Xiaobye

A heap-based buffer overflow occurs in the Windows Virtualization-Based Security (VBS) Enclave. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated memory block than it can hold.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This issue can lead to unauthorized read, update, insert, or delete access to certain accessible data. Additionally, it may allow an attacker to cause a partial denial of service (partial DOS), which is a condition where some or all services of the software become unavailable to users. The impact of an attack may extend beyond the software to affect additional products.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This issue can lead to unauthorized access to critical data or complete access to all accessible data within the environment. The attack may also significantly impact additional products due to a scope change.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This issue can lead to unauthorized access to critical data or complete access to all accessible data within the environment. The attack may also significantly impact additional products due to a scope change.

An issue exists in the VMSVGA device component of Oracle VM VirtualBox. A high-privileged attacker with logon access to the infrastructure where the software executes can compromise the system, potentially leading to a full takeover of Oracle VM VirtualBox. This exploit may also significantly impact additional products due to a scope change.

A difficult to exploit issue exists within the Core component of Oracle VM VirtualBox. A highly privileged attacker with access to the system where Oracle VM VirtualBox is running can compromise the software. Successful exploitation can lead to a takeover of Oracle VM VirtualBox and may significantly impact other products.

Name of the Vulnerable Software and Affected Versions: Ameba-AIoT ameba-arduino-d versions prior to 3.1.9 ameba-rtos-d versions prior to commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a Description: A heap-based buffer overflow exists in the WLAN driver defragment function due to a lack of validation of the size of fragmented Wi-Fi frames. Recommendations: Update Ameba-AIoT ameba-arduino-d to version 3.1.9 or later. Update ameba-rtos-d to commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a or later.

A Buffer Copy without Checking Size of Input, also known as a 'Classic Buffer Overflow', vulnerability in Apache NimBLE could result in memory corruption when a specially crafted MESH message is used and a non-default build configuration is applied. Users are recommended to upgrade to a newer version to fix the issue.

The issue allows a remote attacker to execute arbitrary code via the `pb adv handle tranaction cont` function in the src/mesh/pb adv.c component. This is a Buffer Overflow vulnerability.

The issue is related to a buffer overflow in the memory of the TP-Link Archer AX21 router's firmware. This can allow a remote attacker to execute arbitrary code.

The issue is caused by a buffer overflow in the tdpServer microprogram of TP-Link Archer AX21 routers. This allows a remote attacker to execute arbitrary code on affected installations. The flaw exists within the logging functionality of the tdpServer program, which listens on UDP port 20002. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Authentication is not required to exploit this vulnerability.