CWE-367: TOCTTOU
The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.
Also known as Time-of-check Time-of-use (TOCTOU) Race Condition, TOCCTOU.
A kind of CWE-362 Race Condition.
From the CWE List. © The MITRE Corporation.
Newest
- insyde kernelDMA transactions which are targeted at input buffers used for the NvmExpressDxe software SMI...7.0 High
- insyde kernelDMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI...7.0 High
- insyde kernelDMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI...7.0 High
- insyde kernelDMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead...6.4 Medium
- insyde kernelDMA transactions which are targeted at input buffers used for the HddPassword software SMI...7.0 High
- insyde kernelDMA transactions which are targeted at input buffers used for the SdHostDriver software SMI...7.0 High
- insyde kernelDMA transactions which are targeted at input buffers used for the software SMI handler used by...6.4 Medium
- insyde kernelDMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI...6.4 Medium
- insyde kernelDMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler...7.0 High
- insyde kernelDMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software...6.4 Medium
- insyde kernelDMA attacks on the parameter buffer used by a software SMI handler used by the driver PcdSmmDxe...6.4 Medium
- insyde kernelUpdate description and links DMA transactions which are targeted at input buffers used for the...6.4 Medium
- insyde kernelDMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after...6.4 Medium
- insyde kernelDMA attacks on the parameter buffer used by the IhisiSmm driver could change the contents after...6.4 Medium
- intel celeron 1000m firmware, celeron 1005m firmware, celeron 1007u firmware +458 more +460 moreTime-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may...7.9 High
- google android, mediatek, inc. mt6893, mt6895 +1 moreIn jpeg, there is a possible use after free due to a race condition. This could lead to local...6.4 Medium
- alpine project alpineAlpine before 2.25 allows remote attackers to cause a denial of service (daemon crash) when LIST...5.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: In a BGP multipath scenario, when one of the contributing routes is flapping often and rapidly, rpd may crash5.9 Medium
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: Due to a race condition the rpd process can crash upon receipt of a BGP update message containing flow spec route5.9 Medium
- trend micro apex oneA Time-of-Check Time-Of-Use vulnerability in the Trend Micro Apex One Vulnerability Protection...7.0 High
go.etcd.io/etcd/v3Goetcd vulnerable to TOCTOU of gateway endpoint authenticationNo score- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, qam8295p firmware +100 more +102 moreMemory corruption in display due to time-of-check time-of-use of metadata reserved size in...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8053 firmware, aqt1000 firmware +90 more +92 moreMemory corruption in display due to time-of-check time-of-use race condition during map or unmap...8.4 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 morememory corruption in Kernel due to race condition while getting mapping reference in Snapdragon...7.8 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 moreMemory corruption or temporary denial of service due to improper handling of concurrent...7.8 High
- dell alienware m15 r6 firmware, chengming 3980 firmware, chengming 3988 firmware +397 more +399 moreDell BIOS contains a race condition vulnerability. A local attacker could exploit this...6.1 Medium
- red hat, inc. rpm, fedoraproject fedora, redhat enterprise linux +2 moreA race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to...6.4 Medium
- cisco nexus dashboardCisco Nexus Dashboard Privilege Escalation Vulnerabilities6.0 Medium
- cisco nexus dashboardCisco Nexus Dashboard Privilege Escalation Vulnerabilities6.0 Medium
- cisco nexus dashboardCisco Nexus Dashboard Privilege Escalation Vulnerabilities6.0 Medium
- cisco nexus dashboardCisco Nexus Dashboard Privilege Escalation Vulnerabilities6.0 Medium
- microsoft accessThis vulnerability allows local attackers to escalate privileges on affected installations of...7.0 High
- parallels desktopThis vulnerability allows local attackers to escalate privileges on affected installations of...7.8 High
- google android, samsung mobile devices +1 moreA possible race condition vulnerability in score driver prior to SMR Jul-2022 Release 1 can allow...6.2 Medium
- automoxThe Automox Agent installation package before 37 on macOS allows an unprivileged user to obtain...7.0 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +62 more +64 moreImproper integrity check can lead to race condition between tasks PDCP and RRC? right after a...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +62 more +64 moreImproper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +93 more +95 moreImproper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC...9.1 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +54 more +56 morePossible hypervisor memory corruption due to TOC TOU race condition when updating address...9.3 Critical
- qualcomm, inc. snapdragon industrial iot, qualcomm mdm9206 firmware, qca9367 firmware +1 more +3 moreImproper integrity check can lead to race condition between tasks PDCP and RRC? right after a...9.1 Critical
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm ar8035 firmware, qca6390 firmware +36 more +38 moreImproper validation of tag id while RRC sending tag id to MAC can lead to TOCTOU race condition...7.5 High
- linux kernelA use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race...4.1 Medium
- quickheal total securityTOCTOU Vulnerability in Quick Heal Total Security7.9 High
- lenovo imcontroller, system interface foundation +1 moreA Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software...7.8 High
- lenovo imcontroller, system interface foundation +1 moreA race condition vulnerability was reported in IMController, a software component of Lenovo...7.8 High
- apport, canonical ubuntu linux +1 moreThere is a race condition in the 'replaced executable' detection that, with the correct local...7.8 High
- amd epyc 7002 firmware, epyc 7232p firmware, epyc 7252 firmware +47 more +49 moreTOCTOU (time-of-check to time-of-use) issue in the System Management Unit (SMU) may result in a...4.7 Medium
- amd epyc 7232p firmware, epyc 7252 firmware, epyc 7262 firmware +42 more +44 moreA TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a...4.7 Medium
- gruntjs grunt, gruntjs/grunt +1 morefile.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in gruntjs/grunt7.8 High
- google android, mediatek, inc. mt6580, mt6735, mt6737, mt6739, mt6750, mt6750s, mt6753, mt6757, mt6757c, mt6757cd, mt6757ch, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6797, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6883, mt6885, mt6889, mt6893, mt8167, mt8168, mt8173, mt8185, mt8321, mt8362a, mt8365, mt8385, mt8666, mt8675, mt8695, mt8696, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn ion, there is a possible use after free due to a race condition. This could lead to local...7.0 High
- Show moreLoading…