A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0009), Tecnomatix Plant Simulation V2302 (All versions < V2302.0003). The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-21268)
Max CVSS
7.8
EPSS Score
0.05%
Published
2023-10-10
Updated
2023-10-12
While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.
Max CVSS
8.8
EPSS Score
0.07%
Published
2023-06-02
Updated
2023-06-09
Memory corruption in Graphics while importing a file.
Max CVSS
8.4
EPSS Score
0.04%
Published
2023-05-02
Updated
2023-05-31
Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE.
Max CVSS
9.3
EPSS Score
0.04%
Published
2023-08-08
Updated
2023-08-10
Memory corruption in Video while calling APIs with different instance ID than the one received in initialization.
Max CVSS
7.8
EPSS Score
0.04%
Published
2023-07-04
Updated
2023-07-10
Memory corruption in Trusted Execution Environment while calling service API with invalid address.
Max CVSS
7.8
EPSS Score
0.04%
Published
2023-08-08
Updated
2023-08-10
Signed to unsigned conversion esp32_ipm_send
Max CVSS
8.0
EPSS Score
0.04%
Published
2024-02-18
Updated
2024-02-20
An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05. A specially crafted network packet can lead to a buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.
Max CVSS
9.8
EPSS Score
0.15%
Published
2023-03-20
Updated
2023-07-06
TensorFlow is an open source platform for machine learning. When printing a tensor, we get it's data as a `const char*` array (since that's the underlying storage) and then we typecast it to the element type. However, conversions from `char` to `bool` are undefined if the `char` is not `0` or `1`, so sanitizers/fuzzers will crash. The issue has been patched in GitHub commit `1be74370327`. The fix will be included in TensorFlow 2.11.0. We will also cherrypick this commit on TensorFlow 2.10.1, TensorFlow 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.
Max CVSS
7.5
EPSS Score
0.09%
Published
2022-11-18
Updated
2022-11-23
TensorFlow is an open source platform for machine learning. If `BCast::ToShape` is given input larger than an `int32`, it will crash, despite being supposed to handle up to an `int64`. An example can be seen in `tf.experimental.numpy.outer` by passing in large input to the input `b`. We have patched the issue in GitHub commit 8310bf8dd188ff780e7fc53245058215a05bdbe5. The fix will be included in TensorFlow 2.11. We will also cherrypick this commit on TensorFlow 2.10.1, 2.9.3, and TensorFlow 2.8.4, as these are also affected and still in supported range.
Max CVSS
7.5
EPSS Score
0.09%
Published
2022-11-18
Updated
2022-11-22
In Amazon AWS Redshift JDBC Driver (aka amazon-redshift-jdbc-driver or redshift-jdbc42) before 2.1.0.8, the Object Factory does not check the class type when instantiating an object from a class name.
Max CVSS
8.1
EPSS Score
0.21%
Published
2022-09-29
Updated
2022-11-07
A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from an adversary-controlled network share which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior).
Max CVSS
7.8
EPSS Score
0.05%
Published
2022-11-04
Updated
2022-11-05
Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
Max CVSS
8.4
EPSS Score
0.04%
Published
2023-03-10
Updated
2023-04-19
Memory corruption due to incorrect type conversion or cast in audio while using audio playback/capture when crafted address is sent from AGM IPC to AGM.
Max CVSS
7.8
EPSS Score
0.04%
Published
2023-04-13
Updated
2023-04-24
Memory corruption in Audio due to incorrect type cast during audio use-cases.
Max CVSS
7.8
EPSS Score
0.04%
Published
2023-06-06
Updated
2023-06-13
In ImageMagick, there is load of misaligned address for type 'double', which requires 8 byte alignment and for type 'float', which requires 4 byte alignment at MagickCore/property.c. Whenever crafted or untrusted input is processed by ImageMagick, this causes a negative impact to application availability or other problems related to undefined behavior.
Max CVSS
7.8
EPSS Score
0.08%
Published
2022-06-16
Updated
2023-05-22
All versions of package pg-native; all versions of package libpq are vulnerable to Denial of Service (DoS) when the addons attempt to cast the second argument to an array and fail. This happens for every non-array argument passed. **Note:** pg-native is a mere binding to npm's libpq library, which in turn has the addons and bindings to the actual C libpq library. This means that problems found in pg-native may transitively impact npm's libpq.
Max CVSS
7.5
EPSS Score
0.07%
Published
2022-06-17
Updated
2023-10-11
Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields
Max CVSS
7.8
EPSS Score
0.04%
Published
2023-01-09
Updated
2023-01-13
Memory corruption in multimedia due to incorrect type conversion while adding data in Snapdragon Auto
Max CVSS
8.4
EPSS Score
0.04%
Published
2022-09-02
Updated
2022-09-07
In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558822; Issue ID: ALPS06558822.
Max CVSS
6.7
EPSS Score
0.04%
Published
2022-07-06
Updated
2022-07-14
A vulnerability was found in NagVis up to 1.9.33 and classified as problematic. This issue affects the function checkAuthCookie of the file share/server/core/classes/CoreLogonMultisite.php. The manipulation of the argument hash leads to incorrect type conversion. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. Upgrading to version 1.9.34 is able to address this issue. The identifier of the patch is 7574fd8a2903282c2e0d1feef5c4876763db21d5. It is recommended to upgrade the affected component. The identifier VDB-213557 was assigned to this vulnerability.
Max CVSS
8.1
EPSS Score
0.18%
Published
2022-11-13
Updated
2024-03-21
A program using swift-corelibs-foundation is vulnerable to a denial of service attack caused by a potentially malicious source producing a JSON document containing a type mismatch. This vulnerability is caused by the interaction between a deserialization mechanism offered by the Swift standard library, the Codable protocol; and the JSONDecoder class offered by swift-corelibs-foundation, which can deserialize types that adopt the Codable protocol based on the content of a provided JSON document. When a type that adopts Codable requests the initialization of a field with an integer value, the JSONDecoder class uses a type-erased container with different accessor methods to attempt and coerce a corresponding JSON value and produce an integer. In the case the JSON value was a numeric literal with a floating-point portion, JSONDecoder used different type-eraser methods during validation than it did during the final casting of the value. The checked casting produces a deterministic crash due to this mismatch. The JSONDecoder class is often wrapped by popular Swift-based web frameworks to parse the body of HTTP requests and perform basic type validation. This makes the attack low-effort: sending a specifically crafted JSON document during a request to these endpoints will cause them to crash. The attack does not have any confidentiality or integrity risks in and of itself; the crash is produced deterministically by an abort function that ensures that execution does not continue in the face of this violation of assumptions. However, unexpected crashes can lead to violations of invariants in services, so it's possible that this attack can be used to trigger error conditions that escalate the risk. Producing a denial of service may also be the goal of an attacker in itself. This issue is solved in Swift 5.6.2 for Linux and Windows. This issue was solved by ensuring that the same methods are invoked both when validating and during casting, so that no type mismatch occurs. Swift for Linux and Windows versions are not ABI-interchangeable. To upgrade a service, its owner must update to this version of the Swift toolchain, then recompile and redeploy their software. The new version of Swift includes an updated swift-corelibs-foundation package. Versions of Swift running on Darwin-based operating systems are not affected.
Max CVSS
7.5
EPSS Score
0.09%
Published
2022-06-16
Updated
2022-07-05
A flaw was found in the sctp_make_strreset_req function in net/sctp/sm_make_chunk.c in the SCTP network protocol in the Linux kernel with a local user privilege access. In this flaw, an attempt to use more buffer than is allocated triggers a BUG_ON issue, leading to a denial of service (DOS).
Max CVSS
5.5
EPSS Score
0.04%
Published
2022-03-25
Updated
2023-02-02
An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.
Max CVSS
8.8
EPSS Score
0.40%
Published
2021-12-08
Updated
2024-02-02
The HwNearbyMain module has a Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Successful exploitation of this vulnerability may cause a process to restart.
Max CVSS
7.5
EPSS Score
0.09%
Published
2022-01-03
Updated
2022-01-14
212 vulnerabilities found
1 2 3 4 5 6 7 8 9
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!