39 matches found
CVE-2026-46218
The vulnerability CVE-2026-46218 affects the Linux kernel DRM AMDGPU driver. The issue is in ib_get_value/ib_set_value where the uvd/vce/vcn code accessed the Instruction Buffer (IB) at predefined offsets without verifying the IB size, enabling out-of-bounds reads/writes. The root cause is missin...
Astra Linux - уязвимость в tiff
The tiffcrop utility in libtiff has a uint32t underflow, which can lead to out-of-bounds read and write operations. An attacker who provides a crafted file to tiffcrop likely by tricking a user into running tiffcrop with certain parameters could cause a crash or, in some cases, lead to further...
Apache Thrift: Go TFramedTransport uint32 overflow
...
CVE-2025-36938
In U-Boot of appenduint32le, there is a possible fault injection due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-36938
In U-Boot of appenduint32le, there is a possible fault injection due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
EUVD-2017-6361
Malware in sbrugna...
EUVD-2017-9209
Malware in sbrugna...
EUVD-2021-8998
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2022-42324
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Oxenstored 32-31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenbus library takes a C uint32t out of the ri...
openSUSE Security Advisory (SUSE-SU-2025:02516-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES15 / openSUSE 15 Security Update : ovmf (SUSE-SU-2025:02516-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02516-1 advisory. - CVE-2024-1298: Fixed potential UINT32 overflow in S3 ResumeCount bsc1225889. Other fixes: - Fixed Kubevirt GPU passthrough...
SUSE-SU-2025:02516-1 Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2024-1298: Fixed potential UINT32 overflow in S3 ResumeCount bsc1225889. Other fixes: - Fixed Kubevirt GPU passthrough failure bsc1245542...
CVE-2021-21827
A heap-based buffer overflow vulnerability exists in the XML Decompression DecodeTreeBlock functionality of AT Labs Xmill 0.7. Within DecodeTreeBlock which is called during the decompression of an XMI file, a UINT32 is loaded from the file and used as trusted input as the length of a buffer. An...
CVE-2019-14105
Kernel was reading the CSL defined reserved field as uint16 instead of uint32 which could lead to memory overflow in Snapdragon Industrial IOT, Snapdragon Mobile in SDA845, SDM845, SM8150...
Security update for ovmf
This update for ovmf fixes the following issues: CVE-2024-1298: MdeModulePkg: Potential UINT32 overflow in S3 ResumeCount bsc1225889 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run th...
SUSE-SU-2024:4357-1 Security update for ovmf
This update for ovmf fixes the following issues: - CVE-2024-1298: MdeModulePkg: Potential UINT32 overflow in S3 ResumeCount bsc1225889...
SUSE SLES15 / openSUSE 15 Security Update : ovmf (SUSE-SU-2024:4088-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:4088-1 advisory. - CVE-2024-1298: Fixed potential UINT32 overflow in S3 ResumeCount bsc1225889. Tenable has extracted the preceding description...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the risk of an overflow from uint32t to uint8t...
EulerOS Virtualization 2.11.1 : edk2 (EulerOS-SA-2024-2177)
According to the versions of the edk2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : An attacker with the ability to modify physical memory can control the value of AcpiS3ResumeRecord- ResumeCount. If the attacker sets...
Medium: edk2
Issue Overview: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability. CVE-2024-1298 Affected Packages: edk2 Note: This adviso...