Browse CVEs

HIGH 7.5 CVE-2021-46020 An untrusted pointer dereference in mrb_vm_exec() of mruby v3.0.0 can lead to a segmentation fault or application crash. Mruby No fix yet Fix from $1,9502022-01-14 MEDIUM 5.5 CVE-2021-45067 Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Access of Memory L… Acrobat Dc after 21.007.20099 Fix from $1,6002022-01-14 MEDIUM 5.5 CVE-2021-45764 GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function shift_chunk_offsets.isra(). Gpac No fix yet Fix from $1,6002022-01-14 MEDIUM 5.5 CVE-2021-44712 Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an Access of Memory L… Acrobat Dc after 21.007.20099 Fix from $1,6002022-01-14 MEDIUM 5.5 CVE-2021-39633 In gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure w… Android Patch available Fix from $1,6002022-01-14 MEDIUM 5.5 CVE-2021-45762 GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_sg_vrml_mf_reset(). This vulnerability allows attacke… Gpac No fix yet Fix from $1,6002022-01-14 MEDIUM 5.5 CVE-2021-45760 GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_list_last(). This vulnerability allows attackers to c… Gpac No fix yet Fix from $1,6002022-01-14 HIGH 7.8 CVE-2021-34934 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is requir… Bentley View 10.16.02+ Fix from $1,9502022-01-13 HIGH 7.8 CVE-2021-34874 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.15.0.75. User interaction is requir… Bentley View 10.16.02+ Fix from $1,9502022-01-13 HIGH 7.8 CVE-2022-21852 Windows DWM Core Library Elevation of Privilege Vulnerability Windows 10 Mitigation only Fix from $1,9502022-01-11 MEDIUM 5.5 CVE-2021-46053 A Denial of Service vulnerability exists in Binaryen 103. The program terminates with signal SIGKILL. Binaryen No fix yet Fix from $1,6002022-01-10 HIGH 7.5 CVE-2021-40027 The bone voice ID TA has a vulnerability in calculating the buffer length,Successful exploitation of this vulnerability may affect data confidentiali… Harmonyos 2.0+ Fix from $1,9502022-01-10 HIGH 7.8 CVE-2021-30289 Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compute, Snapd… Apq8009w Firmware Mitigation only Fix from $1,9502022-01-03 CRITICAL 9.8 CVE-2021-45709 An issue was discovered in the crypto2 crate through 2021-10-08 for Rust. During Chacha20 encryption and decryption, an unaligned read of a u32 may o… Crypto2 Mitigation only Fix from $2,3002021-12-27 HIGH 7.8 CVE-2017-13835 A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13. An application may be able to … Mac Os X 10.13+ Fix from $1,9502021-12-23 HIGH 7.8 CVE-2017-13906 A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sie… Mac Os X 10.11.6+ Fix from $1,9502021-12-23 CRITICAL 9.8 CVE-2021-40393 An out-of-bounds write vulnerability exists in the RS-274X aperture macro variables handling functionality of Gerbv 2.7.0 and dev (commit b5f1eacd) a… Debian Linux No fix yet Fix from $2,3002021-12-22 MEDIUM 5.5 CVE-2021-44920 An invalid memory address dereference vulnerability exists in gpac 1.1.0 in the dump_od_to_saf.isra function, which causes a segmentation fault and a… Gpac No fix yet Fix from $1,6002021-12-21 MEDIUM 5.5 CVE-2021-45293 A Denial of Service vulnerability exists in Binaryen 103 due to an Invalid memory address dereference in wasm::WasmBinaryBuilder::visitLet. Fedora Patch available Fix from $1,6002021-12-21 HIGH 7.8 CVE-2021-40783 Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, p… Premiere Rush after 1.5.16 Fix from $1,9502021-12-20 HIGH 7.8 CVE-2021-40784 Adobe Premiere Rush version 1.5.16 (and earlier) is affected by a memory corruption vulnerability due to insecure handling of a malicious WAV file, p… Premiere Rush after 1.5.16 Fix from $1,9502021-12-20 HIGH 8.8 CVE-2021-43083 Apache PLC4X - PLC4C (Only the C language implementation was effected) was vulnerable to an unsigned integer underflow flaw inside the tcp transport.… Plc4x 0.9.1+ Fix from $1,9502021-12-19 HIGH 7.8 CVE-2021-4008 A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcRenderCompositeGlyphs… Fedora 1.20.14+ Fix from $1,9502021-12-17 HIGH 7.8 CVE-2021-4009 A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcXFixesCreatePointerBa… Fedora 1.20.14+ Fix from $1,9502021-12-17 HIGH 7.8 CVE-2021-4010 A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SProcScreenSaverSuspend fu… Fedora 1.20.14+ Fix from $1,9502021-12-17 HIGH 7.8 CVE-2021-4011 A flaw was found in xorg-x11-server in versions before 21.1.2 and before 1.20.14. An out-of-bounds access can occur in the SwapCreateRegister functio… Fedora 1.20.14+ Fix from $1,9502021-12-17 CRITICAL 9.8 CVE-2021-44538 The olm_session_describe function in Matrix libolm before 3.2.7 is vulnerable to a buffer overflow. The Olm session object represents a cryptographic… Debian Linux 1.6.0 / 1.9.7-sc1+ Fix from $2,3002021-12-14 HIGH 7.8 CVE-2021-44440 A vulnerability has been identified in JT Utilities (All versions < V13.1.1.0), JTTK (All versions < V11.1.1.0). JTTK library in affected products is… Jt Open Toolkit 11.1.1.0 / 13.1.1.0+ Fix from $1,9502021-12-14 CRITICAL 10.0 CVE-2021-21950 An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebas… Eufy Homebase 2 Firmware Mitigation only Fix from $2,3002021-12-08 CRITICAL 10.0 CVE-2021-21951 An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebas… Eufy Homebase 2 Firmware Mitigation only Fix from $2,3002021-12-08