Browse CVEs

CRITICAL 9.8 CVE-2022-25658 Memory corruption due to incorrect pointer arithmetic when attempting to change the endianness in video parser function in Snapdragon Auto, Snapdrago… Apq8009 Firmware Mitigation only Fix from $2,3002022-09-02 HIGH 7.8 CVE-2022-22098 Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon Auto Apq8096au Firmware Mitigation only Fix from $1,9502022-09-02 MEDIUM 6.5 CVE-2021-3826 Heap/stack buffer overflow in the dlang_lname function in d-demangle.c in libiberty allows attackers to potentially cause a denial of service (segmen… Fedora Patch available Fix from $1,6002022-09-01 CRITICAL 9.8 CVE-2020-35527 In SQLite 3.31.1, there is an out of bounds access problem through ALTER TABLE for views that have a nested FROM clause. SQLite Patch available Fix from $2,3002022-09-01 MEDIUM 6.1 CVE-2022-1355 A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main() function. This flaw allows an attacker to pass a crafted TIFF file to the tiff… Fedora 4.4.0+ Fix from $1,6002022-08-31 MEDIUM 5.5 CVE-2022-1115 A heap-buffer-overflow flaw was found in ImageMagick’s PushShortPixel() function of quantum-private.h file. This vulnerability is triggered when an a… Imagemagick 6.9.12-44 / 7.1.0-29+ Fix from $1,6002022-08-29 HIGH 7.8 CVE-2022-0367 A heap-based buffer overflow flaw was found in libmodbus in function modbus_reply() in src/modbus.c. Fedora 3.1.7+ Fix from $1,9502022-08-29 MEDIUM 5.5 CVE-2022-0496 A vulnerbiility was found in Openscad, where a DXF-format drawing with particular (not necessarily malformed!) properties may cause an out-of-bounds … Openscad 2022-02-04+ Fix from $1,6002022-08-29 HIGH 7.8 CVE-2020-27796 A heap-based buffer over-read was discovered in the invert_pt_dynamic function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. Upx No fix yet Fix from $1,9502022-08-25 MEDIUM 5.5 CVE-2020-27797 An invalid memory address reference was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. Upx No fix yet Fix from $1,6002022-08-25 MEDIUM 5.5 CVE-2020-27798 An invalid memory address reference was discovered in the adjABS function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. Upx No fix yet Fix from $1,6002022-08-25 HIGH 7.8 CVE-2020-27799 A heap-based buffer over-read was discovered in the acc_ua_get_be32 function in miniacc.h in UPX 4.0.0 via a crafted Mach-O file. Upx No fix yet Fix from $1,9502022-08-25 HIGH 7.8 CVE-2020-27800 A heap-based buffer over-read was discovered in the get_le32 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. Upx No fix yet Fix from $1,9502022-08-25 HIGH 7.8 CVE-2020-27801 A heap-based buffer over-read was discovered in the get_le64 function in bele.h in UPX 4.0.0 via a crafted Mach-O file. Upx No fix yet Fix from $1,9502022-08-25 MEDIUM 5.5 CVE-2020-27802 An floating point exception was discovered in the elf_lookup function in p_lx_elf.cpp in UPX 4.0.0 via a crafted Mach-O file. Upx No fix yet Fix from $1,6002022-08-25 CRITICAL 9.8 CVE-2022-32839 The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.5, macOS Big Sur 11.6.8, Security Update 2022-005 Catal… Ipados 8.7 / 10.15.7+ Fix from $2,3002022-08-24 HIGH 7.1 CVE-2021-4204 An out-of-bounds (OOB) memory access flaw was found in the Linux kernel's eBPF due to an Improper Input Validation. This flaw allows a local attacker… Linux Kernel 5.8.0+ Fix from $1,9502022-08-24 HIGH 7.8 CVE-2020-35511 A global buffer overflow was discovered in pngcheck function in pngcheck-2.4.0(5 patches applied) via a crafted png file. Debian Linux Mitigation only Fix from $1,9502022-08-23 HIGH 7.1 CVE-2020-27792 A heap-based buffer overwrite vulnerability was found in GhostScript's lp8000_print_page() function in the gdevlp8k.c file. This flaw allows an attac… Debian Linux after 9.50 Fix from $1,9502022-08-19 HIGH 7.8 CVE-2022-28858 Improper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable… Lapbc510 Firmware Patch available Fix from $1,9502022-08-18 HIGH 7.8 CVE-2022-34488 Improper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enabl… Lapbc510 Firmware Patch available Fix from $1,9502022-08-18 MEDIUM 6.5 CVE-2022-37769 libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp. This vulnerability allows attack… Libjpeg No fix yet Fix from $1,6002022-08-18 MEDIUM 6.5 CVE-2022-37770 libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. This vulnerability allows… Libjpeg No fix yet Fix from $1,6002022-08-18 MEDIUM 5.5 CVE-2021-26257 Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow… Wi Fi 6 Ax411 Firmware 22.120+ Fix from $1,6002022-08-18 HIGH 7.8 CVE-2021-33847 Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before version 22.120 may allow… Wi Fi 6 Ax411 Firmware 22.120+ Fix from $1,9502022-08-18 HIGH 7.5 CVE-2022-21160 Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of servic… Wireless Ac 9560 Firmware 22.120+ Fix from $1,9502022-08-18 MEDIUM 5.5 CVE-2020-27787 A Segmentaation fault was found in UPX in invert_pt_dynamic() function in p_lx_elf.cpp. An attacker with a crafted input file allows invalid memory a… Upx 3.96+ Fix from $1,6002022-08-18 MEDIUM 6.5 CVE-2022-35486 OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae. Otfcc No fix yet Fix from $1,6002022-08-16 HIGH 7.5 CVE-2022-38161 The Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other platforms, allows unrestricted remapping of the NOR fla… Overo Sbc after 2022-08-09 Fix from $1,9502022-08-11 CRITICAL 9.8 CVE-2022-29465 An out-of-bounds write vulnerability exists in the PSD Header processing memory allocation functionality of Accusoft ImageGear 20.0. A specially-craf… Imagegear No fix yet Fix from $2,3002022-08-05