CVE Vulnerability Catalog

In Nimbus JOSE+JWT before version 4.39, there is no integer-overflow check when converting length values from bytes to bits. This allows attackers to conduct HMAC bypass attacks by shifting Additional Authenticated Data (AAD) and ciphertext, resulting in different plaintext for the same HMAC.

The sanity_check_ckpt function in the Linux kernel before version 4.12.4 does not validate the blkoff and segno arrays, allowing local users to gain privileges via unspecified vectors.

The sanity_check_raw_super function in the Linux kernel before version 4.11.1 does not validate the segment count, allowing local users to gain privileges via unspecified vectors.

A race condition in the Linux kernel before version 4.10.15 in fs/timerfd.c allows local users to gain privileges or cause a denial of service through simultaneous file-descriptor operations.

A stack-based buffer overflow in ALZip 8.51 and earlier allows remote attackers to execute arbitrary code via a crafted MS-DOS device file, such as using 'AUX' as the initial substring of a filename.

There is a stack consumption issue in LibSass 3.4.5 that is triggered in the function Sass::Eval::operator() in eval.cpp. It will lead to a remote denial of service attack.

There is an illegal address access in Sass::Eval::operator() in eval.cpp of LibSass 3.4.5, leading to a remote denial of service attack.

LibSass version 3.4.5 has memory leaks triggered by deeply nested code, such as code with a long sequence of open parenthesis characters, leading to a remote denial of service attack.

In the libpspp library in GNU PSPP before version 1.0.1, there is an assertion abort in the function parse_attributes() that can lead to remote denial of service.

In the libpspp library in GNU PSPP before version 1.0.1, there is a reachable assertion abort in the function dict_rename_var() that can lead to remote denial of service.

There is a reachable assertion abort in the function dict_add_mrset() in the libpspp library in GNU PSPP before version 1.0.1 that can lead to a remote denial of service attack.

There is an illegal address access in the function output_hex() in the libpspp library in GNU PSPP before version 1.0.1 that may lead to remote denial of service.

There is a heap-based buffer overflow in Exiv2 version 0.26 in basicio.cpp. The vulnerability causes an out-of-bounds write in Exiv2::Image::printIFDStructure(), which may lead to remote denial of service or possibly unspecified other impact.

All Qualcomm products with Android releases from CAF using the Linux kernel have a race condition in a WLAN driver that can lead to a Use After Free condition.

All Qualcomm products with Android releases from CAF using the Linux kernel have a race condition in a USB driver that can lead to a Use After Free condition.

In Qualcomm products with Android releases from CAF, if a pointer argument coming from userspace is invalid, a driver may use an uninitialized structure to log an error message.

All Qualcomm products with Android releases from CAF using the Linux kernel may leak kernel memory contents to system logs if a userspace string is not NULL-terminated.

All Qualcomm products with Android releases from CAF using the Linux kernel may be vulnerable to memory corruption in a video driver due to lack of bounds checking in memcpy().

A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems versions earlier than 1.82.0.17. An attacker with local privileges could execute code with administrative privileges via an unquoted service path.

Multiple untrusted search path vulnerabilities in the installer of Synology Assistant before version 6.1-15163 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks using malicious files.