausibility have not yet been proven...
PT-2022-29154
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.183 Description A potential issue exists in the snd soc put volsw function, where shift tested values are not properly handled. The actual impact and attack plausibility have not yet been proven...
PT-2025-8125
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A shift out of bounds issue in the group mask calculation of the af netlink component has been identified. When a netlink message is received, the nl groups field, which carries the...
PT-2022-7206
Name of the Vulnerable Software and Affected Versions STB version 2.27 Description The issue is related to an integer shift of invalid size in the stbi jpeg decode block prog ac component. This can allow a remote attacker to access confidential data, compromise its integrity, and cause a denial o...
The vulnerability in the implementation of the mode_sense_page() function of the QEMU hardware emulation software allows a intruder to trigger a service failure.
The vulnerability of the modesensepage function implementation in the QEMU hardware emulation software is related to a single-shift error when using the “page” parameter. Exploiting this vulnerability can allow an attacker to cause a system failure...
PT-2022-38079
Уязвимость функции user addr max модуля arch/csky/include/asm/uaccess.h ядра операционной системы Linux связана с целочисленным переполнением или циклическим сдвигом. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой информации или вызвать отказ в обслуживании...
What is Shift-Left Testing and What are the Benefits?
Back in the infancy of software creation, certainly up until the mid-90s when we still used more traditional software development practices, most testing was conducted at the end of the production cycle on a graph, this would be to the right on the development timeline. Shift-left takes this...
Mageia: Security Advisory (MGASA-2022-0031)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2022:0178-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OESA-2022-1490 expat security update
An XML parser library. Security Fixes: In Expat aka libexpat before 2.4.3, a left shift by 29 or more places in the storeAtts function in xmlparse.c can lead to realloc misbehavior e.g., allocating too few bytes, or only freeing memory.CVE-2021-45960 lookup in xmlparse.c in Expat aka libexpat...
