emulsion (>=6.0.0, <=10.0.0), libavif-sys (>=0.8.0, <=0.15.0) +1 more potentially affected by unknown CVE via libdav1d-sys (>=0.2.0, <=0.6.0)

libdav1d-sys CARGO version =0.2.0, =6.0.0, =0.8.0, =0.9.4, =0.10.1 Source cves: unknown CVE Source advisory: OSV:GHSA-MC39-H54G-PVW6...

libdav1d-sys affected by dav1d AV1 decoder integer overflow

An integer overflow in dav1d AV1 decoder that can occur when decoding videos with large frame size. This can lead to memory corruption within the AV1 decoder. We recommend upgrading to version 0.7.0 of libdav1d-sys, which includes dav1d 1.4.0...

CVE-2024-26782

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on socket dismantle when MPTCP server accepts an incoming connection, it clones its listener socket. However, the pointer to 'inetopt' for the new socket has the same value as the original one: as a...

CVE-2024-26782

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix double-free on socket dismantle when MPTCP server accepts an incoming connection, it clones its listener socket. However, the pointer to 'inetopt' for the new socket has the same value as the original one: as a...

The vulnerability of the fromSetSysTime() function (/goform/SetSysTimeCfg) in the Tenda AC10 router’s microprogramming software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the fromSetSysTime function /goform/SetSysTimeCfg in the Tenda AC10 router’s microprogramming system is related to the operation where the output goes beyond the buffer in memory when processing the timeZone parameter. Exploiting this vulnerability can allow an attacker to...

PT-2024-8284

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the incorrect handling of errors in the tegra dc rgb probe function. If clk get sys..., "pll d2 out0" fails, the clk get sys call must be undone by adding a missi...

CVE-2024-2856

A vulnerability, which was classified as critical, has been found in Tenda AC10 16.03.10.13/16.03.10.20. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone leads to stack-based buffer overflow. The attack may be...

CVE-2024-2816

A vulnerability classified as problematic was found in Tenda AC15 15.03.05.18. Affected by this vulnerability is the function fromSysToolReboot of the file /goform/SysToolReboot. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been...

Tenda AC18 Cross-Site Request Forgery Vulnerability

Tenda AC18 is a router from Tenda, China. A cross-site request forgery vulnerability exists in Tenda AC18 version V15.03.05.05, which stems from a cross-site request forgery in the fromSysToolRestoreSet function of the /goform/SysToolRestoreSet file...

PT-2024-2395 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 versions 15.03.05.18 through 15.03.05.19 and version 15.03.20 Description: A critical vulnerability was found in the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument time leads to a...

CVE-2021-47124 io_uring: fix link timeout refs

In the Linux kernel, the following vulnerability has been resolved: iouring: fix link timeout refs WARNING: CPU: 0 PID: 10242 at lib/refcount.c:28 refcountwarnsaturate+0x15b/0x1a0 lib/refcount.c:28 RIP: 0010:refcountwarnsaturate+0x15b/0x1a0 lib/refcount.c:28 Call Trace: refcountsubandtest...

CVE-2024-2204

Zemana AntiLogger v2.74.204.664 is vulnerable to a Denial of Service DoS vulnerability by triggering the 0x80002004 and 0x80002010 IOCTL codes of the zam64.sys and zamguard64.sys drivers...

CVE-2024-2204

Zemana AntiLogger v2.74.204.664 is vulnerable to a Denial of Service DoS vulnerability by triggering the 0x80002004 and 0x80002010 IOCTL codes of the zam64.sys and zamguard64.sys drivers...

CVE-2024-2180

Zemana AntiLogger v2.74.204.664 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x80002020 IOCTL code of the zam64.sys and zamguard64.sys drivers...

CVE-2024-2204 Zemana AntiLogger v2.74.204.664 - Denial of Service (DoS)

Zemana AntiLogger v2.74.204.664 is vulnerable to a Denial of Service DoS vulnerability by triggering the 0x80002004 and 0x80002010 IOCTL codes of the zam64.sys and zamguard64.sys drivers...

CVE-2024-2204

CVE-2024-2204 affects Zemana AntiLogger v2.74.204.664. The DoS condition arises when triggering IOCTL codes 0x80002004 and 0x80002010 in the zam64.sys and zamguard64.sys drivers. The vulnerability is articulated across multiple sources (NVD, Red Hat CVE, CVE listing) and focuses on local access r...

CVE-2024-2204 Zemana AntiLogger v2.74.204.664 - Denial of Service (DoS)

Zemana AntiLogger v2.74.204.664 is vulnerable to a Denial of Service DoS vulnerability by triggering the 0x80002004 and 0x80002010 IOCTL codes of the zam64.sys and zamguard64.sys drivers...

CVE-2024-2180

The CVE-2024-2180 entry concerns Zemana AntiLogger v2.74.204.664, where a Memory Information Leak vulnerability is triggered by the IOCTL code 0x80002020 in the zam64.sys and zamguard64.sys drivers. Concretely, affected software is Zemana AntiLogger (v2.74.204.664); vulnerable components are the ...

CVE-2024-2180 Zemana AntiLogger v2.74.204.664 - Kernel Memory Leak

Zemana AntiLogger v2.74.204.664 is vulnerable to a Memory Information Leak vulnerability by triggering the 0x80002020 IOCTL code of the zam64.sys and zamguard64.sys drivers...

Zemana AntiLogger Information Disclosure Vulnerability

Zemana AntiLogger is an application from Zemana Inc. protects your PC from keyloggers, malware, ransomware, adware, and more. An information disclosure vulnerability exists in Zemana AntiLogger version v2.74.204.664, which stems from triggering the 0x80002020 IOCTL code in the zam64.sys and...