1104 matches found
Google Android elevation of privilege vulnerability (CNVD-2021-43399)
Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from a memory corruption in the memory management driver due to reuse after release. An attack...
Google Android elevation of privilege vulnerability (CNVD-2021-43400)
Google Android is a Linux-based open source operating system from the Google Open Handheld Alliance Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from a memory corruption due to double release in the memory management driver. An attacker coul...
CVE-2021-3545
An information disclosure vulnerability was found in the virtio vhost-user GPU device vhost-user-gpu of QEMU in versions up to and including 6.0. The flaw exists in virglcmdgetcapsetinfo in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest...
QEMU Denial of Service Vulnerability (CNVD-2021-39039)
QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. A security vulnerability exists in QEMU. The vulnerability stems from a memory leak in vhost-user-gpu/vhost-user-gpu.c. The vulnerability is...
FFmpeg heap buffer overflow vulnerability (CNVD-2021-42344)
FFmpeg is a complete solution for recording, converting and streaming audio and video. A heap buffer overflow vulnerability exists in filterintra in libavfilter/vfbwdif.c in FFmpeg. An attacker can exploit this vulnerability to cause memory corruption...
FFmpeg Denial of Service Vulnerability (CNVD-2021-42349)
FFmpeg is a complete solution for recording, converting and streaming audio and video. A security vulnerability exists in FFmpeg due to a memory leak in the avbuffersrcaddframeflags function in buffersrc. An attacker could exploit this vulnerability to cause a denial of service...
FFmpeg heap buffer overflow vulnerability (CNVD-2021-39766)
FFmpeg is a complete solution for recording, converting and streaming audio and video. A heap buffer overflow vulnerability exists in gaussianblur in libavfilter/vfedgedetect.c in FFmpeg version 4.2. An attacker can exploit this vulnerability to cause memory corruption...
FFmpeg heap buffer overflow vulnerability (CNVD-2021-39764)
FFmpeg is a complete solution for recording, converting and streaming audio and video. A heap buffer overflow vulnerability exists in filterframe in libavfilter/vfbitplanenoise.c in FFmpeg version 4.2. An attacker could exploit this vulnerability to cause memory corruption...
MikroTik RouterOS Memory Corruption Vulnerability (CNVD-2021-49777)
MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS has a memory corruption vulnerability in the logging process. An authenticated, remote attacker...
MikroTik RouterOS memory corruption vulnerability (CNVD-2021-49779)
MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS has a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated, remote...
Linux kernel competitive conditions issue vulnerability (CNVD-2021-37740)
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a Competitive Condition Issue vulnerability that stems from the sctpdestroysock function causing memory corruption, which triggers a denial of service...
FreeBSD : PostgreSQL -- Memory disclosure in partitioned-table UPDATE ... RETURNING (76e0bb86-b4cb-11eb-b9c9-6cc21735f730)
The PostgreSQL project reports : Using an UPDATE ... RETURNING on a purpose-crafted partitioned table, an attacker can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can create prerequisite objects and complete this attack at will. A user...
Vulnerability in core server (CVE-2021-32028)
Memory disclosure in INSERT ... ON CONFLICT ... DO UPDATE Using an INSERT ... ON CONFLICT ... DO UPDATE command on a purpose-crafted table, an attacker can read arbitrary bytes of server memory. In the default configuration, any authenticated database user can create prerequisite objects and...
PT-2021-2780 · Cscape · Cscape
Name of the Vulnerable Software and Affected Versions: Cscape versions prior to 9.90 SP4 Description: The issue is related to insufficient validation of user-supplied data when parsing project files, potentially leading to memory corruption. This could allow an attacker to execute code in the...
Out-of-bounds Write in Chakra
Chakra Scripting Engine Memory Corruption Vulnerability...
CVE-2020-36312
An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvmmain.c has a kvmiobusunregisterdev memory leak upon a kmalloc failure, aka CID-f65886606c2d...
QEMU Buffer Overflow Vulnerability (CNVD-2021-26375)
QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from a buffer overflow vulnerability that can be exploited by an attacker to trigger a memory corruption, which triggers a denial ...
Remote Code Execution (RCE)
firefox is vulnerable to remote code execution. The vulnerability exists due to memory corruption...
Wireshark Memory Disclosure Vulnerability (CNVD-2021-11318)
Wireshark is a network packet analyzer. Wireshark is a network packet analyzer that captures network packets and displays the most detailed packet information possible.Wireshark uses WinPCAP as an interface to exchange data packets directly with the network card. A memory leak vulnerability exist...
