All CVEs — page 420 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A code injection vulnerability exists in the 'ros2topic' command-line tool of ROS 2, allowing local users to execute arbitrary code by crafting a malicious Python expression.
The flaw is a use-after-free vulnerability in Facebook's proxygen library where read callbacks are not properly unregistered before stream destruction, leading to potential code execution when freed memory is accessed. This affects WebTransport implementations and can be exploited remotely.
The flaw lies in the ADI MAX32 driver for the ADC API, where it incorrectly validates the buffer size, allowing for buffer overflows. This can lead to data corruption or potential code execution if exploited.
The flaw in the NXP MCUX LPADC driver allows an attacker to overflow the destination buffer, leading to potential data corruption or a Denial of Service (DoS).
This flaw allows an attacker to write a pointer to an attacker-controlled memory location in the RTIO ring, potentially leading to arbitrary code execution.
The brace-expansion library suffers from uncontrolled recursion that can exhaust the native stack and cause a denial of service. This vulnerability affects applications using nested brace patterns, potentially leading to process termination when processing deeply nested structures.
The brace-expansion library suffers from a stack overflow vulnerability that can be triggered by specially crafted brace patterns, leading to a denial of service condition where the Node.js process terminates unexpectedly. This flaw allows attackers to exhaust system resources and cause application instability.