Browse CVEs

CRITICAL 9.1 CVE-2021-32714 hyper is an HTTP library for Rust. In versions prior to 0.14.10, hyper's HTTP server and client code had a flaw that could trigger an integer overflo… Hyper 0.14.10+ Fix from $2,3002021-07-07 MEDIUM 6.5 CVE-2021-32559 An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that would caus… Pywin32 301+ Fix from $1,6002021-07-06 CRITICAL 9.8 CVE-2021-22323 There is an Integer Overflow Vulnerability in Huawei Smartphone. Successful exploitation of these vulnerabilities may escalate the permission to that… Emui Mitigation only Fix from $2,3002021-06-30 HIGH 7.8 CVE-2021-34381 Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow on the si… Jetson Linux 32.5.1+ Fix from $1,9502021-06-30 HIGH 7.8 CVE-2021-34382 Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tz_map_shared_mem function where an integer overflow on the size parameter causes the … Jetson Linux 32.5.1+ Fix from $1,9502021-06-30 MEDIUM 6.7 CVE-2021-34385 Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length could lead to a heap overflow. Jetson Linux 32.5.1+ Fix from $1,6002021-06-30 CRITICAL 9.8 CVE-2020-17752 Integer overflow vulnerability in payable function of a smart contract implementation for an Ethereum token, as demonstrated by the smart contract im… Mon No fix yet Fix from $2,3002021-06-24 HIGH 7.8 CVE-2021-32491 A flaw was found in djvulibre-3.5.28 and earlier. An integer overflow in function render() in tools/ddjvu via crafted djvu file may lead to applicati… Debian Linux after 3.5.28 Fix from $1,9502021-06-24 HIGH 8.8 CVE-2021-29946 Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the A… Firefox 78.10 / 88.0+ Fix from $1,9502021-06-24 MEDIUM 5.5 CVE-2021-34390 Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a spe… Jetson Linux 32.5.1+ Fix from $1,6002021-06-22 MEDIUM 5.5 CVE-2021-34391 Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a spe… Jetson Linux 32.5.1+ Fix from $1,6002021-06-22 MEDIUM 5.5 CVE-2021-34392 Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the tz_map_shared_mem function can bypass boundary checks, … Jetson Linux 32.5.1+ Fix from $1,6002021-06-22 HIGH 7.8 CVE-2021-34372 Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where a… Jetson Linux 32.5.1+ Fix from $1,9502021-06-22 MEDIUM 6.7 CVE-2021-0543 In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local es… Android Mitigation only Fix from $1,6002021-06-22 HIGH 8.8 CVE-2021-0557 In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no addi… Android Mitigation only Fix from $1,9502021-06-22 MEDIUM 6.7 CVE-2021-34386 Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calloc size calculation can cause the multiplication of… Jetson Linux 32.5.1+ Fix from $1,6002021-06-21 CRITICAL 9.8 CVE-2021-26461EPSS 5% Apache Nuttx Versions prior to 10.1.0 are vulnerable to integer wrap-around in functions malloc, realloc and memalign. This improper memory assignmen… Nuttx 10.1.0+ Fix from $2,3002021-06-21 HIGH 7.8 CVE-2021-0510 In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privil… Android Patch available Fix from $1,9502021-06-21 HIGH 7.8 CVE-2020-7860 UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by … Unegg 1.0+ Fix from $1,9502021-06-11 HIGH 7.8 CVE-2021-0494 In memory management driver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,9502021-06-11 HIGH 7.8 CVE-2020-11306 Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec… Aqt1000 Firmware Mitigation only Fix from $1,9502021-06-09 MEDIUM 6.7 CVE-2020-11160 Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, … Apq8096au Firmware Patch available Fix from $1,6002021-06-09 HIGH 7.8 CVE-2020-11235 Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdra… Apq8009 Firmware Mitigation only Fix from $1,9502021-06-09 MEDIUM 6.5 CVE-2021-31807EPSS 16% An issue was discovered in Squid before 4.15 and 5.x before 5.0.6. An integer overflow problem allows a remote server to achieve Denial of Service wh… Fedora 4.15 / 5.0.6+ Fix from $1,6002021-06-08 MEDIUM 5.5 CVE-2021-26945 An integer overflow leading to a heap-buffer overflow was found in OpenEXR in versions before 3.0.1. An attacker could use this flaw to crash an appl… Openexr 3.0.1+ Fix from $1,6002021-06-08 MEDIUM 5.5 CVE-2021-23215 An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this … Fedora 3.0.1+ Fix from $1,6002021-06-08 MEDIUM 5.5 CVE-2021-26260 An integer overflow leading to a heap-buffer overflow was found in the DwaCompressor of OpenEXR in versions before 3.0.1. An attacker could use this … Fedora 3.0.1+ Fix from $1,6002021-06-08 CRITICAL 9.8 CVE-2017-20005 NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes a… Nginx 1.13.6+ Fix from $2,3002021-06-06 HIGH 8.8 CVE-2021-32625 Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Red… Redis 6.0.14 / 6.2.4+ Fix from $1,9502021-06-02 CRITICAL 9.8 CVE-2009-0947 Multiple integer overflows in the (1) cdf_read_property_info and (2) cdf_read_sat functions in file before 5.02. Files 5.02+ Fix from $2,3002021-06-02