Daniel Rhea

Processing maliciously crafted web content may lead to an unexpected process crash due to improper memory handling.

Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.0 through 3.6 Description Processing a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo can lead to a NULL pointer dereference. This can cause applications that process attacker-controlled CMS data to crash before authentication or cryptographic operations, resulting in a Denial of Service. The issue occurs when the optional parameters field of KeyEncryptionAlgorithmIdentifier is examined without checking for its presence, leading to a NULL pointer dereference if the field is missing. Applications and services calling CMS decrypt() on untrusted input, such as S/MIME processing or CMS-based protocols, are affected. Recommendations Update to a version after 3.6. As a temporary workaround, avoid processing untrusted CMS EnvelopedData messages with KeyAgreeRecipientInfo.

An uncontrolled DLL loading path issue exists in AsusSoftwareManagerAgent. A local attacker may be able to influence the application to load a DLL from a location controlled by the attacker, potentially leading to arbitrary code execution. The vulnerability involves the application’s handling of DLL loading paths, allowing an attacker to specify a malicious DLL to be loaded.

The NVIDIA Display Driver contains a flaw where an uncontrolled DLL loading path can be exploited. This could lead to arbitrary denial of service, escalation of privileges, code execution, and data tampering. The issue involves the potential to hijack DLLs, allowing attackers to load malicious code with elevated privileges.

The issue is related to insufficient policy enforcement in the File System API, allowing a remote attacker to bypass file system restrictions. This can be achieved via a crafted HTML page. The estimated number of potentially affected devices and details about real-world incidents are not provided.