24590 matches found
Arbitrary writes via tarfile realpath overflow
...
The C++ method SignTraits::DeriveBits() may incorrectly call ThrowException() based on user-supplied inputs when executing in a background thread, crashing the Node.js process. Such cryptographic operations are commonly applied to untrusted inputs. Thus, this mechanism potentially allows an adversary to remotely crash a Node.js runtime.
...
drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1
...
Redis allows out of bounds writes in hyperloglog commands leading to RCE
...
Nbdkit: nbdkit-server: off-by-one error when processing block status may lead to a denial of service
...
wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
...
Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file
...
A buffer overflow in Wireshark before 4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components. NOTE: this is disputed by the vendor because neither release 4.2.0 nor any other release was affected.
...
Mismatched Memory Management Routines in editcap
...
ksmbd: validate zero num_subauth before sub_auth is accessed
...
memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
...
MariaDB Server 10.10 through 10.11.* and 11.0 through 11.4.* crashes in JOIN::fix_all_splittings_in_plan.
...
BCryptGenerateSymmetricKey memory leak
...
Ansible-core: exposure of sensitive information in ansible vault files due to improper logging
...
Expired Pointer Dereference in Wireshark
...
fs/jfs: Prevent integer overflow in AG size calculation
...
cifs: avoid NULL pointer dereference in dbg call
...
PCI: Fix reference leak in pci_register_host_bridge()
...
ksmbd: Fix UAF in __close_file_table_ids
...
wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process
...
Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
...
pds_core: make wait_context part of q_info
...
net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported
...
drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
...
vxlan: vnifilter: Fix unlocked deletion of default FDB entry
...
s390/sclp: Add check for get_zeroed_page()
...
misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
...
tracing: Fix oob write in trace_seq_to_buffer()
...
net_sched: drr: Fix double list add in class with netem as child qdisc
...
KVM: x86: Reset IRTE to host control if *new* route isn't postable
...
bpf: Fix deadlock between rcu_tasks_trace and event_mutex.
...
media: venus: hfi_parser: refactor hfi packet parsing logic
...
ext4: fix off-by-one error in do_split
...
mptcp: fix NULL pointer in can_accept_new_subflow
...
fs/ntfs3: Prevent integer overflow in hdr_first_de()
...
net: mvpp2: Prevent parser TCAM memory corruption
...
net: fix geneve_opt length integer overflow
...
perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
...
backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
...
x86/mce: use is_copy_from_user() to determine copy-from-user context
...
LoongArch: Return NULL from huge_pte_offset() for invalid PMD
...
i2c: cros-ec-tunnel: defer probe if parent EC is not present
...
net: libwx: handle page_pool_dev_alloc_pages error
...
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Wireshark
...
Mismatched Memory Management Routines in Wireshark
...
NULL Pointer Dereference in Wireshark
...
Memory Allocation with Excessive Size Value in Wireshark
...
wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi
...