
CVE-2024-53107 – fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args()
https://notcve.org/view.php?id=CVE-2024-53107
02 Dec 2024 — In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() The "arg->vec_len" variable is a u64 that comes from the user at the start of the function. In the Linux kernel, the following vulnerability has been resolved: fs/proc/task_mmu: prevent integer overflow in pagemap_scan_get_args() The "arg->vec_len" variable is a u64 that comes from the user at the start of the function. The "arg->vec_len * size... • https://git.kernel.org/stable/c/52526ca7fdb905a768a93f8faa418e9b988fc34b •

CVE-2024-33063 – Integer Overflow or Wraparound in WLAN Host Communication
https://notcve.org/view.php?id=CVE-2024-33063
02 Dec 2024 — Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present. DOS transitorio mientras se analiza el ML IE cuando una baliza con una longitud de información común del ML IE es mayor que el ML IE dentro del cual está presente este elemento. • https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html • CWE-190: Integer Overflow or Wraparound •

CVE-2024-11950 – XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2024-11950
02 Dec 2024 — XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. ... The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. ... The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. • https://www.zerodayinitiative.com/advisories/ZDI-24-1640 • CWE-191: Integer Underflow (Wrap or Wraparound) •

CVE-2024-36618
https://notcve.org/view.php?id=CVE-2024-36618
29 Nov 2024 — FFmpeg n6.1.1 has a vulnerability in the AVI demuxer of the libavformat library which allows for an integer overflow, potentially resulting in a denial-of-service (DoS) condition. • https://gist.github.com/1047524396/a148f3679415a6da53ca112eb2ba1523 • CWE-190: Integer Overflow or Wraparound •

CVE-2024-36671
https://notcve.org/view.php?id=CVE-2024-36671
29 Nov 2024 — nodemcu before v3.0.0-release_20240225 was discovered to contain an integer overflow via the getnum function at /modules/struct.c. • https://github.com/nodemcu/nodemcu-firmware/commit/193fe3593eb1537667179089535cdb7457327887#diff-5c3fa597431eda03ac3339ae6bf7f05e1a50d6fc7333679ec38e21b337cb6721 • CWE-190: Integer Overflow or Wraparound •

CVE-2024-35369
https://notcve.org/view.php?id=CVE-2024-35369
29 Nov 2024 — This vulnerability could lead to integer overflow conditions, potentially resulting in undefined behavior or crashes during the decoding process. • https://gist.github.com/1047524396/455093807666f2e351d674750c8cd0b8 • CWE-190: Integer Overflow or Wraparound •

CVE-2024-36616
https://notcve.org/view.php?id=CVE-2024-36616
29 Nov 2024 — An integer overflow in the component /libavformat/westwood_vqa.c of FFmpeg n6.1.1 allows attackers to cause a denial of service in the application via a crafted VQA file. • https://gist.github.com/1047524396/ded3e1509d8296ec4a91817867d108e0 • CWE-190: Integer Overflow or Wraparound •

CVE-2024-36619
https://notcve.org/view.php?id=CVE-2024-36619
29 Nov 2024 — FFmpeg n6.1.1 has a vulnerability in the WAVARC decoder of the libavcodec library which allows for an integer overflow when handling certain block types, leading to a denial-of-service (DoS) condition. • https://gist.github.com/1047524396/fad68e8251f4e34a1bb838de697d5119 • CWE-190: Integer Overflow or Wraparound •

CVE-2024-36617 – Ubuntu Security Notice USN-7188-1
https://notcve.org/view.php?id=CVE-2024-36617
29 Nov 2024 — FFmpeg n6.1.1 has an integer overflow vulnerability in the FFmpeg CAF decoder. It was discovered that FFmpeg incorrectly handled certain input, which could lead to an integer overflow. • https://gist.github.com/1047524396/f20749f8addc8f86de9cfacf17ba29df • CWE-190: Integer Overflow or Wraparound •

CVE-2024-35366
https://notcve.org/view.php?id=CVE-2024-35366
29 Nov 2024 — FFmpeg n6.1.1 is Integer Overflow. • https://gist.github.com/1047524396/1e72f170d58c2547ebd4db4cdf6cfabf • CWE-190: Integer Overflow or Wraparound •