hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)

A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)

A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

VulnCheck KEV: CVE-2022-30333

RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract unpack operation...

[SECURITY] [DLA 3068-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3068-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 04, 2022 https://wiki.debian.org/LTS -...

vim: out-of-bounds write in vim_regsub_both() in regexp.c

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to an out-of-bounds write vulnerability in the vimregsubboth function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution...

UNISOC Chipsets 竞争条件问题漏洞

UNISOC Chipsets are chipsets from China's Purple Spreadtrum UNISOC. A security vulnerability exists in some UNISOC products, where out-of-bounds writes may exist in Bluetooth services due to competitive conditions. The following products are affected:...

MediaTek mailbox 安全漏洞

MediaTek mailbox is a mailbox controller from MediaTek, a Chinese company. A security vulnerability exists in MediaTek mailbox that stems from a lack of boundary checking, which may allow out-of-bounds writes. This could result in a local privilege escalation that requires system execution...

MediaTek camera isp 缓冲区错误漏洞

MediaTek camera isp is an image signal processor from MediaTek, a Chinese company. MediaTek camera isp suffers from a buffer error vulnerability that stems from a lack of boundary checking, which could result in out-of-bounds writes. This could result in a local privilege escalation that requires...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips that stems from type confusion and may result in out-of-bounds writes. This could result in a local privilege escalation that requires system execution privileges...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek. A buffer error vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking that could allow out-of-bounds writes. This could result in a local privilege escalation that requires syste...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in the MediaTek chips, which stems from a lack of bounds checking in camera isp, leading to out-of-bounds writes. An attacker could exploit this vulnerability to elevate privileges...

MediaTek mailbox 缓冲区错误漏洞

MediaTek mailbox is a mailbox controller from MediaTek, a Chinese company. A buffer error vulnerability exists in MediaTek mailbox that stems from a lack of boundary checking, which could allow out-of-bounds writes. This could result in a local privilege escalation that requires system execution...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek. A buffer error vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking and may result in out-of-bounds writes. This could result in a local privilege escalation that requires syst...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2022-2162)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Veritas NetBackup 安全漏洞

Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports the detection of ransomware and backup protection of environmental data such as metadata and virtual environments. A security...

grub2: Integer underflow in grub_net_recv_ip4_packets

A flaw was found in grub2 when handling IPv4 packets. This flaw allows an attacker to craft a malicious packet, triggering an integer underflow in grub code. Consequently, the memory allocation for handling the packet data may be smaller than the size needed. This issue causes an out-of-bands wri...

PT-2025-26012

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the block layer and the blk-rq-qos framework. The issue occurs when the io.cost.qos file is written by two CPUs...

Vulnerability Spotlight: Issue in Accusoft ImageGear could lead to memory corruption, code execution

Emmanuel Tacheau of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. Cisco Talos recently discovered a use-after-free vulnerability in Accusoft ImageGear's PSD header processing function. The ImageGear library is a document-imaging developer toolkit that allows users to create,...

Out-of-bounds Writes

vim is vulnerable to out-of-bounds writes. The vulnerability allows an attacker to cause a memory corruption which then may lead to denial of service...

CVE-2022-30243

Honeywell Alerton Visual Logic through 2022-05-04 allows unauthenticated programming writes from remote users. This enables code to be stored on the controller and then run without verification. A user with malicious intent can send a crafted packet to change and/or stop the program without the...