CVE-2020-3981

MEDIUM Year: 2020
CVSS v3 Score
5.8
Medium
CVSS v2 Score
3.5
Low
Weakness Type
CWE-125
View all →

Vulnerability Description

VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an out-of-bounds read vulnerability due to a time-of-check time-of-use issue in ACPI device. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.

Related Vulnerabilities

CVE-2020-28915

MEDIUM
CVSS:5.8(Medium)

A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.

CWE-1252020

CVE-2023-39176

MEDIUM
CVSS:5.8(Medium)

A flaw was found within the parsing of SMB2 requests that have a transform header in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied data, which can resu...

CWE-1252023

CVE-2024-8929

MEDIUM
CVSS:5.8(Medium)

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, a hostile MySQL server can cause the client to disclose the content of its heap containing data from other SQL requests a...

CWE-1252024

CVE-2017-13317

MEDIUM
CVSS:5.7(Medium)

In HeifDecoderImpl::getScanline of HeifDecoderImpl.cpp, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional exe...

CWE-1252017

CVE-2017-13318

MEDIUM
CVSS:5.7(Medium)

In HeifDataSource::readAt of HeifDecoderImpl.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privi...

CWE-1252017

CVE-2018-11293

MEDIUM
CVSS:5.7(Medium)

In all android releases (Android for MSM, Firefox OS for MSM, QRD Android) from CAF using the linux kernel, in wma_ndp_confirm_event_handler and wma_ndp_indication_event_handler, ndp_cfg len and num_n...

CWE-1252018