Browse CVEs

HIGH 7.8 CVE-2023-33106 KEV Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND. Ar8035 Firmware Patch available Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-33079 Memory corruption in Audio while running invalid audio recording from ADSP. Ar8035 Firmware Patch available Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-28551 Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502023-12-05 HIGH 8.8 CVE-2023-28585 Memory corruption while loading an ELF segment in TEE Kernel. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502023-12-05 MEDIUM 6.5 CVE-2023-28586 Information disclosure when the trusted application metadata symbol addresses are accessed while loading an ELF in TEE. 315 5g Iot Modem Firmware Mitigation only Fix from $1,6002023-12-05 HIGH 7.8 CVE-2023-28587 Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-21634 Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM. Aqt1000 Firmware Mitigation only Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-28550 Memory corruption in MPP performance while accessing DSM watermark using external memory address. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-45168 IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary comman… Vios Mitigation only Fix from $1,9502023-12-01 CRITICAL 9.8 CVE-2023-49701 Memory Corruption in SIM management while USIMPhase2init Asr1803 Firmware No fix yet Fix from $2,3002023-11-30 HIGH 7.8 CVE-2023-49699 Memory Corruption in IMS while calling VoLTE Streamingmedia Interface Asr1806 Firmware No fix yet Fix from $1,9502023-11-30 CRITICAL 9.8 CVE-2023-29076 A maliciously crafted MODEL, SLDASM, SAT or CATPART file when parsed through Autodesk AutoCAD 2024 and 2023 could cause memory corruption vulnerabili… Autocad 2023.1.4 / 2024.1+ Fix from $2,3002023-11-23 HIGH 7.8 CVE-2023-41139 A maliciously crafted STP file when parsed through Autodesk AutoCAD 2024 and 2023 can be used to dereference an untrusted pointer. This vulnerability… Autocad 2023.1.4 / 2024.1+ Fix from $1,9502023-11-23 HIGH 7.8 CVE-2021-38405 The Datalogics APDFL library used in affected products is vulnerable to memory corruption condition while parsing specially crafted PDF files. An att… Jt2go 13.1.0.8 / 13.2.0.7+ Fix from $1,9502023-11-21 HIGH 7.8 CVE-2023-47580 Multiple improper restriction of operations within the bounds of a memory buffer issues exist in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17… Tellus after 4.0.17.0 Fix from $1,9502023-11-15 MEDIUM 6.7 CVE-2022-29510 Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially en… Compute Module Hns2600bp Firmware 02.01.0015+ Fix from $1,6002023-11-14 MEDIUM 5.5 CVE-2021-46748 Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissible to a … Radeon Rx Vega M Firmware 23.q3 / 23.7.1+ Fix from $1,6002023-11-14 HIGH 7.8 CVE-2023-36033 KEVEPSS 12% Windows DWM Core Library Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.5122 / 10.0.19041.3693+ Fix from $1,9502023-11-14 CRITICAL 9.8 CVE-2023-31247 A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafte… Gecko Software Development Kit No fix yet Fix from $2,3002023-11-14 CRITICAL 9.8 CVE-2023-28379 A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted netw… Gecko Software Development Kit No fix yet Fix from $2,3002023-11-14 CRITICAL 9.8 CVE-2023-28391 A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted netwo… Gecko Software Development Kit No fix yet Fix from $2,3002023-11-14 CRITICAL 9.8 CVE-2023-24585 An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafted network packet … Gecko Software Development Kit No fix yet Fix from $2,3002023-11-14 MEDIUM 6.7 CVE-2023-4949 An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way… Grub after 0.97 Fix from $1,6002023-11-10 HIGH 7.8 CVE-2023-3889 A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to … Valhall Gpu Kernel Driver Mitigation only Fix from $1,9502023-11-07 HIGH 7.8 CVE-2023-28545 Memory corruption in TZ Secure OS while loading an app ELF. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502023-11-07 MEDIUM 6.4 CVE-2023-40661 Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user … Enterprise Linux after 0.23.0 Fix from $1,6002023-11-06 MEDIUM 5.5 CVE-2022-4900 A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow. PHP 8.0.22+ Fix from $1,6002023-11-02 HIGH 7.5 CVE-2023-4967 Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual… Netscaler Application Delivery Controller 13.0-92.19 / 13.1-49.15+ Fix from $1,9502023-10-27 MEDIUM 6.5 CVE-2023-41983 The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 … Safari 14.1 / 16.7.2+ Fix from $1,6002023-10-25 HIGH 7.8 CVE-2023-42841 The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1, iOS 16.7.2 and iPadOS 16.7… Ipados 13.6.1 / 14.1+ Fix from $1,9502023-10-25