Browse CVEs

MEDIUM 5.5 CVE-2022-42775 In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. Android Mitigation only Fix from $1,6002022-12-06 MEDIUM 5.5 CVE-2022-39131 In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel. Android Mitigation only Fix from $1,6002022-12-06 MEDIUM 6.5 CVE-2022-24939  A malformed packet containing an invalid destination address, causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to … Gecko Software Development Kit Mitigation only Fix from $1,6002022-11-18 HIGH 8.2 CVE-2022-29279 Use of a untrusted pointer allows tampering with SMRAM and OS memory in SdHostDriver and SdMmcDevice Use of a untrusted pointer allows tampering with… Kernel 5.0.05.09.17 / 5.1.05.17.17+ Fix from $1,9502022-11-15 HIGH 8.2 CVE-2022-29275 In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers could allow OS or SMRAM memory tampering leading to e… Kernel 5.1.05.17.21 / 5.2.05.27.21+ Fix from $1,9502022-11-15 HIGH 7.5 CVE-2022-20947 A vulnerability in dynamic access policies (DAP) functionality of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD)… Adaptive Security Appliance Software Mitigation only Fix from $1,9502022-11-15 HIGH 7.8 CVE-2022-3461 In PHOENIX CONTACT Automationworx Software Suite up to version 1.89 manipulated PC Worx or Config+ files could lead to a heap buffer overflow and a r… Automationworx Software Suite Mitigation only Fix from $1,9502022-11-15 CRITICAL 9.8 CVE-2022-24937 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Silicon Labs Ember ZNet allows Overflow Buffers. Emberznet No fix yet Fix from $2,3002022-11-14 HIGH 7.5 CVE-2022-24938 A malformed packet causes a stack overflow in the Ember ZNet stack. This causes an assert which leads to a reset, immediately clearing the error. Emberznet Mitigation only Fix from $1,9502022-11-14 MEDIUM 5.5 CVE-2022-0137 A heap buffer overflow in image_set_mask function of HTMLDOC before 1.9.15 allows an attacker to write outside the buffer boundaries. Htmldoc 1.9.15+ Fix from $1,6002022-11-14 HIGH 8.8 CVE-2022-3974 A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is the function AP4_StdcFileByteStream::ReadPart… Bento4 No fix yet Fix from $1,9502022-11-13 HIGH 8.1 CVE-2022-3965 A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream of the file libavcodec/smcen… Ffmpeg 5.0.3 / 5.1.3+ Fix from $1,9502022-11-13 HIGH 8.1 CVE-2022-3964 A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the component Qu… Ffmpeg 4.4.4 / 5.0.3+ Fix from $1,9502022-11-13 CRITICAL 9.8 CVE-2022-29486 Improper buffer restrictions in the Hyperscan library maintained by Intel(R) all versions downloaded before 04/29/2022 may allow an unauthenticated u… Hyperscan 5.4.0+ Fix from $2,3002022-11-11 MEDIUM 6.7 CVE-2022-32569 Improper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before version BCTGL357.0074 may allow a privileged user to poten… Nuc M15 Laptop Kit Lapbc510 Firmware Patch available Fix from $1,6002022-11-11 HIGH 7.2 CVE-2022-26045 Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentia… Xmm 7560 Firmware Mitigation only Fix from $1,9502022-11-11 HIGH 7.8 CVE-2022-26124 Improper buffer restrictions in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NUC 8 Rugged Boards and Intel(R) NUC 8 Ru… Nuc 8 Rugged Kit Nuc8cchkrn Firmware Patch available Fix from $1,9502022-11-11 HIGH 8.2 CVE-2022-26367 Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentia… Xmm 7560 Firmware Mitigation only Fix from $1,9502022-11-11 HIGH 7.4 CVE-2022-39392 Wasmtime is a standalone runtime for WebAssembly. Prior to version 2.0.2, there is a bug in Wasmtime's implementation of its pooling instance allocat… Wasmtime 1.0.2 / 2.0.2+ Fix from $1,9502022-11-10 HIGH 7.8 CVE-2022-32588 An out-of-bounds write vulnerability exists in the PICT parsing pctwread_14841 functionality of Accusoft ImageGear 20.0. A specially-crafted malforme… Imagegear No fix yet Fix from $1,9502022-11-09 HIGH 7.8 CVE-2022-41211 Due to lack of proper memory management, when a victim opens manipulated file received from untrusted sources in SAP 3D Visual Enterprise Author and … 3d Visual Enterprise Author Mitigation only Fix from $1,9502022-11-08 CRITICAL 9.1 CVE-2022-24936 Out-of-Bounds error in GBL parser in Silicon Labs Gecko Bootloader version 4.0.1 and earlier allows attacker to overwrite flash Sign key and OTA decr… Gecko Bootloader after 4.0.1 Fix from $2,3002022-11-02 HIGH 7.8 CVE-2022-42809 The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. Processing a maliciously crafted gcx file may lead to… macOS 13.0+ Fix from $1,9502022-11-01 MEDIUM 5.5 CVE-2022-42798 The issue was addressed with improved memory handling. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1,… Ipados 9.1 / 11.7.1+ Fix from $1,6002022-11-01 HIGH 7.8 CVE-2022-32939 The issue was addressed with improved bounds checks. This issue is fixed in iOS 15.7.1 and iPadOS 15.7.1, iOS 16.1 and iPadOS 16. An app may be able … Ipados 15.7.1+ Fix from $1,9502022-11-01 HIGH 7.8 CVE-2022-32940 The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 16.1 and iPadOS 16, macOS Ventura 13, watchOS 9.1. An app … Ipados 9.1 / 13.0+ Fix from $1,9502022-11-01 MEDIUM 6.7 CVE-2022-32926 The issue was addressed with improved bounds checks. This issue is fixed in tvOS 16.1, iOS 15.7.1 and iPadOS 15.7.1, macOS Ventura 13, watchOS 9.1, i… Ipados 9.1 / 13.0+ Fix from $1,6002022-11-01 HIGH 8.8 CVE-2022-32934 The issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS Monterey 12.6. A remote use… macOS 11.7 / 12.6+ Fix from $1,9502022-11-01 HIGH 7.8 CVE-2022-3784 A vulnerability classified as critical was found in Axiomatic Bento4 5e7bb34. Affected by this vulnerability is the function AP4_Mp4AudioDsiParser::R… Bento4 No fix yet Fix from $1,9502022-10-31 HIGH 7.8 CVE-2022-3785 A vulnerability, which was classified as critical, has been found in Axiomatic Bento4. Affected by this issue is the function AP4_DataBuffer::SetData… Bento4 No fix yet Fix from $1,9502022-10-31