CADRA Node.js zlib DoS

The vulnerability of the zlib module in CADRA’s Node.js software lies in insufficient validation of input data during the processing of the windowBits parameter. Exploiting this vulnerability could allow an attacker to cause service failures...

Linux SPI Device Driver Use-After-Free

The vulnerability of the ep93xxspisetupdma function in the drivers/spi/spi-ep93xx.c file of the Linux operating system’s SPI device driver is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...

adm1266_nvmem_read_blackbox Heap Buffer Overflow DoS

The vulnerability of the adm1266nvmemreadblackbox function in the drivers/hwmon/pmbus/adm1266.c driver for monitoring hardware in the Linux operating system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

SolarWinds Serv-U Authentication Bypass Code Execution

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled password. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code as the root user...

Linux kernel NS Function Use-After-Free

The vulnerability of the NS function in the drivers/iommu/genericpt/iommupt.h header of the Linux kernel is related to improper security checks for standard elements. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of protected information...

SolarWinds Serv-U Authentication Bypass Privilege Escalation

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to the bypassing of authentication using a user-controlled key. Exploiting this vulnerability allows an intruder to enhance their privileges and gain unauthorized access to protected...

Linux IPv6 Kernel Heap Buffer Overflow DoS

The vulnerability of the ip6parsetlv function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

SolarWinds Serv-U Privilege Escalation Command Execution

The vulnerability of the software for secure file sharing and transmission of SolarWinds Serv-U is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute code under the identity of “root”...

ISO9660 driver libfsimage Privilege Escalation

The vulnerability of the ISO9660 driver of the libfsimage library in Xen relates to numerical overflow. Exploiting this vulnerability can allow attackers to enhance their privileges...

RoundCube Webmail DoS

The vulnerability of the RoundCube Webmail email client is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

RoundCube SSRF

The vulnerability of the RoundCube Webmail email client is related to insufficient validation of requests at the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

Linux USB Device Driver Interrupt DoS

The vulnerability of the usbtmc Interrupt function in the drivers/usb/class/usbtmc.c module of the Linux USB device driver framework is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux net/sched/sch_sfb Heap Buffer Overflow DoS

The vulnerability of the sfbdequeue function in the net/sched/schsfb.c module of the Linux operating system’s network/scheduling subsystem is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Linux TCM Driver chap_server_compute_hash() Heap Buffer Overflow

The vulnerability of the chapservercomputehash function in the drivers/target/iscsi/iscsitargetauth.c module of the Linux kernel’s TCM driver is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise the...

Linux kernel iptfs function Data Compromise

The vulnerability of the iptfsinitstate function in the net/xfrm/xfrmiptfs.c module, which implements networking functions in the Linux kernel, is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...

AMD GPU VCN Buffer Overflow

The vulnerability of the vcnv25decringsetwptr function in the drivers/gpu/drm/amd/amdgpu/vcnv25.c driver for AMD GPU cores in Linux operating systems is related to improper checking of the specified data type. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

mac80211 Stack Heap Buffer Overflow

The vulnerability of the ieee80211parsetxradiotap function in the net/mac80211/tx.c module of the mac80211 stack implementation in the Linux operating system is related to an incorrect bitwise shift of a integer value. Exploiting this vulnerability could allow an attacker to compromise the...

Linux Kernel DoS

The vulnerability of the function batadvblasendclaim in the net/batman-adv/bridgeloopavoidance.c module, which is part of the network functions of the Linux operating system’s kernel, relates to the assignment of pointers. Exploiting this vulnerability could allow a malicious actor to cause servi...

SMC Protocol Heap Buffer Overflow DoS

The vulnerability of the smcv2determineacceptedchid function in the net/smc/afsmc.c module of the SMC protocol family in the Linux operating system’s kernel is related to the use of pointers. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux kernel LSM Buffer Overflow DoS

The vulnerability of the lsmnametoattr function in the security/lsmsyscalls.c module of the Linux kernel’s security subsystem is related to the blocking mechanism with unlimited external access. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity ...

Linux I2C Driver stub_xfer() Heap Buffer Overflow

The vulnerability of the stubxfer function in the drivers/i2c/i2c-stub.c file of the Linux I2C driver kernel relates to the issue of operations going beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility...

cypress_generic_port_probe Heap Buffer Overflow DoS

The vulnerability of the cypressgenericportprobe function in the drivers/usb/serial/cypressm8.c driver for Linux USB device drivers is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Linux USB Device Driver Heap Buffer Overflow DoS

The vulnerability of the digiportinit function in the drivers/usb/serial/digiacceleport.c module of the Linux device driver framework is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Online Store Authentication Bypass Privilege Escalation

The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

Microchip SAMA5D4 Voltage Spike Code Execution

The vulnerability of the Microchip SAMA5D4 microcontroller is related to improper protection against voltage spikes and clock frequency fluctuations. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Linux kernel Thunderbolt DoS

The vulnerability of the tbpropertyparsedir function in the drivers/thunderbolt/property.c module of the general support for USB4 and Thunderbolt driver in the Linux kernel is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an...

kvm_arch_vcpu_create Heap Buffer Overflow DoS

The vulnerability of the kvmarchvcpucreate function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the ARM 64-bit kernel-based Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allo...

Linux Network Device Driver Heap Buffer Overflow DoS

The vulnerability of the ipcimeminit function in the drivers/net/wwan/iosm/iosmipcimem.c file of the Linux kernel’s network device driver module is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an attacker to cause servi...

Linux Btrfs DoS

The vulnerability of the doTraceBtrfsSyncFile function in the include/trace/events/btrfs.h header of the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Direct Rendering Infrastructure GPU Adreno a6xx_gpu_init Heap Buffer Overflow

The vulnerability of the a6xxgpuinit function in the drivers/gpu/drm/msm/adreno/a6xxgpu.c file of the Direct Rendering Infrastructure DRI driver module in the Linux operating system is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to...

Windows ALPC Privilege Escalation

The vulnerability of the Advanced Local Procedure Call ALPC in Windows operating systems is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

Windows Update Stack Privilege Escalation

The vulnerability of the Windows Update Stack component in Windows operating systems is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...

Linux IIO ADC mt6358_read_imp() Unprotected Information Disclosure

The vulnerability of the mt6358readimp function in the drivers/iio/adc/mt6359-auxadc.c file of various types of built-in sensors in the Linux operating system is related to the use of an uninitialized variable. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

uniwill-acpi.c Heap Buffer Overflow DoS

The vulnerability of the uniwillinit function in the drivers/platform/x86/uniwill/uniwill-acp.c driver for X86 devices in the Linux operating system is related to improper energy consumption restrictions. Exploiting this vulnerability could allow an attacker to cause a service failure...

st_lsm6dsx_read_tagged_fifo Heap Buffer Overflow DoS

The vulnerability of the stlsm6dsxreadtaggedfifo function in the drivers/iio/imu/stlsm6dsx/stlsm6dsxbuffer.c module of the Linux kernel is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

acpi_button_remove() Function Heap Buffer Overflow DoS

The vulnerability of the acpibuttonremove function in the drivers/acpi/button.c driver of the Linux ACPI configuration and power management extension framework is related to the re-release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise the...

Linux SPI Device Driver Heap Buffer Overflow DoS

The vulnerability of the sprdspiprobe function in the drivers/spi/spi-sprd.c file of the Linux kernel’s SPI device driver relates to pointer aliasing. Exploiting this vulnerability could allow an attacker to cause a system failure...

Linux kernel net/batman-adv/tp_meter Heap Buffer Overflow DoS

The vulnerability of the batadvtpsendercleanup function in the net/batman-adv/tpmeter.c module, which is part of the Linux kernel’s networking functions, is related to situations where there is a race condition in the signal handler. Exploiting this vulnerability could allow an attacker to...

Direct Rendering Infrastructure DRM Buffer Overflow DoS

The vulnerability of the drmgemchangehandleioctl function in the drivers/gpu/drm/drmgem.c module of the Direct Rendering Infrastructure DRI driver for the Linux operating system is related to the race condition that occurs when a shared resource is used. Exploiting this vulnerability could allow ...

Direct Rendering IOMMU Use-After-Free

The vulnerability of the msmiommumap function in the drivers/gpu/drm/msm/msmiommu.c file of the Direct Rendering Infrastructure DRI driver in the Linux operating system is related to incorrect checking of the returned value from this function. Exploiting this vulnerability could allow an attacker...

Linux kernel net_devmem_bind_dmabuf Buffer Overflow DoS

The vulnerability of the netdevmembinddmabuf function in the net/core/devmem.c module, which is part of Linux’s kernel-based networking functions, relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the...

amdgpu_vce_cs_reloc Heap Buffer Overflow DoS

The vulnerability of the amdgpuvcecsreloc function in the drivers/gpu/drm/amd/amdgpu/amdgpuvce.c driver of the Direct Rendering Infrastructure DRI AMD GPU kernel for the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability...

Linux SCTP Heap Buffer Overflow DoS

The vulnerability of the sctpwaitforconnect function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to the lack of measures taken to neutralize numerous internal special elements. Exploiting this vulnerability can allow an attacker to...

AMD GPU VCN Ring Buffer Overflow

The vulnerability of the vcnv30ringpatchcsinplace function in the drivers/gpu/drm/amd/amdgpu/vcnv30.c driver for the Direct Rendering Infrastructure DRI of AMD GPU cores in the Linux operating system is related to improper checking of the specified data type. Exploiting this vulnerability may all...

adm1266 gpio_get_multiple() function Heap Buffer Overflow

The vulnerability of the adm1266 gpiogetmultiple function in the drivers/hwmon/pmbus/adm1266.c file of the device monitoring driver for the Linux operating system is related to the execution of operations outside of the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

Linux kernel Rocket IOCTL Use-After-Free

The vulnerability of the rocketioctlcreatebo function in the drivers/accel/rocket/rocketgem.c module of the Linux kernel’s acceleration device driver lies in the dereferencing of a pointer with an expired lifetime. Exploiting this vulnerability could allow an attacker to compromise the...

Linux IPv4 sysctl Buffer Overflow DoS

The vulnerability of the ipv4sysctlexitnet function in the net/ipv4/sysctlnetipv4.c module of the IPv4 protocol implementation in Linux’s kernel relates to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability could allow an attacker to compromise the...

Linux L2TP Buffer Overflow DoS

The vulnerability of the l2tpsessiongetbyifname function in the net/l2tp/l2tpcore.c module of the Linux operating system’s L2TP tunneling protocol kernel is related to errors during link counter updates. Exploiting this vulnerability can allow an attacker to compromise the confidentiality,...

Linux Frame Buffer Driver Heap Buffer Overflow DoS

The vulnerability of the oppfbmmap function in the drivers/video/fbdev/omap2/omapfb/omapfb-main.c driver for kernel video devices in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to...

BPF_CALL_4() Kernel Buffer Overflow DoS

The vulnerability of the BPFCALL4 function in the net/core/filter.c module related to the execution of kernel network functions in Linux operating systems involves a pointer shift beyond the allocated memory range. Exploiting this vulnerability could allow an attacker to compromise the...