ActivePool unwraps but does not update user state in WJLP

Handle cmichel Vulnerability details Calling WJLP.unwrap burns WJLP, withdraws the amount from the master chef and returns the same amount of JLP back to the to address. However, it does not update the internal accounting in WJLP with a userUpdate call. This needs to be done on the caller side...

The vulnerability of the “AES_UnWRAP” function in Realtek network adapters allows a hacker to execute arbitrary code.

The vulnerability of the “AESUnWRAP” function in Realtek network adapters is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2021-3466

Name of the Vulnerable Software and Affected Versions Realtek RTL8710 and other Ameba-based devices affected versions not specified Description A stack buffer overflow in the AES UnWRAP function can lead to remote code execution when an attacker in Wi-Fi range sends a crafted Encrypted GTK value ...

CVE-2020-25855

The function AESUnWRAP in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for a memcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An...

PT-2021-11188

Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue concerns a stack buffer overflow due to a lack of validation for the size parameter in a memcpy operation within the AES UnWRAP function. This can be exploited for...

PT-2020-11407

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds read in the fpc ta hw auth unwrap key function of fpc ta hw auth qsee.c. This could lead to local information disclosure, requiring System execution privileges for...

PT-2019-6457

Name of the Vulnerable Software and Affected Versions Lustre file system versions prior to 2.12.3 Description The issue is related to an out-of-bounds read and panic in the ptlrpc module of the Lustre file system. This occurs due to the lack of validation for specific fields of packets sent by a...

The vulnerability of the Firefox browser allows a malicious attacker to compromise the confidentiality and integrity of protected information.

The vulnerability in the implementation of XrayWrapper in Mozilla Firefox allows malicious actors to bypass access restrictions by using a specially crafted web page, provided that the user visits it through a debugger. This enables operations such as unwrapping and calling DOM methods on unwrapp...

UBUNTU-CVE-2014-9421

The authgssapiunwrapdata function in lib/rpc/authgssapimisc.c in MIT Kerberos 5 aka krb5 through 1.11.5, 1.12.x through 1.12.2, and 1.13.x before 1.13.1 does not properly handle partial XDR deserialization, which allows remote authenticated users to cause a denial of service use-after-free and...

PT-2015-4193

Name of the Vulnerable Software and Affected Versions MIT Kerberos 5 versions 1.11.5 and earlier MIT Kerberos 5 versions 1.12.x through 1.12.2 MIT Kerberos 5 versions 1.13.x before 1.13.1 Description The issue is related to the auth gssapi unwrap data function, which does not properly handle...

CVE-2010-0161

CVE-2010-0161 affects Thunderbird (before 2.0.0.24) and SeaMonkey (before 1.1.19) on Windows, where the nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp can be triggered by data from a remote SMTP/IMAP/POP server using SSPI. This may cause heap memory corruption and application crash...