Xiaobye_Tw

A heap-based buffer overflow occurs in the Windows Virtualization-Based Security (VBS) Enclave. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based buffer overflow is a memory corruption error that happens when a program writes more data to a heap-allocated memory block than it can hold.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This issue can lead to unauthorized access to critical data or complete access to all accessible data within the environment. The attack may also significantly impact additional products due to a scope change.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This issue can lead to unauthorized access to critical data or complete access to all accessible data within the environment. The attack may also significantly impact additional products due to a scope change.

A flaw in the Core component allows a high privileged attacker with access to the infrastructure where the software executes to compromise the system. This issue can lead to unauthorized read, update, insert, or delete access to certain accessible data. Additionally, it may allow an attacker to cause a partial denial of service (partial DOS), which is a condition where some or all services of the software become unavailable to users. The impact of an attack may extend beyond the software to affect additional products.

Name of the Vulnerable Software and Affected Versions: Ameba-AIoT ameba-arduino-d versions prior to 3.1.9 ameba-rtos-d versions prior to commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a Description: A heap-based buffer overflow exists in the WLAN driver defragment function due to a lack of validation of the size of fragmented Wi-Fi frames. Recommendations: Update Ameba-AIoT ameba-arduino-d to version 3.1.9 or later. Update ameba-rtos-d to commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a or later.

An access control issue in /usr/sbin/httpd allows attackers to bypass authentication on any endpoint via a crafted URL.