Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-6070 State: PUBLISHED Published: 2020-08-10T13:13:31 Last Updated: 2024-08-04T08:47:40.941Z Severity: MEDIUM (CVSS 6.7 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: F2fs-tools Problem Types: code execution Description: An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0988 - htt
Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0988 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3SZ4HMQKNI35NBWJI6XMJBGWPEKZRR72/
CVE ID: CVE-2020-6071 State: PUBLISHED Published: 2020-03-24T20:43:17 Last Updated: 2024-08-04T08:47:41.013Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Videolabs Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the resource record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the compression pointer is followed without checking for recursion, leading to a denial of service. An attacker can send an mDNS message to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/secur
rigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2020/dsa-4671 - https://security.gentoo.org/glsa/202005-10 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0994
CVE ID: CVE-2020-6072 State: PUBLISHED Published: 2020-03-24T20:43:25 Last Updated: 2024-08-04T08:47:41.030Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Videolabs Problem Types: code execution Description: An exploitable code execution vulnerability exists in the label-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing compressed labels in mDNS messages, the rr_decode function's return value is not checked, leading to a double free that could be exploited to execute arbitrary code. An attacker can send an mDNS message to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://ww
mDNS message to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2020/dsa-4671 - https://security.gentoo.org/glsa/202005-10 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0995
CVE ID: CVE-2020-6073 State: PUBLISHED Published: 2020-03-24T20:43:10 Last Updated: 2024-08-04T08:47:40.990Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Videolabs Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the TXT record-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing the RDATA section in a TXT record in mDNS messages, multiple integer overflows can be triggered, leading to a denial of service. An attacker can send an mDNS message to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2020/dsa
vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2020/dsa-4671 - https://security.gentoo.org/glsa/202005-10 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0996
CVE ID: CVE-2020-6074 State: PUBLISHED Published: 2020-05-18T16:13:41 Last Updated: 2024-08-04T08:47:41.029Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Nitro Pro Problem Types: remote code execution Description: An exploitable code execution vulnerability exists in the PDF parser of Nitro Pro 13.9.1.155. A specially crafted PDF document can cause a use-after-free which can lead to remote code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0997
CVE ID: CVE-2020-6075 State: PUBLISHED Published: 2020-05-06T12:36:24 Last Updated: 2024-08-04T08:47:40.929Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: out-of-bounds write Description: An exploitable out-of-bounds write vulnerability exists in the store_data_buffer function of the igcore19d.dll library of Accusoft ImageGear 19.5.0. A specially crafted PNG file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/v
gger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0998
CVE ID: CVE-2020-6076 State: PUBLISHED Published: 2020-05-06T12:36:21 Last Updated: 2024-08-04T08:47:41.005Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: out of bounds write Description: An exploitable out-of-bounds write vulnerability exists in the igcore19d.dll ICO icoread parser of the Accusoft ImageGear 19.5.0 library. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerabilit
lnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-0999
CVE ID: CVE-2020-6077 State: PUBLISHED Published: 2020-03-24T20:39:22 Last Updated: 2024-08-04T08:47:40.911Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Videolabs Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages, the implementation does not properly keep track of the available data in the message, possibly leading to an out-of-bounds read that would result in a denial of service. An attacker can send an mDNS message to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: R
An attacker can send an mDNS message to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2020/dsa-4671 - https://security.gentoo.org/glsa/202005-10 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1000
CVE ID: CVE-2020-6078 State: PUBLISHED Published: 2020-03-24T20:39:31 Last Updated: 2024-08-04T08:47:41.076Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Videolabs Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the message-parsing functionality of Videolabs libmicrodns 0.1.0. When parsing mDNS messages in mdns_recv, the return value of the mdns_read_header function is not checked, leading to an uninitialized variable usage that eventually results in a null pointer dereference, leading to service crash. An attacker can send a series of mDNS messages to trigger this vulnerability. Additiona
rence, leading to service crash. An attacker can send a series of mDNS messages to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2020/dsa-4671 - https://security.gentoo.org/glsa/202005-10 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1001
CVE ID: CVE-2020-6079 State: PUBLISHED Published: 2020-03-24T20:49:46 Last Updated: 2024-08-04T08:47:40.925Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Videolabs Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker can send one mDNS message repeatedly to trigger this vulnerability through decoding of the domain name performed by rr_decode. Additional Analys
e repeatedly to trigger this vulnerability through decoding of the domain name performed by rr_decode. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2020/dsa-4671 - https://security.gentoo.org/glsa/202005-10 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1002
CVE ID: CVE-2020-6080 State: PUBLISHED Published: 2020-03-24T20:50:24 Last Updated: 2024-08-04T08:47:40.959Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Videolabs Problem Types: denial of service Description: An exploitable denial-of-service vulnerability exists in the resource allocation handling of Videolabs libmicrodns 0.1.0. When encountering errors while parsing mDNS messages, some allocated data is not freed, possibly leading to a denial-of-service condition via resource exhaustion. An attacker can send one mDNS message repeatedly to trigger this vulnerability through the function rr_read_RR [5] reads the current resource record, except
e repeatedly to trigger this vulnerability through the function rr_read_RR [5] reads the current resource record, except for the RDATA section. This is read by the loop at in rr_read. For each RR type, a different function is called. When the RR type is 0x10, the function rr_read_TXT is called at [6]. Additional Analyst Notes: - CVE Program Container: References: - https://www.debian.org/security/2020/dsa-4671 - https://security.gentoo.org/glsa/202005-10 - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1002
CVE ID: CVE-2020-6081 State: PUBLISHED Published: 2020-05-07T12:22:11 Last Updated: 2024-08-04T08:47:40.925Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: n/a Products: 3S Problem Types: remote code execution Description: An exploitable code execution vulnerability exists in the PLC_Task functionality of 3S-Smart Software Solutions GmbH CODESYS Runtime 3.5.14.30. A specially crafted network request can cause remote code execution. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1003
CVE ID: CVE-2020-6082 State: PUBLISHED Published: 2020-05-06T12:33:49 Last Updated: 2024-08-04T08:47:40.991Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: out-of-bounds write Description: An exploitable out-of-bounds write vulnerability exists in the ico_read function of the igcore19d.dll library of Accusoft ImageGear 19.6.0. A specially crafted ICO file can cause an out-of-bounds write, resulting in a remote code execution. An attacker needs to provide a malformed file to the victim to trigger the vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerabil
vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1004
CVE ID: CVE-2020-6083 State: PUBLISHED Published: 2020-10-14T12:45:36 Last Updated: 2024-08-04T08:47:41.106Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Allen Bradley Problem Types: CWE-120 Description: An exploitable denial of service vulnerability exists in the ENIP Request Path Port Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_repo
ility. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1005
CVE ID: CVE-2020-6084 State: PUBLISHED Published: 2020-10-19T20:45:11 Last Updated: 2024-08-04T08:47:40.992Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Allen-Bradley Problem Types: CWE-120 Description: An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability by sending an Electronic Key Segment with less bytes than required by the Key Format Table. Additional An
vulnerability by sending an Electronic Key Segment with less bytes than required by the Key Format Table. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1006
CVE ID: CVE-2020-6085 State: PUBLISHED Published: 2020-10-19T20:46:09 Last Updated: 2024-08-04T08:47:41.009Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Allen Bradley Problem Types: CWE-120 Description: An exploitable denial of service vulnerability exists in the ENIP Request Path Logical Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability by sending an Electronic Key Segment with less than 0x18 bytes following the Key Format field. Additional
vulnerability by sending an Electronic Key Segment with less than 0x18 bytes following the Key Format field. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1006
CVE ID: CVE-2020-6086 State: PUBLISHED Published: 2020-10-14T12:34:58 Last Updated: 2024-08-04T08:47:41.005Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Allen Bradley Problem Types: CWE-120 Description: An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.If the Simple Segment Sub-Type is supplied, the device treats the byte following as the Data Size in words. When t
ility.If the Simple Segment Sub-Type is supplied, the device treats the byte following as the Data Size in words. When this value represents a size greater than what remains in the packet data, the device enters a fault state where communication with the device is lost and a physical power cycle is required. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1007
CVE ID: CVE-2020-6087 State: PUBLISHED Published: 2020-10-14T12:35:08 Last Updated: 2024-08-04T08:47:41.100Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Allen Bradley Problem Types: CWE-120 Description: An exploitable denial of service vulnerability exists in the ENIP Request Path Data Segment functionality of Allen-Bradley Flex IO 1794-AENT/B. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability If the ANSI Extended Symbol Segment Sub-Type is supplied, the device treats the byte following as the Data Size in
ility If the ANSI Extended Symbol Segment Sub-Type is supplied, the device treats the byte following as the Data Size in words. When this value represents a size greater than what remains in the packet data, the device enters a fault state where communication with the device is lost and a physical power cycle is required. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1007
CVE ID: CVE-2020-6088 State: PUBLISHED Published: 2021-02-04T06:18:41 Last Updated: 2024-08-04T08:47:40.950Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: Allen-Bradley Problem Types: CWE-120 Description: An exploitable denial of service vulnerability exists in the ENIP Request Path Network Segment functionality of Allen-Bradley Flex IO 1794-AENT/B 4.003. A specially crafted network request can cause a loss of communications with the device resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerabi
vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1008
CVE ID: CVE-2020-6089 State: PUBLISHED Published: 2020-07-01T15:11:22 Last Updated: 2024-08-04T08:47:41.007Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Leadtools Problem Types: CWE-787 Description: An exploitable code execution vulnerability exists in the ANI file format parser of Leadtools 20. A specially crafted ANI file can cause a buffer overflow resulting in remote code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1009
CVE ID: CVE-2020-6090 State: PUBLISHED Published: 2020-06-11T13:27:20 Last Updated: 2024-08-04T08:47:41.006Z Vendors: n/a Products: Wago Problem Types: remote code execution Description: An exploitable code execution vulnerability exists in the Web-Based Management (WBM) functionality of WAGO PFC 200 03.03.10(15). A specially crafted series of HTTP requests can cause code execution resulting in remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1010
CVE ID: CVE-2020-6091 State: PUBLISHED Published: 2020-05-22T13:53:08 Last Updated: 2024-08-04T08:47:41.029Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Epson Problem Types: CWE-288 Description: An exploitable authentication bypass vulnerability exists in the ESPON Web Control functionality of Epson EB-1470Ui MAIN: 98009273ESWWV107 MAIN2: 8X7325WWV303. A specially crafted series of HTTP requests can cause authentication bypass resulting in information disclosure. An attacker can send an HTTP request to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_r
rability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1011 - https://epson.com/support/wa00907
CVE ID: CVE-2020-6092 State: PUBLISHED Published: 2020-05-18T16:14:18 Last Updated: 2024-08-04T08:47:41.167Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Nitro Pro Problem Types: CWE-190 Description: An exploitable code execution vulnerability exists in the way Nitro Pro 13.9.1.155 parses Pattern objects. A specially crafted PDF file can trigger an integer overflow that can lead to arbitrary code execution. In order to trigger this vulnerability, victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1013
CVE ID: CVE-2020-6093 State: PUBLISHED Published: 2020-05-18T16:17:14 Last Updated: 2024-08-04T08:47:41.007Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: n/a Products: Nitro Pro Problem Types: CWE-824 Description: An exploitable information disclosure vulnerability exists in the way Nitro Pro 13.9.1.155 does XML error handling. A specially crafted PDF document can cause uninitialized memory access resulting in information disclosure. In order to trigger this vulnerability, victim must open a malicious file. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1014
CVE ID: CVE-2020-6094 State: PUBLISHED Published: 2020-05-06T12:33:45 Last Updated: 2024-08-04T08:47:41.076Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Accusoft Problem Types: CWE-190 Description: An exploitable code execution vulnerability exists in the TIFF fillinraster function of the igcore19d.dll library of Accusoft ImageGear 19.4, 19.5 and 19.6. A specially crafted TIFF file can cause an out-of-bounds write, resulting in remote code execution. An attacker can provide a malicious file to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TA
Additional Analyst Notes: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2020-1017
CVE ID: CVE-2020-6095 State: PUBLISHED Published: 2020-03-27T19:20:26 Last Updated: 2024-08-04T08:47:41.006Z Severity: HIGH (CVSS 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: n/a Products: GStreamer Problem Types: CWE-690 Description: An exploitable denial of service vulnerability exists in the GstRTSPAuth functionality of GStreamer/gst-rtsp-server 1.14.5. A specially crafted RTSP setup request can cause a null pointer deference resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00029.html - https://
E Program Container: References: - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00029.html - https://security.gentoo.org/glsa/202009-05 - https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1018 - https://gitlab.freedesktop.org/gstreamer/gst-rtsp-server/-/commit/44ccca3086dd81081d72ca0b21d0ecdde962fb1a
CVE ID: CVE-2020-6096 State: PUBLISHED Published: 2020-04-01T00:00:00 Last Updated: 2024-08-04T08:47:40.958Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: GNU glibc Problem Types: CWE-195 Description: An exploitable signed comparison vulnerability exists in the ARMv7 memcpy() implementation of GNU glibc 2.30.9000. Calling memcpy() (on ARMv7 targets that utilize the GNU glibc implementation) with a negative value for the 'num' parameter results in a signed comparison vulnerability. If an attacker underflows the 'num' parameter to memcpy(), this vulnerability could lead to undefined behavior such as writing to out-of-bounds memory and potentially