Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-45940 State: PUBLISHED Published: 2021-12-31T23:57:22 Last Updated: 2024-08-04T04:54:31.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (4 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libbpf/OSV-2021-1562.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40868
CVE ID: CVE-2021-45941 State: PUBLISHED Published: 2021-12-31T23:57:14 Last Updated: 2024-08-04T04:54:31.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: libbpf 0.6.0 and 0.6.1 has a heap-based buffer overflow (8 bytes) in __bpf_object__open (called from bpf_object__open_mem and bpf-object-fuzzer.c). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libbpf/OSV-2021-1576.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40957
CVE ID: CVE-2021-45942 State: PUBLISHED Published: 2021-12-31T00:00:00 Last Updated: 2024-08-04T04:54:31.096Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenEXR 3.1.x before 3.1.4 has a heap-based buffer overflow in Imf_3_1::LineCompositeTask::execute (called from IlmThread_3_1::NullThreadPoolProvider::addTask and IlmThread_3_1::ThreadPool::addGlobalTask). NOTE: db217f2 may be inapplicable. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/openexr/OSV-2021-1627.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41416 - https://github.com/AcademySoftwareFoundation/openexr/commit/db217f29dfb24f6b4
um.org/p/oss-fuzz/issues/detail?id=41416 - https://github.com/AcademySoftwareFoundation/openexr/commit/db217f29dfb24f6b4b5100c24ac5e7490e1c57d0 - https://github.com/AcademySoftwareFoundation/openexr/pull/1209 - https://github.com/AcademySoftwareFoundation/openexr/commit/11cad77da87c4fa2aab7d58dd5339e254db7937e - https://github.com/AcademySoftwareFoundation/openexr/releases/tag/v3.1.4 - https://github.com/AcademySoftwareFoundation/openexr/blob/v3.1.4/CHANGES.md#version-314-january-26-2022 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HJ5PW4WNXBKCRFGDZGAQOSVH2BKZKL4X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.f
org/message/HJ5PW4WNXBKCRFGDZGAQOSVH2BKZKL4X/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XJUK7WIQV5EKWTCZBRXFN6INHG6MLS5O/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6TEZDE2S2DB4BF4LZSSV4W3DNW7DSRHJ/ - https://security.gentoo.org/glsa/202210-31 - https://www.debian.org/security/2022/dsa-5299 - https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html
CVE ID: CVE-2021-45943 State: PUBLISHED Published: 2021-12-31T00:00:00 Last Updated: 2024-08-04T04:54:31.026Z Vendors: n/a Products: n/a Problem Types: n/a Description: GDAL 3.3.0 through 3.4.0 has a heap-based buffer overflow in PCIDSK::CPCIDSKFile::ReadFromFile (called from PCIDSK::CPCIDSKSegment::ReadFromFile and PCIDSK::CPCIDSKBinarySegment::CPCIDSKBinarySegment). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gdal/OSV-2021-1651.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41993 - https://github.com/OSGeo/gdal/commit/1ca6a3e5168c200763fa46d8aa7e698d0b757e7e - https://github.com/OSGeo/gdal/pull/4944
https://github.com/OSGeo/gdal/commit/1ca6a3e5168c200763fa46d8aa7e698d0b757e7e - https://github.com/OSGeo/gdal/pull/4944 - https://lists.debian.org/debian-lts-announce/2022/01/msg00004.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JBPJGXY7IYY65NVJBLP3RONXE7ZBVCNU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P23E4DEHY5FJCR5VJ46I6TO32DT7Y3T4/ - https://www.oracle.com/security-alerts/cpujul2022.html - https://www.debian.org/security/2022/dsa-5239 - https://lists.debian.org/debian-lts-announce/2022/09/msg00040.html - https://security.gentoo.org/glsa/202210-15
CVE ID: CVE-2021-45944 State: PUBLISHED Published: 2021-12-31T23:56:27 Last Updated: 2024-08-04T04:54:31.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ghostscript GhostPDL 9.50 through 9.53.3 has a use-after-free in sampled_data_sample (called from sampled_data_continue and interp). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-237.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29903 - https://www.debian.org/security/2022/dsa-5038 - https://lists.debian.org/debian-lts-announce/2022/01/msg00006.html - https://github.com/google/oss-fuzz-vulns/issues/16 - https://git.
debian.org/debian-lts-announce/2022/01/msg00006.html - https://github.com/google/oss-fuzz-vulns/issues/16 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=7861fcad13c497728189feafb41cd57b5b50ea25 - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30715
CVE ID: CVE-2021-45945 State: REJECTED Published: 2021-12-31T23:55:57 Last Updated: 2022-01-17T21:30:40 Description: No description available.
CVE ID: CVE-2021-45946 State: PUBLISHED Published: 2021-12-31T23:51:57 Last Updated: 2024-08-04T04:54:31.168Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wasm3 0.5.0 has an out-of-bounds write in CompileBlock (called from Compile_LoopOrBlock and CompileBlockStatements). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wasm3/OSV-2021-678.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33555
CVE ID: CVE-2021-45947 State: PUBLISHED Published: 2021-12-31T23:55:01 Last Updated: 2024-08-04T04:54:31.068Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wasm3 0.5.0 has an out-of-bounds write in Runtime_Release (called from EvaluateExpression and InitDataSegments). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/wasm3/OSV-2021-689.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33689
CVE ID: CVE-2021-45948 State: PUBLISHED Published: 2021-12-31T00:00:00 Last Updated: 2024-08-04T04:54:31.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr (called from m3d_load and Assimp::M3DWrapper::M3DWrapper). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2021-775.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34416 - https://security.gentoo.org/glsa/202210-01
CVE ID: CVE-2021-45949 State: PUBLISHED Published: 2021-12-31T23:54:37 Last Updated: 2024-08-04T04:54:31.098Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ghostscript GhostPDL 9.50 through 9.54.0 has a heap-based buffer overflow in sampled_data_finish (called from sampled_data_continue and interp). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ghostscript/OSV-2021-803.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34675 - https://git.ghostscript.com/?p=ghostpdl.git%3Ba=commit%3Bh=2a3129365d3bc0d4a41f107ef175920d1505d1f7 - https://www.debian.org/security/2022/dsa-5038 - https://lists.debian
mmit%3Bh=2a3129365d3bc0d4a41f107ef175920d1505d1f7 - https://www.debian.org/security/2022/dsa-5038 - https://lists.debian.org/debian-lts-announce/2022/01/msg00006.html
CVE ID: CVE-2021-45950 State: PUBLISHED Published: 2021-12-31T23:54:21 Last Updated: 2024-08-04T04:54:31.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: LibreDWG 0.12.4.4313 through 0.12.4.4367 has an out-of-bounds write in dwg_free_BLOCK_private (called from dwg_free_BLOCK and dwg_free_object). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libredwg/OSV-2021-814.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34766
CVE ID: CVE-2021-45951 State: PUBLISHED Published: 2021-12-31T23:54:10 Last Updated: 2024-08-04T04:54:31.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dnsmasq 2.86 has a heap-based buffer overflow in check_bad_address (called from check_for_bogus_wildcard and FuzzCheckForBogusWildcard). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2021-924.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35868 - https://lists.thekelleys.org.uk/piperm
OSV-2021-924.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35868 - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016162.html - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016164.html
CVE ID: CVE-2021-45952 State: PUBLISHED Published: 2021-12-31T23:53:59 Last Updated: 2024-08-04T04:54:31.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dnsmasq 2.86 has a heap-based buffer overflow in dhcp_reply (called from dhcp_packet and FuzzDhcp). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2021-927.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35870 - https://lists.thekelleys.org.uk/pipermail/dnsmasq-
.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35870 - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016162.html - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016164.html
CVE ID: CVE-2021-45953 State: PUBLISHED Published: 2021-12-31T23:52:10 Last Updated: 2024-08-04T04:54:31.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from hash_questions and fuzz_util.c). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2021-929.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35858 - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/01
ugs.chromium.org/p/oss-fuzz/issues/detail?id=35858 - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016162.html - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016164.html
CVE ID: CVE-2021-45954 State: PUBLISHED Published: 2021-12-31T23:53:51 Last Updated: 2024-08-04T04:54:31.184Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dnsmasq 2.86 has a heap-based buffer overflow in extract_name (called from answer_auth and FuzzAuth). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2021-931.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35861 - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016162.h
romium.org/p/oss-fuzz/issues/detail?id=35861 - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016162.html - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016164.html
CVE ID: CVE-2021-45955 State: PUBLISHED Published: 2021-12-31T23:53:42 Last Updated: 2024-08-04T04:54:31.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dnsmasq 2.86 has a heap-based buffer overflow in resize_packet (called from FuzzResizePacket and fuzz_rfc1035.c) because of the lack of a proper bounds check upon pseudo header re-insertion. NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge." However, a contributor states that a security patch (mentioned in 016162.html) is needed Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.c
ml) is needed Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2021-932.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35898 - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016162.html - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016164.html
CVE ID: CVE-2021-45956 State: PUBLISHED Published: 2021-12-31T23:53:34 Last Updated: 2024-10-28T20:56:27.009Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dnsmasq 2.86 has a heap-based buffer overflow in print_mac (called from log_packet and dhcp_reply). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2021-933.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35887 - https://lists.thekelleys.org.uk/pipermail/dnsmasq-
.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35887 - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016162.html - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016164.html
CVE ID: CVE-2021-45957 State: PUBLISHED Published: 2021-12-31T23:53:25 Last Updated: 2024-08-04T04:54:31.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: Dnsmasq 2.86 has a heap-based buffer overflow in answer_request (called from FuzzAnswerTheRequest and fuzz_rfc1035.c). NOTE: the vendor's position is that CVE-2021-45951 through CVE-2021-45957 "do not represent real vulnerabilities, to the best of our knowledge. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/dnsmasq/OSV-2021-935.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35920 - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discus
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35920 - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016162.html - https://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2022q1/016164.html
CVE ID: CVE-2021-45958 State: PUBLISHED Published: 2021-12-31T23:52:45 Last Updated: 2024-08-04T04:54:31.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode). Exploitation can, for example, use a large amount of indentation. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/google/oss-fuzz-vulns/blob/main/vulns/ujson/OSV-2021-955.yaml - https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=36009 - https://github.com/ultrajson/ultrajson/issues/502#issuecomment-1031747284 - https://github.com/ultrajson/ultrajson/issues/501 - htt
hub.com/ultrajson/ultrajson/issues/502#issuecomment-1031747284 - https://github.com/ultrajson/ultrajson/issues/501 - https://github.com/ultrajson/ultrajson/pull/504 - https://lists.debian.org/debian-lts-announce/2022/02/msg00023.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CN7W3GOXALINKFUUE7ICQIC2EF5HNKUQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ULX35TSWLBBIMEH44MUORPXYYRZKEDC6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O6JUWQTJLA2CMG4CJN7DCUVSOXLZIIXL/ - https://lists.fedoraproject.org/archives/list/package-announce%40
roject.org/message/O6JUWQTJLA2CMG4CJN7DCUVSOXLZIIXL/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NAU5N4A7EUK2AMUCOLYDD5ARXAJYZBD2/
CVE ID: CVE-2021-45959 State: REJECTED Published: 2021-12-31T23:52:24 Last Updated: 2022-01-03T07:34:36 Description: No description available.
CVE ID: CVE-2021-45960 State: PUBLISHED Published: 2022-01-01T18:47:46.000Z Last Updated: 2025-05-05T16:45:11.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can lead to realloc misbehavior (e.g., allocating too few bytes, or only freeing memory). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/libexpat/libexpat/issues/531 - https://github.com/libexpat/libexpat/pull/534 - https://bugzilla.mozilla.org/show_bug.cgi?id=1217609 - http://www.openwall.com/lists/oss-security/2022/01/17/3 - https://security.neta
la.mozilla.org/show_bug.cgi?id=1217609 - http://www.openwall.com/lists/oss-security/2022/01/17/3 - https://security.netapp.com/advisory/ntap-20220121-0004/ - https://www.tenable.com/security/tns-2022-05 - https://www.debian.org/security/2022/dsa-5073 - https://cert-portal.siemens.com/productcert/pdf/ssa-484086.pdf - https://security.gentoo.org/glsa/202209-24
CVE ID: CVE-2021-45966 State: PUBLISHED Published: 2022-03-18T05:00:09 Last Updated: 2024-08-04T04:54:31.055Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Pascom Cloud Phone System before 7.20.x. In the management REST API, /services/apply in exd.pl allows remote attackers to execute arbitrary code via shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - https://www.pascom.net/doc/en/release-notes/ - https://kerbit.io/research/read/blog/4 - https://tutorialboy24.blogspot.com/2022/03/the-story-of-3-bugs-that-lead-to.html
CVE ID: CVE-2021-45967 State: PUBLISHED Published: 2022-03-18T05:00:35 Last Updated: 2024-11-20T15:41:51.676Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Pascom Cloud Phone System before 7.20.x. A configuration error between NGINX and a backend Tomcat server leads to a path traversal in the Tomcat server, exposing unintended endpoints. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.pascom.net/doc/en/release-notes/ - https://www.pascom.net/doc/en/release-notes/pascom19/ - https://kerbit.io/research/read/blog/4 - https://tutorialboy24.blogspot.com/2022/03/the-story-of-3-bugs-that-lead-to.html
CVE ID: CVE-2021-45968 State: PUBLISHED Published: 2022-03-18T04:56:37 Last Updated: 2024-08-04T04:54:31.067Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in xmppserver jar in the XMPP Server component of the JIve platform, as used in Pascom Cloud Phone System before 7.20.x (and in other products). An endpoint in the backend Tomcat server of the Pascom allows SSRF, a related issue to CVE-2019-18394. Additional Analyst Notes: - CVE Program Container: References: - https://www.pascom.net/doc/en/release-notes/ - https://jivesoftware.com/platform/ - https://www.pascom.net/doc/en/release-notes/pascom19/ - https://kerbit.io/research/read/blog/4 - https://tutor
atform/ - https://www.pascom.net/doc/en/release-notes/pascom19/ - https://kerbit.io/research/read/blog/4 - https://tutorialboy24.blogspot.com/2022/03/the-story-of-3-bugs-that-lead-to.html
CVE ID: CVE-2021-45969 State: PUBLISHED Published: 2022-01-05T23:00:28.000Z Last Updated: 2025-11-04T19:12:47.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the CommBuffer+8 location). Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge - https://security.netapp.com/advisory/ntap
CVE Program Container: References: - https://www.insyde.com/security-pledge - https://security.netapp.com/advisory/ntap-20220216-0004/ - https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
CVE ID: CVE-2021-45970 State: PUBLISHED Published: 2022-01-05T22:59:10.000Z Last Updated: 2025-11-04T19:12:48.530Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the status code saved at the CommBuffer+4 location). Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge - https://security.
itional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge - https://security.netapp.com/advisory/ntap-20220216-0004/ - https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
CVE ID: CVE-2021-45971 State: PUBLISHED Published: 2022-01-05T23:09:47.000Z Last Updated: 2025-11-04T19:12:49.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (CommBufferData). Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge - https://security.netapp.com/advisory/ntap-20220216
ram Container: References: - https://www.insyde.com/security-pledge - https://security.netapp.com/advisory/ntap-20220216-0004/ - https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
CVE ID: CVE-2021-45972 State: PUBLISHED Published: 2022-01-01T20:36:57 Last Updated: 2024-08-04T04:54:31.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount of data to write. This allows an attacker to overwrite up to 250 bytes outside of the allocated buffer with arbitrary data. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1002739 - http://web.archive.org/web/20150801185019/ - https://www.abdn.ac.uk/tools/ibmpc/giftrans/index.hti
CVE ID: CVE-2021-45975 State: PUBLISHED Published: 2022-01-26T14:59:34 Last Updated: 2024-08-04T04:54:31.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local attacker to perform a DLL hijacking attack. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system wit