3 reportsPriority Medium
Out-of-bounds write vulnerabilities reported
Several out-of-bounds write vulnerabilities have been disclosed, with reports of active exploitation. UK organisations should assess their exposure to these issues.
First report Latest
What is going on
- A vulnerability in Samsung Mobile Devices allowing out-of-bounds writes was reported with evidence of real-world exploitation.
- An out-of-bounds write vulnerability in WatchGuard Firebox OS was also disclosed, with CISA noting active exploitation.
- A separate out-of-bounds write vulnerability in Windows Paint was addressed by Microsoft through a new software release.
- What to watch: Further details about the extent of exploitation and additional affected systems could change the assessment.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority MediumType VulnerabilityLead report
WatchGuard Firebox Out of Bounds Write Vulnerability
- Priority MediumType Vulnerability
Samsung Mobile Devices Out-of-Bounds Write Vulnerability
- Priority LowType Vulnerability
Out-of-bounds read in Windows Paint allows an unauthorized attacker to execute code over a network