CVE-2022-20404: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-205714161References: N/A...

CVE-2022-20384: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-211727306References: N/A...

CVE-2022-20370: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-215730643References: N/A...

CVE-2022-20408: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-204782372References: N/A...

CVE-2022-20406: Undefined Security Weakness

Product: AndroidVersions: Android kernelAndroid ID: A-184676385References: N/A...

golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

A flaw was found in the elliptic package of the crypto library in golang when the IsOnCurve function could return true for invalid field elements. This flaw allows an attacker to take advantage of this undefined behavior, affecting the availability and integrity of the resource...

CVE-2022-30133: Undefined Security Weakness

Windows Point-to-Point Protocol PPP Remote Code Execution Vulnerability...

OESA-2022-1810 vim security update

Vim is an advanced text editor that seeks to provide the power of the de-facto Unix editor 'Vi', with a more complete feature set. Vim is a highly configurable text editor built to enable efficient text editing. It is an improved version of the vi editor distributed with most UNIX systems. Securi...

vim diff_write_buffer function buffer overflow vulnerability

Vim is a cross-platform text editor. vim suffers from a buffer overflow vulnerability that results from undefined behavior in the diffwritebuffer function. An attacker could exploit this vulnerability to cause a buffer overflow...

CVE-2022-21788

In scp, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06988728; Issue ID: ALPS06988728...

CVE-2022-21788

In scp, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06988728; Issue ID: ALPS06988728...

CVE-2022-21788

CVE-2022-21788 affects the scp component and is caused by undefined behavior stemming from incorrect error handling. The issue can enable local privilege escalation with system execution privileges; exploitation does not require user interaction. A patch is identified (ALPS06988728/ALPS06988728) ...

CVE-2022-21788

In scp, there is a possible undefined behavior due to incorrect error handling. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06988728; Issue ID: ALPS06988728...

golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

A flaw was found in the elliptic package of the crypto library in golang when the IsOnCurve function could return true for invalid field elements. This flaw allows an attacker to take advantage of this undefined behavior, affecting the availability and integrity of the resource...

Vim buffer error vulnerability

Vim is a cross-platform text editor. vim suffers from a buffer overflow vulnerability that results from undefined behavior in the diffwritebuffer function. An attacker could exploit this vulnerability to cause a buffer overflow...

CVE-2022-22505: Undefined Security Weakness

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 contains a vulnerability that could allow IBM tenant credentials to be exposed. IBM X-Force ID: 227288...

pcl:ply_reader_fuzzer: Crash in std::__1::__split_buffer<unsigned char, std::__1::allocator<unsigned char>&>::__

Project: https://github.com/PointCloudLibrary/pcl.git Detailed Report: https://oss-fuzz.com/testcase?key=5835859303202816 Project: pcl Fuzzing Engine: libFuzzer Fuzz Target: plyreaderfuzzer Job Type: libfuzzerubsanpcl Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000009f38a70 Crash...

Safety issues in `pkcs11`

Impact The interface of pkcs11 is subject to a number of safety issues, mainly related to handling of raw pointers. Despite presenting a safe interface, many of the functions and methods that rely on inputs which contain pointers attributes and mechanisms in particular can lead to segmentation...

PT-2022-37416

Name of the Vulnerable Software and Affected Versions pkcs11 affected versions not specified Description The pkcs11 interface has several safety issues, primarily related to the handling of raw pointers. These issues can lead to segmentation faults and undefined behavior when pointers are...

USN-5523-1: LibTIFF vulnerabilities

It was discovered that LibTIFF was not properly performing checks to guarantee that allocated memory space existed, which could lead to a NULL pointer dereference via a specially crafted file. An attacker could possibly use this issue to cause a denial of service. CVE-2022-0907, CVE-2022-0908 It...