Dotkliwość: Średnia

Uncontrolled resource consumption for some Gaudi software before version 1.21.0 within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially occur…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow a denial of service. System software adversary with an authenticated user combined with a low complexity attack may enable denial of service. This result may potentially…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

Nieprawidłowe przechowywanie haseł w Medtronic MyCareLink umożliwia modyfikację danych.

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

libtta through 2.3 contains a divide-by-zero vulnerability in tta_decoder_init_get_info() that allows attackers to crash applications by supplying an unvalidated zero sample rate. Attackers can craft a .tta file with a recomputed header CRC32 that triggers SIGFPE, crashing applications including…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

smpeg through 2.0.0 contains a heap out-of-bounds read vulnerability in MPEGsystem::FillBuffer() that allows attackers to read past the 16384-byte buffer by supplying a crafted system header stream table. Attackers can provide an MPEG file whose stream table bytes all set the high bit, which…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

smpeg through 2.0.0 contains an integer underflow vulnerability in stream_header() in MPEGsystem.cpp that allows attackers to wrap packet_size by declaring an undersized packet length. Attackers can supply a crafted MPEG file opened via SMPEG_new, SMPEG_new_rwops or SMPEG_new_data to trigger a…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

LibRaw through 0.22.2 contains a heap-based out-of-bounds read in LibRaw::parseNikonMakernote() that allows attackers to read past a short ShotInfo buffer. Attackers can supply a crafted Nikon NEF/TIFF with a 5-byte ShotInfo tag declaring version 243 to crash applications decoding the image.

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

libmodplug through 0.8.9.1 contains a heap-based out-of-bounds read vulnerability in CSoundFile::ReadAMS2() in src/load_ams.cpp that allows attackers to read adjacent heap memory via crafted AMS files. Attackers can supply an AMS module whose pattern effect bytes keep bit 7 set, driving the…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

libmikmod through 3.3.15 contains a global out-of-bounds read vulnerability in the MultiTracker loader MTM_Load() because the module channel count is never clamped. Attackers can supply a crafted .mtm file with a channel count above 32 to read past the static pat array, corrupting track indices…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

Game Music Emu (libgme) through 0.6.5 contains a global out-of-bounds read vulnerability in Classic_Emu::mute_voices_ that allows attackers to crash applications by supplying NSF files whose voice count exceeds the 16-entry voice-type table. Attackers can craft an NSF header with chip_flags 0x3F,…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

EarthScope libmseed through 3.5.4 contains a heap out-of-bounds read vulnerability in ms3_detect() in parseutils.c that reads past truncated miniSEED 2 record buffers. Attackers can supply a 40 to 47 byte buffer passing MS2_ISVALIDHEADER to msr3_parse() or ms3_detect(), over-reading up to 8 bytes…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

libsidplayfp through 3.1.1 contains a heap out-of-bounds read vulnerability that allows attackers to crash applications by supplying a PSID/RSID file with an unchecked data offset. Attackers can set the header data offset beyond the file size, wrapping the length calculation so resolveAddrs()…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

ValleyBell libvgm through commit a6eed945 contains a heap out-of-bounds read vulnerability in the PCM data-block decompressor caused by an unbounded compression-table index. Attackers can supply a crafted .vgm file with a small type 0x7F table and wider compressed values, causing DecompressDataBlk…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

Game Music Emu (libgme) through 0.6.5 contains a heap out-of-bounds read vulnerability in the AY loader get_data function caused by an integer underflow in the track-table bounds check. Attackers can supply a crafted ZXAYEMUL file with an oversized track table to read past the file buffer via…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory. Attackers can craft an end-of-central-directory record placing the first entry near the buffer end, causing…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

Ansilove libansilove through 1.4.2 contains an out-of-bounds read vulnerability in ansilove_xbin() in src/loaders/xbin.c that lacks bounds checks for compressed run-length records. Attackers can supply a crafted compressed XBIN file ending in a control byte such as 0x7F to read past the input…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

NetSurf libnsbmp through 0.1.7 contains an out-of-bounds read vulnerability in bmp_decode_rle8() and bmp_decode_rle4() because absolute-run bound checks omit the word-alignment pad byte. Attackers can supply a crafted RLE8 or RLE4 BMP ending on an odd-length absolute run to cause a one-byte heap…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before note_table by supplying a negative note index. Attackers can craft an XSM file with the ofTAZ! signature and a song byte of 0x80 or higher, causing a global-buffer-overflow read…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

AdPlug through 2.4 contains a heap out-of-bounds read vulnerability in CdmoLoader::load() in src/dmo.cpp that allows attackers to read past a heap allocation by supplying a truncated TwinTeam DMO file. Attackers can supply a 12- or 13-byte file passing dmo_unpacker::decrypt(), opened via…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

Nieprawidłowa walidacja certyfikatów w Dell OpenManage umożliwia ujawnienie i manipulację danymi.

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

Missing authorization in Caliptra Core Runtime Firmware (INVOKE_DPE_MLDSA87, CM_AES_GCM_DECRYPT_DMA, EXTERNAL_MAILBOX_CMD commands) in subsystem mode allows a privileged local attacker to cause a denial of service via mailbox commands containing unverified AXI addresses. The security impact beyond…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

Luka w zarządzaniu sesjami w Pinpoint umożliwia przejęcie tokena sesji przez atakujących.

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

Wstrzyknięcie poleceń w ustawieniach profilu VPN umożliwia wykonanie złośliwego kodu.

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

Błąd odczytu poza zakresem w sterowniku morse.ko pozwala na ujawnienie pamięci jądra.

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki

libmikmod before 3.3.14 contains a heap out-of-bounds read vulnerability in the Impulse Tracker loader load_it.c that allows attackers to read adjacent heap memory via oversized patterns. Attackers can supply a crafted IT module with more than 200 pattern rows, causing IT_ConvertTrack() to read…

CVSS 6,8 · EPSS 0,13 % · rekomendacja wg zapisanej polityki