Misaligned pointer dereference in `ChunkId::new`

The function ChunkId::new creates a misaligned pointer by casting mutable pointer of u8 slice which has alignment 1 to the mutable pointer of u32 which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function...

RUSTSEC-2023-0046 Misaligned pointer dereference in `ChunkId::new`

The function ChunkId::new creates a misaligned pointer by casting mutable pointer of u8 slice which has alignment 1 to the mutable pointer of u32 which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function...

PT-2023-3675

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability in the Linux kernel's net/sched: cls u32 component can be exploited to achieve local privilege escalation. If tcf change indev fails, u32 set parms will...

DEBIAN-CVE-2023-28842

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby is commonly referred to as Docker. Swarm Mode, which is...

CVE-2023-28840: Unprotected Alternate Channel

Moby is an open source container framework developed by Docker Inc. that is distributed as Docker, Mirantis Container Runtime, and various other downstream projects/products. The Moby daemon component dockerd, which is developed as moby/moby, is commonly referred to as Docker. Swarm Mode, which i...

SUSE CVE-2014-1523

Heap-based buffer overflow in the readu32 function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted JPEG image...

PT-2022-32739

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.51 Description The issue concerns the use of prandom instead of get random u32 in netfilter. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions pri...

PT-2022-32537

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.8 Description The issue concerns the use of prandom instead of get random u32 in netfilter. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prio...

PT-2022-32897

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.127 Description The issue concerns the use of prandom instead of get random u32 in netfilter. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

Arbitrary return types in xcb

The function xcb::xproto::GetPropertyReply::value returns a slice of type T where T is an unconstrained type parameter. The raw bytes received from the X11 server are interpreted as the requested type. The users of the xcb crate are advised to only call this function with the intended types. Thes...

PT-2021-20396

Name of the Vulnerable Software and Affected Versions: Miniaudio version 0.10.35 Description: The issue is caused by an integer-based buffer overflow due to an out-of-bounds left shift in the drwav bytes to u32 function in miniaudio.h. Recommendations: For Miniaudio version 0.10.35, consider...

PT-2021-28235

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ, with a crash state involving functions such as ReadLEB u32, InitElements, and Compile ExtendedOpcod...

PT-2021-28204

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, as indicated by the crash type. The crash state involves several functions, including load u32 be,...

AZL-41851 CVE-2021-27378 affecting package librsvg2 for versions less than 2.58.1-1

An issue was discovered in the randcore crate before 0.6.2 for Rust. Because readu32into and readu64into mishandle certain buffer-length checks, a random number generator may be seeded with too little data...

CVE-2021-27378

An issue was discovered in the randcore crate before 0.6.2 for Rust. Because readu32into and readu64into mishandle certain buffer-length checks, a random number generator may be seeded with too little data...

PT-2021-17424

Name of the Vulnerable Software and Affected Versions rand core crate versions prior to 0.6.2 Description An issue was discovered in the rand core crate where the functions read u32 into and read u64 into mishandle certain buffer-length checks. This can cause a random number generator to be seede...

PT-2020-21960

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 4 crash has been reported. The crash involves the functions le to u32, le to i32, and bcf dec typed int1 safe. No information i...

PT-2020-21775

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions to u32, fuzz get tlv comn, and fuzz add mime part. No information i...

PT-2018-6006

Name of the Vulnerable Software and Affected Versions: Qualcomm Android for MSM versions prior to security patch level 2018-04-05 Firefox OS for MSM versions prior to security patch level 2018-04-05 QRD Android versions prior to security patch level 2018-04-05 Description: A policy for the packet...

PT-2017-17902

Name of the Vulnerable Software and Affected Versions radare2 version 1.3.0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted Web Assembly file. This occurs due to a problem in the read u32...