Lucene search
+L

197 matches found

NVD
NVD
added 2023/04/06 6:15 p.m.14 views

CVE-2023-20685

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608575; Issue ID: ALPS07608575...

6.4CVSS6.7AI score0.00069EPSS
Exploits0References1
NVD
NVD
added 2023/04/06 6:15 p.m.22 views

CVE-2023-20684

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671069; Issue ID: ALPS07671069...

6.4CVSS6.7AI score0.00069EPSS
Exploits0References1
Prion
Prion
added 2023/04/06 6:15 p.m.19 views

Race condition

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671069; Issue ID: ALPS07671069...

3.4CVSS6.6AI score0.00069EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2023/04/06 6:15 p.m.21 views

Race condition

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608575; Issue ID: ALPS07608575...

3.4CVSS6.6AI score0.00069EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/06 12:0 a.m.5 views

PT-2023-17550 · Vdec · Vdec

Name of the Vulnerable Software and Affected Versions: vdec affected versions not specified Description: The issue is related to a possible use after free due to a race condition in vdec. This could lead to local escalation of privilege with System execution privileges needed. User interaction is...

6.4CVSS6.4AI score0.00069EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/04/06 12:0 a.m.5 views

PT-2023-17549 · Vdec · Vdec

Name of the Vulnerable Software and Affected Versions: vdec affected versions not specified Description: The issue is related to a possible use after free due to a race condition in vdec. This could lead to local escalation of privilege with System execution privileges needed. User interaction is...

6.4CVSS6.5AI score0.00069EPSS
Exploits0References4
Cvelist
Cvelist
added 2023/04/06 12:0 a.m.23 views

CVE-2023-20685

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608575; Issue ID: ALPS07608575...

6.8AI score0.00069EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/04/06 12:0 a.m.5 views

CVE-2023-20685

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608575; Issue ID: ALPS07608575...

6.7AI score0.00069EPSS
Exploits0References1
CVE
CVE
added 2023/04/06 12:0 a.m.46 views

CVE-2023-20684

CVE-2023-20684 affects the vdec component and describes a use-after-free brought on by a race condition, enabling local escalation of privileges to SYSTEM with no user interaction required. The vulnerability is about memory mismanagement that could be exploited locally; exploitation details are n...

6.4CVSS6.6AI score0.00069EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/04/06 12:0 a.m.31 views

CVE-2023-20684

In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671069; Issue ID: ALPS07671069...

6.8AI score0.00069EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 3:31 a.m.5 views

SUSE CVE-2022-3112

An issue was discovered in the Linux kernel through 5.16-rc6. amvdecsetcanvases in drivers/staging/media/meson/vdec/vdechelpers.c lacks check of the return value of kzalloc and will cause the null pointer dereference...

5.5CVSS6.7AI score0.00214EPSS
Exploits0References15
BDU FSTEC
BDU FSTEC
added 2022/12/22 12:0 a.m.14 views

The vulnerability of the amvdec_set_canvases() function in the Linux kernel’s drivers/staging/media/meson/vdec/vdec_helpers.c file allows a hacker to cause a service failure or gain increased privileges.

The vulnerability of the amvdecsetcanvases function in the drivers/staging/media/meson/vdec/vdechelpers.c file of the Linux kernel is related to a pointer dereferencing error. Exploiting this vulnerability could allow an attacker to cause service failures or gain increased privileges...

5.5CVSS6.7AI score0.00214EPSS
Exploits0References10Affected Software3
OSV
OSV
added 2022/12/14 9:15 p.m.0 views

DEBIAN-CVE-2022-3112

An issue was discovered in the Linux kernel through 5.16-rc6. amvdecsetcanvases in drivers/staging/media/meson/vdec/vdechelpers.c lacks check of the return value of kzalloc and will cause the null pointer dereference...

5.5CVSS6.5AI score0.00214EPSS
Exploits0References1
OSV
OSV
added 2022/12/08 3:3 a.m.11 views

GSD-2022-1008089 media: meson: vdec: fix possible refcount leak in vdec_probe()

media: meson: vdec: fix possible refcount leak in vdecprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.154 by commit...

7.2AI score
Exploits0
OSV
OSV
added 2022/12/08 2:51 a.m.3 views

GSD-2022-1007972 media: meson: vdec: fix possible refcount leak in vdec_probe()

media: meson: vdec: fix possible refcount leak in vdecprobe This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.78 by commit...

7.2AI score
Exploits0
Positive Technologies
Positive Technologies
added 2022/12/08 12:0 a.m.6 views

PT-2022-36074 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.8 Description: A potential issue exists in the vdec probe function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

7.2AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/12/08 12:0 a.m.6 views

PT-2022-36344 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.154 Description: A potential issue exists in the vdec probe function, which may lead to a refcount leak. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kerne...

7.2AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2022/11/22 12:0 a.m.7 views

VDec::VDec function vulnerability in the /sql/sql_type.cc component of the MariaDB database, which allows a attacker to cause a service failure.

The vulnerability of the VDec::VDec function in the /sql/sqltype.cc component of the MariaDB database lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause service interruptions...

7.8CVSS7.4AI score0.02125EPSS
Exploits1References11Affected Software6
ATTACKERKB
ATTACKERKB
added 2022/10/07 8:15 p.m.3 views

CVE-2022-26473

In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342197; Issue ID: ALPS07342197...

6.7CVSS6.9AI score0.00108EPSS
Exploits0References2
NVD
NVD
added 2022/10/07 8:15 p.m.18 views

CVE-2022-26473

In vdec fmt, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07342197; Issue ID: ALPS07342197...

6.7CVSS0.00108EPSS
Exploits0References1
Rows per page
Query Builder