SUSE CVE-2022-40540

Memory corruption due to buffer copy without checking the size of input while loading firmware in Linux Kernel...

The vulnerability of the Emscripten compiler in the encoding and decoding library for HEIF and AVIF files, which allows a hacker to trigger a service failure.

The vulnerability of the Emscripten compiler in the library for encoding and decoding HEIF and AVIF files is related to the copying of buffers without checking the size of the input data during image processing using the strided function. Exploiting this vulnerability can allow an attacker to cau...

Mattermost 信息泄露漏洞

Mattermost is an open source collaboration platform from US-based Mattermost. Mattermost suffers from an information disclosure vulnerability that stems from failing to check settings when presenting the results of an API call, which can be exploited by an attacker to gain access to information...

UBUNTU-CVE-2023-27538

An authentication bypass vulnerability exists in libcurl prior to v8.0.0 where it reuses a previously established SSH connection despite the fact that an SSH option was modified, which should have prevented reuse. libcurl maintains a pool of previously used connections to reuse them for subsequen...

Unchecked return value of call will allow to send messages marked as sent but will fail due to not enough gas

Lines of code Vulnerability details Impact On the sendTol1 function, they are sending the message via the SystemContractHelper: SystemContractHelper.toL1true, bytes32uint256uint160msg.sender, hash; the problem relies on the fact that they are not checking whether the message was actually sent...

PT-2023-9309 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev35-gbbca86917-master Description: A critical issue has been found in the file filters/load text.c of GPAC, related to buffer overflow due to unchecked input size during buffer copying. This can be exploited to overflow...

The vulnerability of Mozilla Firefox ESR and the Mozilla Thunderbird email client lies in the fact that they allow copying into the buffer without checking the size of the input data. This allows attackers to execute arbitrary code on the target system.

The vulnerability in Mozilla Firefox ESR and the Mozilla Thunderbird email client relates to the copying of input data into the buffer without checking its size. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system remotely...

share underflow in getPoolReward()

Lines of code Vulnerability details Impact It is important to draw attention to an issue that, while out of scope, can lead to a complete loss of funds on the contract and, therefore, seems significant. The configurePools function allows setting an arbitrary, unrestricted daoTax, which can result...

Infinite mint via points underflow (in scope)

Lines of code Vulnerability details Impact Due to unchecked math in the withdrawLP function, a user can trigger an underflow in their points and infinitely increase their rewards. The problem exists in several places. Problem 1. The configureTimelockOptions function allows setting...

The vulnerability in the implementation of the TLS protocol in the Linux operating system allows a attacker to cause a service failure.

The vulnerability in the implementation of the TLS protocol in Linux operating systems is related to the lack of checks on a certain data structure field, which can lead to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

Denial Of Service (DoS)

gss-ntlmssp is vulnerable to Denial of Service DoS attacks. The length of the avpair is not checked properly for two elements, which can trigger an out-of-bounds read and cause a denial-of-service if memory is unmapped...

NULL Pointer Dereference

Linux kernel is vulnerable to NULL Pointer Dereference. the vulnerability occurs to a lack of checking the return value of 'kvmallocarray' in 'uapifinalize' leading to a null pointer dereference...

An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.0-rc0. The device uses the guest supplied stream number unchecked which can lead to out-of-bounds access to the UASDevice->data3 and UASDevice->status3 fields. A malicious guest user could use this flaw to crash QEMU or potentially achieve code execution with the privileges of the QEMU process on the host.

...

Return value unchecked - leads to privilege escalation

Lines of code Vulnerability details Impact The application doesn't check the return value of isGrantes properly Proof of Concept no check on the return value only exception handled Tools Used slither Recommended Mitigation Steps check the return value or force it for the implementing class --- Th...

PT-2023-13283 · Qualcomm · Snapdragon +110

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption due to a buffer copy without checking the size of the input in HLOS. This occurs when the input message size...

jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

A flaw was found in FasterXML jackson-databind. This issue could allow an attacker to benefit from resource exhaustion when the UNWRAPSINGLEVALUEARRAYS feature is enabled due to unchecked primitive value deserializers to avoid deep wrapper array nesting...

Upgraded Q -> 2 from #795 [1677634099280]

Judge has assessed an item in Issue 795 as 2 risk. The relevant finding follows: 04 VALUES OF fees ARE NOT CHECKED IN Vault.initialize FUNCTION When calling the following Vault.initialize function, the values of fees are not checked. It is possible that these fees are set to be above 1e18 when...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation. A security vulnerability exists in Linux kernel versions prior to 5.16, which stems from a lack of checking of the hashmapnew return value in the tools/perf/util/expr.c file...

The vulnerability of AMD microprocessor BIOS microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the BIOS microprogramming system of AMD processors lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Amazon Linux 2 : protobuf (ALAS-2023-1948)

The version of protobuf installed on the remote host is prior to 2.5.0-8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-1948 advisory. A flaw was found in protobuf. The vulnerability occurs due to incorrect parsing of a NULL character in the proto symbol and leads ...