5362 matches found
CVE-2023-31723
This CVE affects yasm 1.3.0.55.g101bc, where a segmentation fault occurs in the function expand_mmac_params in nasm/nasm-pp.c. The vulnerability is described across multiple sources (NVD, OSV, Nessus, PT-SEC) as a local issue with a high impact on availability (CVSS v3.1: AV:L/AC:L/PR:N/UI:R/S:U/...
CVE-2023-31556
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent...
CVE-2023-31555
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad...
CVE-2023-31556
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent...
CVE-2023-31555
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad...
Design/Logic Flaw
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent...
Design/Logic Flaw
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad...
CVE-2023-31556
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfDictionary::findKeyParent...
PoDoFo 缓冲区错误漏洞
PoDoFo is a free portable C++ library open-sourced by PoDoFo. A security vulnerability exists in PoDoFo version 0.10.0, which stems from the function PoDoFo::PdfDictionary::findKeyParent containing a segmentation violation...
CVE-2023-31556
CVE-2023-31556 affects the PoDoFo library: PoDoFo 0.10.0 contains a segmentation violation in PdfDictionary::findKeyParent, enabling a stack-based overflow against vulnerable builds. Public advisories (Snyk) confirm the issue and recommend upgrading Podof o to 0.10.4 or higher; other sources reit...
CVE-2023-31555
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad...
CVE-2023-31555
podofoinfo 0.10.0 was discovered to contain a segmentation violation via the function PoDoFo::PdfObject::DelayedLoad...
CVE-2023-31555
This CVE affects podofoinfo/podofo 0.10.0, where a segmentation violation occurs in PoDoFo::PdfObject::DelayedLoad. The issue is documented across multiple sources (e.g., Snyk) with remediation to upgrade to podofo version 0.10.4 or higher. The NVD/NVD-derived metrics indicate MEDIUM base severit...
kernel: USB: gadget: Fix obscure lockdep violation for udc_mutex
In the Linux kernel, the following vulnerability has been resolved: USB: gadget: Fix obscure lockdep violation for udcmutex A recent commit expanding the scope of the udclock mutex in the gadget core managed to cause an obscure and slightly bizarre lockdep violation. In abbreviated form:...
kernel: Recursive locking violation in usb-storage that can cause the kernel to deadlock
An incorrect access control flaw was found in the Linux kernel USB core subsystem. When attaching a malicious usb device, the recursive locking violation in usb-storage can cause the kernel to deadlock. This issue could allow a local user to crash the system...
Siemens SINEC NMS Third-Party
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...
Huawei EulerOS: Security Advisory for ncurses (EulerOS-SA-2023-1712)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS Virtualization 3.0.2.0 : ncurses (EulerOS-SA-2023-1712)
According to the versions of the ncurses packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - ncurses 6.3 before patch 20220416 has an out-of-bounds read and segmentation violation in convertstrings in tinfo/readentry.c in...
The vulnerability of the ChipsetSvcSmm component in the InsydeH2O UEFI firmware creation framework allows a attacker to cause memory corruption.
The vulnerability of the ChipsetSvcSmm component in the InsydeH2O UEFI firmware development framework is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause memory corruption...