Lucene search
+L

664 matches found

NVD
NVD
added 2024/02/20 6:15 p.m.31 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.9AI score0.01397EPSS
SaveExploits1References4
Prion
Prion
added 2024/02/20 6:15 p.m.23 views

Integer overflow

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

6.8AI score0.01397EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2024/02/20 6:15 p.m.33 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.9AI score0.01397EPSS
SaveExploits1References3
OSV
OSV
added 2024/02/20 6:15 p.m.11 views

UBUNTU-CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.9AI score0.01397EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/02/20 12:00 a.m.34 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

6.8AI score0.01397EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/02/20 12:00 a.m.65 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

7.2AI score0.01397EPSS
SaveExploits1References4
OSV
OSV
added 2024/02/20 12:00 a.m.33 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.5AI score
SaveExploits0References6
Debian CVE
Debian CVE
added 2024/02/20 12:00 a.m.105 views

CVE-2024-24474

QEMU before 8.2.0 has an integer underflow, and resultant buffer overflow, via a TI command when an expected non-DMA transfer length is less than the length of the available FIFO data. This occurs in espdonodma in hw/scsi/esp.c because of an underflow of asynclen...

8.8CVSS6.5AI score0.01397EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2024/01/26 12:00 a.m.11 views

PT-2024-13319 · Minizinc +1 · Minizinc +1

Name of the Vulnerable Software and Affected Versions: MiniZinc versions prior to 2.8.0 Description: The issue allows a NULL pointer dereference via ti expr in a crafted .mzn file. This is disputed because there is no common libminizinc use case in which an unattended process is supposed to run...

5.5CVSS6.7AI score0.0028EPSS
SaveExploits0References16
Openbugbounty
Openbugbounty
added 2023/12/22 8:56 p.m.11 views

ti-wag.de Improper Access Control vulnerability OBB-3820466

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
CVE
CVE
added 2023/11/21 5:41 p.m.69 views

CVE-2021-27502

CVE-2021-27502 affects Texas Instruments TI-RTOS when using the HeapMem heap (default). The issue: malloc can return a pointer to a small buffer for extremely large values, triggering an integer overflow in HeapMem_allocUnprotected and potentially enabling code execution. Multiple Red Hat/NVD ent...

7.8CVSS8AI score0.00279EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/21 5:41 p.m.53 views

CVE-2021-27502 Texas Instruments TI-RTOS Integer Overflow or Wraparound

Texas Instruments TI-RTOS, when configured to use HeapMem heapdefault, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMemallocUnprotected' and result in code execution...

7.4CVSS8.1AI score0.00279EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/20 7:15 p.m.36 views

CVE-2021-27429

Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrackalloc' and result in code execution...

7.8CVSS0.00276EPSS
SaveExploits0References2
Prion
Prion
added 2023/11/20 7:15 p.m.27 views

Integer overflow

Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrackalloc' and result in code execution...

4.3CVSS7.9AI score0.00276EPSS
SaveExploits0References2Affected Software3
Prion
Prion
added 2023/11/20 7:15 p.m.32 views

Integer overflow

Texas Instruments TI-RTOS, when configured to use HeapMem heapdefault, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMemallocUnprotected' and result in code execution...

4.3CVSS7.9AI score0.00276EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
added 2023/11/20 7:02 p.m.53 views

CVE-2021-22636 Texas Instruments TI-RTOS Integer Overflow or Wraparound

Texas Instruments TI-RTOS, when configured to use HeapMem heapdefault, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMemallocUnprotected' and result in code execution...

7.4CVSS8.1AI score0.00276EPSS
SaveExploits0References2
CVE
CVE
added 2023/11/20 7:02 p.m.60 views

CVE-2021-22636

CVE-2021-22636 involves Texas Instruments TI-RTOS where, when using the HeapMem heap, malloc can return a pointer to a small buffer for extremely large values, triggering an integer overflow in HeapMem_allocUnprotected and potentially enabling code execution. Connected documents corroborate the T...

7.8CVSS8AI score0.00276EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/11/20 7:00 p.m.53 views

CVE-2021-27429

TI-RTOS (including TI-RTOS-MCU) is associated with CVE-2021-27429, which describes an integer overflow in HeapTrack_alloc that can return a pointer to a small buffer when extremely large values are processed. This can lead to code execution. Public sources in the connected data indicate TI-RTOS T...

7.8CVSS8AI score0.00276EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/11/20 7:00 p.m.35 views

CVE-2021-27429 Texas Instruments TI-RTOS Integer Overflow or Wraparound

Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in 'HeapTrackalloc' and result in code execution...

7.4CVSS8.1AI score0.00276EPSS
SaveExploits0References2
CVE
CVE
added 2023/08/14 12:00 a.m.70 views

CVE-2023-29468

The vulnerability CVE-2023-29468 affects TI WiLink WL18xx MCP driver in WILINK8-WIFI-MCP8 versions 8.5_SP3 and earlier. The root cause is that the driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_EXT_2_IE_ID parsed in a management frame, allowing a spe...

9.8CVSS9.8AI score0.1012EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder