GHSA-77RM-9X9H-XJ3G Withdrawn Advisory: NULL Pointer Dereference in Protocol Buffers

Withdrawn Advisory This advisory has been withdrawn because the protobuf vulnerability comes from the compiler rather that the code. This link is maintained to preserve external references. Original Description Nullptr dereference when a null char is present in a proto symbol. The symbol is parse...

transferFrom return value unchecked

Handle hack3r-0m Vulnerability details createRJLaunchEvent is followed by initialization of launch event, the balance of launch event address is what is supplied by above mentioned safe transfer call According to EIP20, transferFrom returns boolean function transferFromaddress from, address to,...

PT-2022-12567 · Solana · Solana Rbpf

Name of the Vulnerable Software and Affected Versions: Solana rBPF versions 0.2.14 through 0.2.16 Description: The issue is related to an integer overflow bug in the function "relocate" in the file src/elf.rs. This bug occurs because the sym.st value is read directly from the ELF file without...

Unchecked transfers may lead to funds lost.

Handle bobi Vulnerability details Impact There are some transferFrom and transfer calls without checking the resultseg. against reverting. Moreover, for certain ERC20 tokens, should insufficient tokens be present, no revert occurs whatsoever, and instead, a "false" value is returned, which should...

CVE-2021-22570

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to...

Design/Logic Flaw

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to...

CVE-2021-22570

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to...

CVE-2021-22570 Nullptr Dereference in Protobuf

Nullptr dereference when a null char is present in a proto symbol. The symbol is parsed incorrectly, leading to an unchecked call into the proto file's name during generation of the resulting error message. Since the symbol is incorrectly parsed, the file is nullptr. We recommend upgrading to...

The vulnerability of the built-in software on NETGEAR Wi-Fi routers such as D8500, R6250, R7000, R7100LG, R7900, R8300, R8500, XR300, R7000P, and R6900 lies in the copying of buffers without checking the size of the input data. This allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of NETGEAR Wi-Fi router software models such as D8500, R6250, R7000, R7100LG, R7900, R8300, R8500, XR300, R7000P, and R6900P lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary co...

The vulnerability of NETGEAR R8000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. This allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of NETGEAR R8000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary codes remotely...

The vulnerability of NETGEAR R7000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of NETGEAR R7000 Wi-Fi routers’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of NETGEAR EX7000, R6400, R6400v2, R6700, R6700v3, R6900, R6900P, R7000, R7000P, R7900, R7900P, R8000, R8000P, RAX80, WNR3500v2 Wi-Fi routers lies in the copying of buffers without checking the size of input data. This allows attackers to compromise the integrity and confidentiality of protected information.

The vulnerability of Wi-Fi router microprogramming systems from NETGEAR, including models EX7000, R6400, R6400v2, R6700, R6700v3, R6900, R6900P, R7000, R7000P, R7900, R7900P, R8000, R8000P, RAX80, and WNR3500v2, stems from the copying of buffers without checking the size of the input data...

The vulnerability of NETGEAR EX6000, EX6120, EX6130, R6300v2, R6400, R7000, R7900, R8000, R7000P, R8000P, RAX80, R6900P, R7900P, RAX75 Wi-Fi router software lies in the copying of buffers without checking the size of the input data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of NETGEAR EX6000, EX6120, EX6130, R6300v2, R6400, R7000, R7900, R8000, R7000P, R8000P, RAX80, R6900P, R7900P, and RAX75 Wi-Fi routers lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an intruder to gain...

Design/Logic Flaw

An Unchecked Error Condition vulnerability in the subscriber management daemon smgd of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a crash of and thereby a Denial of Service DoS. In a subscriber management / broadband edge environment if a single session group...

CVE-2022-22160

CVE-2022-22160 affects Juniper Junos OS MX Series where the subscriber management daemon (smgd) is vulnerable to an unchecked error condition. An unauthenticated adjacent attacker can trigger a crash of smgd (in environments with dual-stack session groups and a pp0 interface), causing the daemon ...

CVE-2021-34405

NVIDIA Linux distributions contain a vulnerability in TrustZone’s TEEMalloc function, where an unchecked return value causing a null pointer dereference may lead to denial of service...

CVE-2021-34405

NVIDIA Linux distributions contain a vulnerability in TrustZone’s TEEMalloc function, where an unchecked return value causing a null pointer dereference may lead to denial of service...

The vulnerability of the tftpd_file.c component of the client TFTP Atftp, related to copying buffers without checking input data, allows a perpetrator to cause a service failure.

The vulnerability of the tftpdfile.c component in the client TFTP/Atftp system is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Unchecked returns in multiple place

Handle 0v3rf10w Vulnerability details Impact Multiple checks needed Proof of Concept L1LPTGateway.outboundTransferaddress,address,uint256,uint256,uint256,bytes contracts/L1/gateway/L1LPTGateway.sol80-123 ignores return value by TokenLikel1Token.transferFromfrom,l1LPTEscrow,amount...

Juniper Junos OS Vulnerability (JSA11268)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11268 advisory. - An Unchecked Error Condition vulnerability in the subscriber management daemon smgd of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a cra...