CWE-763 Archives - CVE Vulnerability

CVE-2007-4367

Sun, 26 Feb 2023 09:07:11 +0000

Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a “virtual function call on an invalid pointer.”

The post CVE-2007-4367 appeared first on CVE Vulnerability.

CVE-2018-9557

Sun, 26 Feb 2023 06:51:50 +0000

In really_install_package of install.cpp, there is a possible free of arbitrary memory due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2. Android ID: A-35385357.

The post CVE-2018-9557 appeared first on CVE Vulnerability.

CVE-2018-6836

Sun, 26 Feb 2023 06:50:50 +0000

The netmonrec_comment_destroy function in wiretap/netmon.c in Wireshark through 2.4.4 performs a free operation on an uninitialized memory address, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact.

The post CVE-2018-6836 appeared first on CVE Vulnerability.

CVE-2020-9098

Sun, 26 Feb 2023 06:43:38 +0000

Huawei OceanStor 5310 product with version of V500R007C60SPC100 has an invalid pointer access vulnerability. The software system access an invalid pointer when attacker malformed packet. Due to the insufficient validation of some parameter, successful exploit could cause device reboot.

The post CVE-2020-9098 appeared first on CVE Vulnerability.

CVE-2020-8715

Sun, 26 Feb 2023 06:43:30 +0000

Invalid pointer for some Intel(R) Server Boards, Server Systems and Compute Modules before version 1.59 may allow an unauthenticated user to potentially enable denial of service via local access.

The post CVE-2020-8715 appeared first on CVE Vulnerability.

CVE-2020-5972

Sun, 26 Feb 2023 06:42:32 +0000

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which local pointer variables are not initialized and may be freed later, which may lead to tampering or denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).

The post CVE-2020-5972 appeared first on CVE Vulnerability.

CVE-2020-5139

Sun, 26 Feb 2023 06:42:13 +0000

A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS) due to the release of Invalid pointer and leads to a firewall crash. This vulnerability affected SonicOS Gen 5 version 5.9.1.7, 5.9.1.13, Gen 6 version 6.5.4.7, 6.5.1.12, 6.0.5.3, SonicOSv 6.5.4.v and Gen 7 version SonicOS 7.0.0.0.

The post CVE-2020-5139 appeared first on CVE Vulnerability.

CVE-2020-36404

Sun, 26 Feb 2023 06:41:38 +0000

Keystone Engine 0.9.2 has an invalid free in llvm_ks::SmallVectorImpl::~SmallVectorImpl.

The post CVE-2020-36404 appeared first on CVE Vulnerability.

CVE-2020-36224

Sun, 26 Feb 2023 06:41:34 +0000

A flaw was discovered in OpenLDAP before 2.4.57 leading to an invalid pointer free and slapd crash in the saslAuthzTo processing, resulting in denial of service.

The post CVE-2020-36224 appeared first on CVE Vulnerability.

CVE-2020-28941

Sun, 26 Feb 2023 06:40:48 +0000

An issue was discovered in drivers/accessibility/speakup/spk_ttyio.c in the Linux kernel through 5.9.9. Local attackers on systems with the speakup driver could cause a local denial of service attack, aka CID-d41227544427. This occurs because of an invalid free when the line discipline is used more than once.

The post CVE-2020-28941 appeared first on CVE Vulnerability.