Archive
3 May 2022
Vulnerabilities first published on this day (UTC), newest first.
109 results · Feed
-
High 7.3
ARM mbed-ualloc memory library Integer Overflow or Wraparound
ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.
-
High 7.3
TencentOS-tiny Integer Overflow or Wraparound
TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tos_mmheap_alloc incorrect calculation of effective memory allocation size. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavio…
-
High 7.3
NXP MQX Integer Overflow or Wraparound
NXP MQX Versions 5.1 and prior are vulnerable to integer overflow in mem_alloc, _lwmem_alloc and _partition functions. This unverified memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code…
-
High 7.3
NXP MCUXpresso SDK Integer Overflow or Wraparound
NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations outside the bounds of a specified array, leading to unexpected behavior such segmentation fault when assigning a…
-
Unscored —CVE-2022-27413 Public exploit
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the adminname parameter in …
-
High 7.3
ARM CMSIS RTOS2 Integer Overflow or Wraparound
ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to integer wrap-around inosRtxMemoryAlloc (local malloc equivalent) function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or injected code execution.
-
High 7.3
ARM mbed Integer Overflow or Wraparound
ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in malloc_wrapper function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.
-
High 7.3
Cesanta Software Mongoose-OS Integer Overflow or Wraparound
Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.
-
High 7.3
uClibc-ng Integer Overflow or Wraparound
uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.
-
Medium 6.5
Micrium OS Integer Overflow or Wraparound
Micrium OS Versions 5.10.1 and prior are vulnerable to integer wrap-around in functions Mem_DynPoolCreate, Mem_DynPoolCreateHW and Mem_PoolCreate. This unverified memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such…
-
Medium 4.6
eCosCentric eCosPro RTOS Integer Overflow or Wraparound
eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc (an implementation of malloc). The unverified memory assignment can lead to arbitrary memory allocation, resulting in a heap-based buffer overflow.
-
High 7.3
RIOT OS Integer Overflow or Wraparound
RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.
-
Low 3.7
Playbook members are allowed to escalate their membership privileges and perform actions restricted to playbook admins.
Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook members to escalate their membership privileges and perform actions restricted to playbook admins.
-
Unscored —
In ion, there is a possible use after free due to an integer overflow. This could lead to local escalation of privilege…
-
Unscored —
In ion, there is a possible use after free due to incorrect error handling. This could lead to local escalation of priv…
-
Unscored —
In voice service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to loca…
-
Unscored —
In subtitle service, there is a possible application crash due to an integer overflow. This could lead to local denial …
-
Unscored —
In MM service, there is a possible out of bounds write due to a heap-based buffer overflow. This could lead to local es…
-
Unscored —
In MM service, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local e…
-
Unscored —
In aee daemon, there is a possible information disclosure due to improper access control. This could lead to local info…
-
Unscored —
In aee daemon, there is a possible information disclosure due to symbolic link following. This could lead to local info…
-
Unscored —
In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local i…
-
Unscored —
In aee daemon, there is a possible information disclosure due to a path traversal. This could lead to local information…
-
Unscored —
A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_product of E-Commerce Website v1.0 allows att…
-
Unscored —
In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local i…
-
Unscored —
In aee daemon, there is a possible out of bounds write due to improper input validation. This could lead to local escal…
-
Unscored —
In aee daemon, there is a possible information disclosure due to a missing permission check. This could lead to local i…
-
Unscored —
In aee daemon, there is a possible information disclosure due to a race condition. This could lead to local information…
-
Unscored —
In camera, there is a possible information disclosure due to uninitialized data. This could lead to local information d…
-
Unscored —
In imgsensor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Unscored —
In imgsensor, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escala…
-
Unscored —
In telephony, there is a possible way to disable receiving SMS messages due to a missing permission check. This could l…
-
Unscored —
In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa…
-
Unscored —
In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privi…
-
Unscored —
In aee driver, there is a possible use after free due to a race condition. This could lead to local escalation of privi…
-
Unscored —
In aee driver, there is a possible memory corruption due to active debug code. This could lead to local escalation of p…
-
Unscored —
In aee driver, there is a possible reference count mistake due to incorrect error handling. This could lead to local es…
-
Unscored —
In ccu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
High 7.5
Arbitrary file deletion in gitea
An arbitrary file deletion vulnerability in Gitea v1.16.3 allows attackers to cause a Denial of Service (DoS) via deleting the configuration file.
-
Unscored —
In netdiag, there is a possible symbolic link following due to an improper link resolution. This could lead to local es…