228 matches found
EUVD-2023-24020
Malicious code in bioql PyPI...
EUVD-2022-15468
Malicious code in bioql PyPI...
EUVD-2022-24778
Malicious code in bioql PyPI...
EUVD-2023-12916
Malicious code in bioql PyPI...
vulkan-loader:instance_enumerate_fuzzer: Null-dereference READ in ubsan_GetStackTrace
Project: https://github.com/khronosgroup/Vulkan-Loader.git Detailed Report: https://oss-fuzz.com/testcase?key=6483717088673792 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: instanceenumeratefuzzer Job Type: libfuzzerubsanvulkan-loader Platform Id: linux Crash Type: Null-dereferenc...
TencentOS Server 3: libguestfs-winsupport (TSSA-2022:0277)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0277 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
vulkan-loader:instance_enumerate_fuzzer: Heap-buffer-overflow in get_override_layer_override_paths
Project: https://github.com/khronosgroup/Vulkan-Loader.git Detailed Report: https://oss-fuzz.com/testcase?key=6740380288876544 Project: vulkan-loader Fuzzing Engine: afl Fuzz Target: instanceenumeratefuzzer Job Type: aflasanvulkan-loader Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1...
glslang, shaderc, spirv-tools, vulkan-headers, vulkan-loader, vulkan-tools, vulkan-utility-libraries, vulkan-validation-layers, and vulkan-volk bug fix and enhancement update
An update is available for vulkan-utility-libraries, vulkan-validation-layers, vulkan-headers, vulkan-tools, spirv-tools, vulkan-volk, vulkan-loader, glslang, shaderc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
vulkan-loader:instance_create_fuzzer: Segv on unknown address in loader_free_layer_properties
Detailed Report: https://oss-fuzz.com/testcase?key=6541440380895232 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: instancecreatefuzzer Job Type: libfuzzerasanvulkan-loader Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: loaderfreelayerproperties...
vulkan-loader:settings_fuzzer: Segv on unknown address in loader_delete_layer_list_and_properties
Project: https://github.com/khronosgroup/Vulkan-Loader.git Detailed Report: https://oss-fuzz.com/testcase?key=4809992808497152 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: settingsfuzzer Job Type: libfuzzerasanvulkan-loader Platform Id: linux Crash Type: Segv on unknown address...
vulkan-loader:settings_fuzzer: Crash in loader_delete_layer_list_and_properties
Project: https://github.com/khronosgroup/Vulkan-Loader.git Detailed Report: https://oss-fuzz.com/testcase?key=4732216520802304 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: settingsfuzzer Job Type: libfuzzerubsanvulkan-loader Platform Id: linux Crash Type: UNKNOWN READ Crash...
vulkan-loader:instance_create_fuzzer: Segv on unknown address in loader_free_layer_properties
Detailed Report: https://oss-fuzz.com/testcase?key=5817896795701248 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: instancecreatefuzzer Job Type: libfuzzerasanvulkan-loader Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: loaderfreelayerproperties...
spirv-tools, vulkan-headers, vulkan-loader, vulkan-tools, and vulkan-validation-layers bug fix and enhancement update
An update is available for vulkan-validation-layers, vulkan-headers, vulkan-tools, spirv-tools, vulkan-loader. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list...
vulkan-loader:instance_create_fuzzer: Crash in printf_common
Project: https://github.com/khronosgroup/Vulkan-Loader.git Detailed Report: https://oss-fuzz.com/testcase?key=4820577276723200 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: instancecreatefuzzer Job Type: libfuzzerasanvulkan-loader Platform Id: linux Crash Type: UNKNOWN READ Crash...
DEBIAN-CVE-2024-26984
In the Linux kernel, the following vulnerability has been resolved: nouveau: fix instmem race condition around ptr stores Running a lot of VK CTS in parallel against nouveau, once every few hours you might see something like this crash. BUG: kernel NULL pointer dereference, address:...
UBUNTU-CVE-2024-26984
In the Linux kernel, the following vulnerability has been resolved: nouveau: fix instmem race condition around ptr stores Running a lot of VK CTS in parallel against nouveau, once every few hours you might see something like this crash. BUG: kernel NULL pointer dereference, address:...
PT-2024-8445
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The vulnerability is related to a race condition in the nouveau component of the Linux kernel, which can cause a NULL pointer dereference. This issue can occur when running a large number of VK...
vulkan-loader:json_load_fuzzer: Crash with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=6627566543765504 Project: vulkan-loader Fuzzing Engine: libFuzzer Fuzz Target: jsonloadfuzzer Job Type: libfuzzerubsanvulkan-loader Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x000003c752c0 Crash State: NULL Sanitizer: undefined...
Multiple General Graphics Processing Unit Security Vulnerabilities
OpenCL and Vulkan are products of the Khronos Group.OpenCL is a framework for writing programs for heterogeneous platforms.Vulkan is a low-overhead, cross-platform application programming interface API for 2D and 3D graphics and computing. A security vulnerability exists in Khronos Group OpenCL,...
GPU kernel implementations susceptible to memory leak
Overview General-purpose graphics processing unit GPGPU platforms from AMD, Apple, and Qualcomm fail to adequately isolate process memory, thereby enabling a local attacker to read memory from other processes. An attacker with access to GPU capabilities using a vulnerable GPU's programmable...