39 matches found
cve-2022-49186-research
CVE-2022-49186: 리눅스 커널 권한 상승 연구 개요 CVE-2022-49186를 위한 보안 연구 및 개념 증명 익스플로잇입니다. 이는 Visconti 클록 드라이버의 배열 오버플로를 통해 로컬 권한 상승을 가능하게 하는 리눅스 커널 취약점입니다. 취약점 상세 유형 : 부호 없는 변환으로 인한 배열 오버플로 CVSS 점수 : 7.8 높음 영향 : 루트로의 로컬 권한 상승 영향받는 버전 : Linux 커널 5.17.0 - 5.17.1 저장소 내용 CVE-2022-49186.pdf - 전체 연구 논문...
cve-2025-2082-POV
CVE-2025-2082 – 함수 포인터 덮어쓰기 PoV VCSEC 스타일 이 저장소는 Tesla의 VCSECVehicle Controller Security 구성 요소에서 발견된 CVE-2025-2082에서 영감을 받은 중대한 메모리 손상 결함을 시뮬레이션하는 PoVProof of Vulnerability를 제공합니다. 이 취약점은 memcpy 작업 중 부호 있는 정수에서 부호 없는 정수로의 변환 버그와 잘못된 메모리 경계 검증을 악용하여 공격자가 함수 포인터 를 덮어쓸 수 있도록 합니다. 이 PoV가 증명하는 것 BLE...
Signed to Unsigned Conversion Error
Overview Affected versions of this package are vulnerable to Signed to Unsigned Conversion Error due to unsigned leafindex values being compared as signed integers in GroupKeySet.SecretTree.hasLeaf and Group.validateRemove. An attacker can exhaust heap memory and crash the JVM by sending a small...
Signed to Unsigned Conversion Error
Overview Affected versions of this package are vulnerable to Signed to Unsigned Conversion Error due to unsigned leafindex values being compared as signed integers in GroupKeySet.SecretTree.hasLeaf and Group.validateRemove. An attacker can exhaust heap memory and crash the JVM by sending a small...
CVE-2026-17507: Signed to Unsigned Conversion Error
In Bouncy Castle for Java before 1.86, the MLS implementation org.bouncycastle.mls holds RFC 9420's uint32 leafindex in a signed int, so a wire value with the top bit set decodes to a negative number. That is a legitimate encoding rather than malformed input, and it must still decode, since the M...
AZL-99918 CVE-2026-85769 affecting package libtpms for versions less than 0.9.6-9
A flaw was found in libtpms, a library that provides software TPM 2.0 emulation. When restoring TPM 2.0 state for example during a virtual machine's power-on or state/migration restore, a malformed state blob can supply an oversized skip-block length that is not validated against the remaining si...
Exploit for CVE-2026-85769
CVE-2026-85769 Heap out-of-bounds read in libtpms TPM 2.0...
CVE-2026-85769
A heap out-of-bounds read in libtpms (software TPM 2.0 emulation, commonly deployed via swtpm in virtual machines) occurs during TPM 2.0 volatile-state restoration. An attacker-controlled oversized skip-block length in block_skip_read() drives a signed size counter negative; a subsequent signed-t...
AZL-94208 CVE-2026-55737 affecting package erlang for versions less than 26.2.5.21-4
Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format ETF binary to binarytoterm/1 to corrupt the BEAM heap pointer and crash the virtual machine. When decoding a LARGETUPLEEXT term, the...
CVE-2026-55737
Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format ETF binary to binarytoterm/1 to corrupt the BEAM heap pointer and crash the virtual machine. When decoding a LARGETUPLEEXT term, the...
PT-2026-64987
Name of the Vulnerable Software and Affected Versions Erlang OTP versions 25.0 through 27.3.4.14 Erlang OTP versions 28.0 through 28.5.0.3 Erlang OTP versions 29.0 through 29.0.3 Description A signed to unsigned conversion error leads to an out-of-bounds write when the system processes a crafted...
Signed to Unsigned Conversion Error
Overview Affected versions of this package are vulnerable to Signed to Unsigned Conversion Error via the istreamnonparallelread function in ImfContextInit.cpp when parsing a malformed EXR file through a memory-mapped IStream. An attacker can cause a heap buffer overflow by supplying a specially...
EUVD-2014-9729
Malware in sbrugna...
CVE-2025-30646
A Signed to Unsigned Conversion Error vulnerability in the Layer 2 Control Protocol daemon l2cpd of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an unauthenticated adjacent attacker sending a specifically malformed LLDP TLV to cause the l2cpd process to crash and restart...
Juniper Junos OS Vulnerability (JSA96456)
The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA96456 advisory. - A Signed to Unsigned Conversion Error vulnerability in the Layer 2 Control Protocol daemon l2cpd of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows ...
CVE-2025-30646: Signed to Unsigned Conversion Error
A Signed to Unsigned Conversion Error vulnerability in the Layer 2 Control Protocol daemon l2cpd of Juniper Networks Junos OS and Juniper Networks Junos OS Evolved allows an unauthenticated adjacent attacker sending a specifically malformed LLDP TLV to cause the l2cpd process to crash and restart...
CVE-2025-24792 Snowflake PHP PDO Driver has a Signed-to-Unsigned Conversion Error
Snowflake PHP PDO Driver is a driver that uses the PHP Data Objects PDO extension to connect to the Snowflake database. Snowflake discovered and remediated a vulnerability in the Snowflake PHP PDO Driver where executing unsupported queries like PUT or GET on stages causes a signed-to-unsigned...
CVE-2025-24792: Signed to Unsigned Conversion Error
Snowflake PHP PDO Driver is a driver that uses the PHP Data Objects PDO extension to connect to the Snowflake database. Snowflake discovered and remediated a vulnerability in the Snowflake PHP PDO Driver where executing unsupported queries like PUT or GET on stages causes a signed-to-unsigned...
Buffer Overflow
libzephyr.so is vulnerable to Buffer overflow. The vulnerability is due to signed to unsigned conversion when passing a negative size to memcpy, which can lead to buffer overflow in the esp32ipmsend function...
