CVE-2022-38216

An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Image and allows for out of bounds...

CVE-2022-38216

An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Image and allows for out of bounds...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2022:2809-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2809-1 advisory. The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixe...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in the Google Android Bluetooth component, which stems from an incorrect boundary check and may result in out-of-bounds writes...

Google Chrome OS 缓冲区错误漏洞

Google Chrome OS is a lightweight, web-based, open-source operating system from Google, Inc. A security vulnerability exists in Google Chrome OS versions prior to 102.0.5005.125, which stems from out-of-bounds writes...

Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2022-58464)

Adobe Acrobat Reader is a PDF viewer from Adobe. The software is used to print, sign, and annotate PDFs. Adobe Acrobat Reader is vulnerable to a buffer overflow vulnerability that originates from out-of-bounds writes. An attacker could exploit this vulnerability to execute arbitrary code...

Google Android 竞争条件问题漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. Google Android the Audio HAL component is vulnerable to a Competitive Condition Issue vulnerability that stems from a competitive condition and may be open to out-of-bounds writes...

USN-5564-1 linux-intel-iotg vulnerabilities

Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service system crash or execute arbitrary code...

Intel PROSet/Wireless WiFi Software 缓冲区错误漏洞

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel Corporation USA. A security vulnerability exists in Intel PROSet/Wireless WiFi Software, which originates from out-of-bounds writes...

hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)

A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)

A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...

VulnCheck KEV: CVE-2022-30333

RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract unpack operation...

[SECURITY] [DLA 3068-1] xorg-server security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3068-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort August 04, 2022 https://wiki.debian.org/LTS -...

vim: out-of-bounds write in vim_regsub_both() in regexp.c

A flaw was found in vim. The vulnerability occurs due to Illegal memory access and leads to an out-of-bounds write vulnerability in the vimregsubboth function. This flaw allows an attacker to input a specially crafted file, leading to a crash or code execution...

UNISOC Chipsets 竞争条件问题漏洞

UNISOC Chipsets are chipsets from China's Purple Spreadtrum UNISOC. A security vulnerability exists in some UNISOC products, where out-of-bounds writes may exist in Bluetooth services due to competitive conditions. The following products are affected:...

MediaTek mailbox 安全漏洞

MediaTek mailbox is a mailbox controller from MediaTek, a Chinese company. A security vulnerability exists in MediaTek mailbox that stems from a lack of boundary checking, which may allow out-of-bounds writes. This could result in a local privilege escalation that requires system execution...

MediaTek mailbox 缓冲区错误漏洞

MediaTek mailbox is a mailbox controller from MediaTek, a Chinese company. A buffer error vulnerability exists in MediaTek mailbox that stems from a lack of boundary checking, which could allow out-of-bounds writes. This could result in a local privilege escalation that requires system execution...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek. A buffer error vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking that could allow out-of-bounds writes. This could result in a local privilege escalation that requires syste...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek. A buffer error vulnerability exists in the MediaTek chips, which stems from a lack of boundary checking and may result in out-of-bounds writes. This could result in a local privilege escalation that requires syst...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in the MediaTek chips that stems from type confusion and may result in out-of-bounds writes. This could result in a local privilege escalation that requires system execution privileges...