Browse CVEs

HIGH 7.8 CVE-2024-25992 In tmu_tz_control of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege wi… Android Mitigation only Fix from $1,9502024-03-11 HIGH 7.8 CVE-2024-26608 In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix global oob in ksmbd_nl_policy Similar to a reported issue (check the… Linux Kernel 5.15.149 / 6.1.76+ Fix from $1,9502024-03-11 MEDIUM 6.5 CVE-2024-0045 In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote (proximal/adjac… Android Patch available Fix from $1,6002024-03-11 MEDIUM 5.5 CVE-2024-23264 A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, mac… Ipados 1.1 / 12.7.4+ Fix from $1,6002024-03-08 HIGH 7.8 CVE-2024-23258 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.4, visionOS 1.1. Processing an image may l… macOS 1.1 / 14.4+ Fix from $1,9502024-03-08 HIGH 8.8 CVE-2023-51395 The vulnerability described by CVE-2023-0972 has been additionally discovered in Silicon Labs Z-Wave end devices. This vulnerability may allow an una… Mitigation only Fix from $1,9502024-03-07 HIGH 7.1 CVE-2023-52598 In the Linux kernel, the following vulnerability has been resolved: s390/ptrace: handle setting of fpc register correctly If the content of the flo… Linux Kernel 4.19.307 / 5.4.269+ Fix from $1,9502024-03-06 MEDIUM 6.2 CVE-2024-26334 swftools v0.9.2 was discovered to contain a segmentation violation via the function compileSWFActionCode at swftools/lib/action/actioncompiler.c. Swftools No fix yet Fix from $1,6002024-03-05 MEDIUM 5.5 CVE-2024-20836 Out of bounds Read vulnerability in ssmis_get_frm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local attackers to read out of bounds … Android Mitigation only Fix from $1,6002024-03-05 HIGH 7.1 CVE-2021-47097 In the Linux kernel, the following vulnerability has been resolved: Input: elantech - fix stack out of bound access in elantech_change_report_id() … Linux Kernel 5.4.169 / 5.10.89+ Fix from $1,9502024-03-04 HIGH 7.1 CVE-2021-47102 In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: fix incorrect structure access In line: upper = info->… Linux Kernel 5.15.12+ Fix from $1,9502024-03-04 HIGH 7.1 CVE-2021-47083 In the Linux kernel, the following vulnerability has been resolved: pinctrl: mediatek: fix global-out-of-bounds issue When eint virtual eint number… Linux Kernel 5.4.169 / 5.10.89+ Fix from $1,9502024-03-04 HIGH 7.5 CVE-2023-43539 Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame. Ar8035 Firmware No fix yet Fix from $1,9502024-03-04 MEDIUM 5.5 CVE-2023-33090 Transient DOS while processing channel information for speaker protection v2 module in ADSP. Ar8035 Firmware Patch available Fix from $1,6002024-03-04 MEDIUM 5.5 CVE-2023-33078 Information Disclosure while processing IOCTL request in FastRPC. Fastconnect 6700 Firmware No fix yet Fix from $1,6002024-03-04 MEDIUM 5.5 CVE-2023-49602 in OpenHarmony v3.2.4 and prior versions allow a local attacker cause apps crash through type confusion. Openharmony after 3.2.4 Fix from $1,6002024-03-04 MEDIUM 5.5 CVE-2023-25176 in OpenHarmony v3.2.4 and prior versions allow a local attacker cause information leak through out-of-bounds Read. Openharmony after 3.2.4 Fix from $1,6002024-03-04 MEDIUM 6.7 CVE-2024-20022 In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execut… Yocto Mitigation only Fix from $1,6002024-03-04 HIGH 7.1 CVE-2023-52519 In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit The EHL (Elkhart Lak… Linux Kernel 5.15.135 / 6.1.57+ Fix from $1,9502024-03-02 HIGH 7.1 CVE-2023-52525 In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet Only skip t… Linux Kernel 5.10.198 / 5.15.135+ Fix from $1,9502024-03-02 HIGH 7.1 CVE-2023-52565 In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix OOB read If the index provided by the user is bigger than … Linux Kernel 6.1.56 / 6.5.6+ Fix from $1,9502024-03-02 HIGH 7.1 CVE-2023-52501 In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not attempt to read past "commit" When iterating over the ring … Linux Kernel 5.10.198 / 5.15.134+ Fix from $1,9502024-03-02 HIGH 7.1 CVE-2023-52504 In the Linux kernel, the following vulnerability has been resolved: x86/alternatives: Disable KASAN in apply_alternatives() Fei has reported that K… Linux Kernel 4.19.297 / 5.4.270+ Fix from $1,9502024-03-02 HIGH 7.1 CVE-2023-52507 In the Linux kernel, the following vulnerability has been resolved: nfc: nci: assert requested protocol is valid The protocol is used in a bit mask… Linux Kernel 4.14.328 / 4.19.297+ Fix from $1,9502024-03-02 HIGH 7.5 CVE-2024-1869 Certain HP DesignJet print products are potentially vulnerable to information disclosure related to accessing memory out-of-bounds when using the gen… Cq893c Firmware Mitigation only Fix from $1,9502024-03-01 HIGH 8.2 CVE-2023-7242 Industrial Control Systems Network Protocol Parsers (ICSNPP) - Ethercat Zeek Plugin versions d78dda6 and prior are vulnerable to out-of-bounds read… Icsnpp Ethercat Mitigation only Fix from $1,9502024-03-01 HIGH 7.8 CVE-2024-1453 In Sante DICOM Viewer Pro versions 14.0.3 and prior, a user must open a malicious DICOM file, which could allow a local attacker to disclose informat… Dicom Viewer Pro 14.0.4+ Fix from $1,9502024-03-01 MEDIUM 5.5 CVE-2023-44342 Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclo… Indesign 18.5.1+ Fix from $1,6002024-02-29 MEDIUM 5.5 CVE-2023-44343 Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclo… Indesign 18.5.1+ Fix from $1,6002024-02-29 MEDIUM 5.5 CVE-2023-44344 Adobe InDesign versions ID18.5 (and earlier) and ID17.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclo… Indesign 18.5.1+ Fix from $1,6002024-02-29