Memory corruption in WLAN Firmware while parsing received GTK Keys in GTK KDE.
Memory corruption while handling payloads from remote ESL. Installer RCE on settings file write in MyBB before 1.8.22.Ī malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g., from a remote source). Graphical terminal emulators like xterm, gnome-terminal and others are not affected – this can only be exploited when snaps are run on a virtual console.īMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass. Using the TIOCLINUX ioctl request, a malicious snap could inject contents into the input of the controlling terminal which could allow it to cause arbitrary commands to be executed outside of the snap sandbox after the snap exits.
0 kommentar(er)
