Browse CVEs

MEDIUM 5.5 CVE-2022-29203 TensorFlow is an open source platform for machine learning. Prior to versions 2.9.0, 2.8.1, 2.7.2, and 2.6.4, the implementation of `tf.raw_ops.Space… Tensorflow 2.6.4 / 2.7.2+ Fix from $1,6002022-05-20 MEDIUM 5.5 CVE-2022-29030 A vulnerability has been identified in JT2Go (All versions < V13.3.0.3), Teamcenter Visualization V13.3 (All versions < V13.3.0.3), Teamcenter Visual… Jt2go 13.3.0.3 / 14.0.0.1+ Fix from $1,6002022-05-20 MEDIUM 6.5 CVE-2022-1754 Integer Overflow or Wraparound in GitHub repository polonel/trudesk prior to 1.2.2. Trudesk 1.2.2+ Fix from $1,6002022-05-20 MEDIUM 5.3 CVE-2022-22976 Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability. When… Spring Security 5.5.7 / 5.6.4+ Fix from $1,6002022-05-19 HIGH 7.8 CVE-2022-1116 Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate privileges to … Linux Kernel 5.4.189+ Fix from $1,9502022-05-17 MEDIUM 6.5 CVE-2022-1728 Allowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability can be a… Trudesk 1.2.2+ Fix from $1,6002022-05-16 HIGH 7.5 CVE-2022-28936 FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node can trigger an integer overflow and cause a Denial of Service … Fisco Bcos Mitigation only Fix from $1,9502022-05-15 HIGH 7.5 CVE-2022-28937 FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via an invalid proposal with an invalid header, will cause no… Fisco Bcos No fix yet Fix from $1,9502022-05-15 HIGH 7.5 CVE-2022-1699 Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack fo… Organizr 2.1.2000+ Fix from $1,9502022-05-12 MEDIUM 5.5 CVE-2022-27114 There is a vulnerability in htmldoc 1.9.16. In image_load_jpeg function image.cxx when it calls malloc,'img->width' and 'img->height' they are large … Debian Linux Patch available Fix from $1,6002022-05-09 MEDIUM 6.5 CVE-2022-26073 A denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set… Eufy Homebase 2 Firmware No fix yet Fix from $1,6002022-05-05 HIGH 7.5 CVE-2022-28705 On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13… Big Ip Access Policy Manager Mitigation only Fix from $1,9502022-05-05 MEDIUM 6.5 CVE-2022-28471 In ffjpeg (commit hash: caade60), the function bmp_load() in bmp.c contains an integer overflow vulnerability, which eventually results in the heap o… Ffjpeg No fix yet Fix from $1,6002022-05-05 HIGH 7.8 CVE-2022-21743 In ion, there is a possible use after free due to an integer overflow. This could lead to local escalation of privilege with no additional execution … Android Mitigation only Fix from $1,9502022-05-03 CRITICAL 9.8 CVE-2021-22680 NXP MQX Versions 5.1 and prior are vulnerable to integer overflow in mem_alloc, _lwmem_alloc and _partition functions. This unverified memory assignm… Mqx after 5.1 Fix from $2,3002022-05-03 MEDIUM 6.5 CVE-2021-27411 Micrium OS Versions 5.10.1 and prior are vulnerable to integer wrap-around in functions Mem_DynPoolCreate, Mem_DynPoolCreateHW and Mem_PoolCreate. Th… Micrium Os after 5.10.1 Fix from $1,6002022-05-03 CRITICAL 9.8 CVE-2021-27417 eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc (an implementation of malloc). The unve… Ecospro after 4.5.3 Fix from $2,3002022-05-03 CRITICAL 9.8 CVE-2021-27419 uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbi… Uclibc Ng 1.0.37+ Fix from $2,3002022-05-03 CRITICAL 9.8 CVE-2021-27421 NXP MCUXpresso SDK versions prior to 2.8.2 are vulnerable to integer overflow in SDK_Malloc function, which could allow to access memory locations ou… Mcuxpresso Software Development Kit 2.8.2+ Fix from $2,3002022-05-03 CRITICAL 9.8 CVE-2021-27425 Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc. This improper memory assignment can lead to arbitrar… Mongoose Os Mitigation only Fix from $2,3002022-05-03 CRITICAL 9.8 CVE-2021-27427 RIOT OS version 2020.01.1 is vulnerable to integer wrap-around in its implementation of calloc function, which can lead to arbitrary memory allocatio… Riot Mitigation only Fix from $2,3002022-05-03 CRITICAL 9.8 CVE-2021-27431 ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to integer wrap-around inosRtxMemoryAlloc (local malloc equivalent) function, which can lead t… Cmsis Rtos after 2.1.3 Fix from $2,3002022-05-03 CRITICAL 9.8 CVE-2021-27433 ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocatio… Mbed Ualloc Patch available Fix from $2,3002022-05-03 CRITICAL 9.8 CVE-2021-27435 ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in malloc_wrapper function, which can lead to arbitrary memory allocation, result… Mbed Patch available Fix from $2,3002022-05-03 CRITICAL 9.8 CVE-2021-27439 TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tos_mmheap_alloc incorrect calculation of effective memory allocation … Tencentos Tiny Mitigation only Fix from $2,3002022-05-03 HIGH 7.8 CVE-2021-22556 The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pag… Fuchsia 4.1+ Fix from $1,9502022-05-03 MEDIUM 6.5 CVE-2022-29824 In libxml2 before 2.9.14, several buffer handling functions in buf.c (xmlBuf*) and tree.c (xmlBuffer*) don't check for integer overflows. This can re… Fedora 2.9.14+ Fix from $1,6002022-05-03 MEDIUM 5.5 CVE-2022-1475 An integer overflow vulnerability was found in FFmpeg versions before 4.4.2 and before 5.0.1 in g729_parse() in llibavcodec/g729_parser.c when proces… Ffmpeg 4.4.2+ Fix from $1,6002022-05-02 HIGH 8.2 CVE-2021-4206 A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can lead to the allocation of a smal… Enterprise Linux 7.0.0+ Fix from $1,9502022-04-29 MEDIUM 5.7 CVE-2022-28195 NVIDIA Jetson Linux Driver Package contains a vulnerability in the Cboot ext4_read_file function, where insufficient validation of untrusted data may… Jetson Linux 32.7.2+ Fix from $1,6002022-04-27