Integer overflow

There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity...

HUAWEI EMUI 数字错误漏洞

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI atcmdserver modules are vulnerable to integer underflow, which can be exploited by attackers to compromise integrity...

CVE-2021-40054

There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity...

CVE-2021-40054

CVE-2021-40054 corresponds to an integer underflow in the atcmdserver module reported in Huawei Emui and Magic UI environments (atcmdserver). The vulnerability affects integrity and has a high severity in CVSS terms (network vector, low attack complexity, no privileges required, no user interacti...

The pay() function can still be DOSed

Lines of code Vulnerability details Impact From the prior contest: in the pay function users repay their debt and in line 364: it decreases their debt. lets say a user wants to repay all his debt, he calls the pay function with his full debt. an attacker can see it and frontrun to repay a single...

Underflown variable in borrowGivenDebtETHCollateral function

Lines of code Vulnerability details Impact borrowGivenDebtETHCollateral function does never properly call ETH.transfer due to underflow. If borrowGivenDebtETHCollateral function is not deprecated, it would cause unexpected behaviors for users. Proof of Concept Here are codes which contain a...

FreeBSD : asterisk -- multiple vulnerabilities (964c5460-9c66-11ec-ad3a-001999f8d30b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 964c5460-9c66-11ec-ad3a-001999f8d30b advisory. - PJSIP is a free and open source multimedia communication library written in C language...

CVE-2021-38578

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...

DEBIAN-CVE-2021-38578

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...

CVE-2021-38578

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...

CVE-2021-38578

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...

UBUNTU-CVE-2021-38578

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...

Design/Logic Flaw

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...

CVE-2021-38578

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...

CVE-2021-38578

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...

CVE-2021-38578

CVE-2021-38578 affects the EDK II (edk2) firmware development environment. The vulnerability arises in existing CommBuffer checks in SmmEntryPoint, where underflow can occur when computing BufferSize. This underflow can lead to a SMM privilege escalation as described in multiple advisories refere...

CVE-2021-38578

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...

CVE-2021-38578

Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize...

Tianocore Edk2 缓冲区错误漏洞

Tianocore Edk2 is a cross-platform firmware development environment from the Tianocore community that follows the UEFI and PI specifications.A buffer overflow vulnerability exists in Tianocore Edk2, which stems from an existing CommBuffer check in SmmEntryPoint that does not catch underflow when...

asterisk -- multiple vulnerabilities

The Asterisk project reports: AST-2022-004 - The header length on incoming STUN messages that contain an ERROR-CODE attribute is not properly checked. This can result in an integer underflow. Note, this requires ICE or WebRTC support to be in use with a malicious remote party. AST-2022-005 - When...