10302 matches found
PT-2024-8728 · Adobe · Photoshop
Name of the Vulnerable Software and Affected Versions: Adobe Photoshop Desktop versions 24.7.3, 25.11 and earlier Description: The issue is related to an Integer Underflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue...
PT-2025-18832
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been identified where the packet length retrieved from a descriptor may be larger than the actual socket buffer length, leading to a leak of kernel memory...
PT-2024-35650
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential array underflow issue has been identified in the Linux kernel, specifically in the ucsi ccg sync control function. The command variable can be controlled by the user via...
Adobe Photoshop 24.x < 24.7.4 / 25.x < 25.12 Vulnerability (APSB24-89)
The version of Adobe Photoshop installed on the remote Windows host is prior to 24.7.4/25.12. It is, therefore, affected by a vulnerability as referenced in the apsb24-89 advisory. - Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow Wrap or Wraparound...
Adobe Photoshop 24.x < 24.7.4 / 25.x < 25.12 Vulnerability (macOS APSB24-89)
The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 24.7.4/25.12. It is, therefore, affected by a vulnerability as referenced in the apsb24-89 advisory. - Photoshop Desktop versions 24.7.3, 25.11 and earlier are affected by an Integer Underflow Wrap or...
SUSE CVE-2024-50241
In the Linux kernel, the following vulnerability has been resolved: NFSD: Initialize struct nfsd4copy earlier Ensure the refcount and asynccopies fields are initialized early. cleanupasynccopy will reference these fields if an error occurs in nfsd4copy. If they are not correctly initialized, at t...
SUSE CVE-2024-50258
In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gsomaxsize/gsoipv4maxsize Config a small gsomaxsize/gsoipv4maxsize will lead to an underflow in skdstgsomaxsize, which may trigger a BUGON crash, because sk-skgsomaxsize would be much bigger than...
AZL-53333 CVE-2024-50258 affecting package kernel for versions less than 5.15.182.1-1
In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gsomaxsize/gsoipv4maxsize Config a small gsomaxsize/gsoipv4maxsize will lead to an underflow in skdstgsomaxsize, which may trigger a BUGON crash, because sk-skgsomaxsize would be much bigger than...
AZL-53361 CVE-2024-50258 affecting package kernel for versions less than 6.6.64.2-1
In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gsomaxsize/gsoipv4maxsize Config a small gsomaxsize/gsoipv4maxsize will lead to an underflow in skdstgsomaxsize, which may trigger a BUGON crash, because sk-skgsomaxsize would be much bigger than...
DEBIAN-CVE-2024-50241
In the Linux kernel, the following vulnerability has been resolved: NFSD: Initialize struct nfsd4copy earlier Ensure the refcount and asynccopies fields are initialized early. cleanupasynccopy will reference these fields if an error occurs in nfsd4copy. If they are not correctly initialized, at t...
UBUNTU-CVE-2024-50241
In the Linux kernel, the following vulnerability has been resolved: NFSD: Initialize struct nfsd4copy earlier Ensure the refcount and asynccopies fields are initialized early. cleanupasynccopy will reference these fields if an error occurs in nfsd4copy. If they are not correctly initialized, at t...
UBUNTU-CVE-2024-50258
In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gsomaxsize/gsoipv4maxsize Config a small gsomaxsize/gsoipv4maxsize will lead to an underflow in skdstgsomaxsize, which may trigger a BUGON crash, because sk-skgsomaxsize would be much bigger than...
CVE-2024-50258 net: fix crash when config small gso_max_size/gso_ipv4_max_size
In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gsomaxsize/gsoipv4maxsize Config a small gsomaxsize/gsoipv4maxsize will lead to an underflow in skdstgsomaxsize, which may trigger a BUGON crash, because sk-skgsomaxsize would be much bigger than...
CVE-2024-50258
CVE-2024-50258 affects the Linux kernel net stack. A small gso_max_size/gso_ipv4_max_size can cause an underflow in sk_dst_gso_max_size(), making sk->sk_gso_max_size exceed device limits and trigger a BUG_ON crash during tcp_write_xmit/tso processing. The root cause is in computing tso_segs (D...
CVE-2024-50258 net: fix crash when config small gso_max_size/gso_ipv4_max_size
In the Linux kernel, the following vulnerability has been resolved: net: fix crash when config small gsomaxsize/gsoipv4maxsize Config a small gsomaxsize/gsoipv4maxsize will lead to an underflow in skdstgsomaxsize, which may trigger a BUGON crash, because sk-skgsomaxsize would be much bigger than...
PT-2024-8476
The vulnerable software is 7-Zip, a widely used file compression utility. The issue arises from an integer underflow in the Zstandard decompression implementation, allowing remote attackers to execute arbitrary code on affected installations of 7-Zip by crafting specially designed archive files. ...
SUSE CVE-2024-49940
In the Linux kernel, the following vulnerability has been resolved: l2tp: prevent possible tunnel refcount underflow When a session is created, it sets a backpointer to its tunnel. When the session refcount drops to 0, l2tpsessionfree drops the tunnel refcount if session-tunnel is non-NULL...
SQLite3 generate_series Stack Buffer Underflow Vulnerability
SQLite3 suffers from a stack buffer underflow condition in seriesBestIndex in the generateseries extension. Vulnerability details static int seriesBestIndex sqlite3vtab pVTab, sqlite3indexinfo pIdxInfo int i, j; / Loop over constraints / int idxNum = 0; / The query plan bitmask / ifndef...
PT-2024-36954
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description A vulnerability in the Linux kernel has been resolved, related to the j1939 session new function, which fixes skb reference counting. The issue arises because j1939 session skb queue performs a...
Google's AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine
Google said it discovered a zero-day vulnerability in the SQLite open-source database engine using its large language model LLM assisted framework called Big Sleep formerly Project Naptime. The tech giant described the development as the "first real-world vulnerability" uncovered using the...