Code injection

The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-44550

The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-44552

The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-44550

CVE-2022-44550 affects Huawei/HarmonyOS: a use-after-free in the graphics display module when traversing graphic layers. The underlying issue is a memory reuse-after-release condition that can lead to availability impact. Public details in the provided documents identify the vulnerability and its...

PT-2022-27237 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to defects in the design process of the lock screen module. Successful exploitation may impact system availability. Recommendations: At the moment, there is no...

CVE-2022-44552

The lock screen module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

PT-2022-27235 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The graphics display module has a use-after-free UAF vulnerability when traversing graphic layers. Successful exploitation of this issue may affect system availability...

CVE-2022-44550

The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-44552

CVE-2022-44552 concerns defects in the lock screen module introduced during design, affecting availability on HarmonyOS/related Huawei interfaces. Connected sources reiterate a design flaw as root cause; explicit fixes are not documented. Some entries note no information about a newer version con...

golang: encoding/xml: stack exhaustion in Decoder.Skip

A flaw was found in golang encoding/xml. When calling Decoder, Skip while parsing a deeply nested XML document, a panic can occur due to stack exhaustion and allows an attacker to impact system availability...

golang: go/parser: stack exhaustion in all Parse* functions

A flaw was found in the golang standard library, go/parser. When calling any Parse functions on the Go source code, which contains deeply nested types or declarations, a panic can occur due to stack exhaustion. This issue allows an attacker to impact system availability...

golang: go/parser: stack exhaustion in all Parse* functions

A flaw was found in the golang standard library, go/parser. When calling any Parse functions on the Go source code, which contains deeply nested types or declarations, a panic can occur due to stack exhaustion. This issue allows an attacker to impact system availability...

kernel: memory leak for large arguments in video_usercopy function in drivers/media/v4l2-core/v4l2-ioctl.c

A flaw memory leak in the Linux kernel webcam device functionality was found in the way user calls ioctl that triggers videousercopy function. The highest threat from this vulnerability is to system availability...

kernel: memory leak for large arguments in video_usercopy function in drivers/media/v4l2-core/v4l2-ioctl.c

A flaw memory leak in the Linux kernel webcam device functionality was found in the way user calls ioctl that triggers videousercopy function. The highest threat from this vulnerability is to system availability...

The vulnerability of the Google Chrome browser’s extension allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Google Chrome browser’s “Feedback” extension relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Amazon Linux 2022 : ImageMagick, ImageMagick-c++, ImageMagick-c++-devel (ALAS2022-2022-164)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-164 advisory. A divide-by-zero flaw was found in ImageMagick in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a divisio...

AlmaLinux 9 : python3.9 (ALSA-2022:7323)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2022:7323 advisory. - A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using inttext, a system could take 50ms to parse an int...

Oracle Linux 9 : python3.9 (ELSA-2022-7323)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-7323 advisory. - Security fix for CVE-2020-10735 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has n...

CVE-2022-27586

Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version = 2.0.0 as soon as possible available in SICK Support Portal...

GLSA-202210-31 : OpenEXR: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-31 OpenEXR: Multiple Vulnerabilities - A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigger an undefined right shift error. T...