PT-2022-36403 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.225 Description: A potential memory leak issue was discovered in the Linux Kernel. The issue is related to the register pcpu function. The actual impact and attack plausibility have not yet been proven...

Updated x11-server packages fix security vulnerability

Buffer overflow in function GetCountedString of the file xkb/xkb.c. CVE-2022-3550 Memory leak in the function ProcXkbGetKbdByName of the file xkb/xkb.c. CVE-2022-3551...

CVE-2022-39392 Wasmtime vulnerable to out of bounds read/write with zero-memory-pages configuration

Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocator when the allocator is configured to give WebAssembly instances a maximum of zero pages of memory. In this configuration, the virtual memory mappi...

GPAC 安全漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC v2.1, which stems from a memory leak in the gflistnew component of utils/list.c. The vulnerability is caused by the presence of a memory leak in the gflistnew component of utils/list.c...

CVE-2022-43223

open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted UE attachment...

Denial Of Service(DoS)

libtiff.so is vulnerable to denial of service. The vulnerability exists in extractContigSamplesShifted24bits function of tiffcrop.c due to a memory corruption which allows an attacker to crash the application via malicious tiff file...

CVE-2022-42935

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

PT-2022-26666 · Autodesk · Designreview.Exe

Name of the Vulnerable Software and Affected Versions: DesignReview.exe affected versions not specified Description: A maliciously crafted TGA file consumed through the DesignReview.exe application could lead to memory corruption, potentially allowing code execution in the context of the current...

CVE-2022-42934

A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by write access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2022-41741 NGINX ngx_http_mp4_module vulnerability CVE-2022-41741

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngxhttpmp4module that might allow a local attacker to corrupt NGINX worker memory, resulting in...

PT-2022-25607 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: The issue is related to a memory allocation problem that can lead to denial of service. Recommendations: For Bento4 version 1.6.0-639, at the moment, there is no information about a newer version that...

PT-2022-26716 · Bento4 · Bento4

Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A memory leak issue was discovered in the AP4 DescriptorFactory::CreateDescriptorFromStream function located in Core/Ap4DescriptorFactory.cpp. This issue is demonstrated by the mp42aac tool...

PT-2022-25959 · Kernel · Kernel

Name of the Vulnerable Software and Affected Versions: Kernel affected versions not specified Description: The issue is related to an out-of-bounds read, which could potentially lead to memory overwriting if successfully exploited. Recommendations: At the moment, there is no information about a...

Buffer Overflow

libpjsip.so is vulnerable to Buffer Overflow. The vulnerability exists via PJMEDIA RTP decoder and PJMEDIA SDP parser which allows an attacker to cause a memory corruption resulting in an application crash...

PT-2022-25698 · Sap · Sap 3D Visual Enterprise Author

Name of the Vulnerable Software and Affected Versions: SAP 3D Visual Enterprise Author version 9 Description: The issue arises due to improper memory management when handling Enhanced Metafile .emf, emf.x3d files from untrusted sources. This can lead to Remote Code Execution when a manipulated fi...

PT-2022-34840 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.146 Description: A percpu memory leak issue exists in the nf tables component of the netfilter subsystem. The issue was introduced in version v5.3 and is fixed in Linux Kernel version v5.10.146. The actual...

GSD-2022-1005612 of: check previous kernel's ima-kexec-buffer against memory bounds

of: check previous kernel's ima-kexec-buffer against memory bounds This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.61 by commit...

PT-2022-33742 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.63 Description: A possible memory leak issue exists when failing to issue CMF WQE. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

Buffer Overflow

libtinyexr.so is vulnerable to heap-based buffer overflow. The vulnerability exist in the DecompressRle function in tinyexr.h due to lack of address validation, allowing an attacker to cause memory corruption...

EUVD-2022-33803

An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0. A specially-crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability...