Browse CVEs

CRITICAL 9.1 CVE-2023-33058 Information disclosure in Modem while processing SIB5. Ar8035 Firmware Mitigation only Fix from $2,3002024-02-06 MEDIUM 5.5 CVE-2023-33060 Transient DOS in Core when DDR memory check is called while DDR is not initialized. Ar8035 Firmware Mitigation only Fix from $1,6002024-02-06 MEDIUM 5.5 CVE-2023-33064 Transient DOS in Audio when invoking callback function of ASM driver. Aqt1000 Firmware No fix yet Fix from $1,6002024-02-06 HIGH 7.1 CVE-2023-33065 Information disclosure in Audio while accessing AVCS services from ADSP payload. Aqt1000 Firmware Mitigation only Fix from $1,9502024-02-06 HIGH 7.1 CVE-2024-20820 Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Out-Of-Bounds read. Android Mitigation only Fix from $1,9502024-02-06 MEDIUM 5.5 CVE-2024-20814 Out-of-bounds Read in padmd_vld_ac_prog_refine of libpadm.so prior to SMR Feb-2024 Release 1 allows local attackers access unauthorized information. Android Mitigation only Fix from $1,6002024-02-06 HIGH 7.5 CVE-2023-6387 A potential buffer overflow exists in the Bluetooth LE HCI CPC sample application in the Gecko SDK which may result in a denial of service or remote … Gecko Software Development Kit 4.4.0+ Fix from $1,9502024-02-02 MEDIUM 5.5 CVE-2023-49118 in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read. Openharmony after 3.2.4 Fix from $1,6002024-02-02 MEDIUM 5.5 CVE-2023-43756 in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read. Openharmony after 3.2.4 Fix from $1,6002024-02-02 HIGH 7.8 CVE-2023-46045 Graphviz 2.36.0 through 9.x before 10.0.1 has an out-of-bounds read via a crafted config6a file. NOTE: exploitability may be uncommon because this fi… Graphviz 10.0.0+ Fix from $1,9502024-02-02 MEDIUM 5.5 CVE-2023-40549 An out-of-bounds read flaw was found in Shim due to the lack of proper boundary verification during the load of a PE binary. This flaw allows an atta… Shim 15.8+ Fix from $1,6002024-01-29 MEDIUM 5.5 CVE-2023-40550 An out-of-bounds read flaw was found in Shim when it tried to validate the SBAT information. This issue may expose sensitive data during the system's… Shim 15.8+ Fix from $1,6002024-01-29 MEDIUM 5.1 CVE-2023-40551 A flaw was found in the MZ binary format in Shim. An out-of-bounds read may occur, leading to a crash or possible exposure of sensitive data during t… Shim 15.8+ Fix from $1,6002024-01-29 CRITICAL 9.1 CVE-2021-42147 Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cau… Tinydtls Mitigation only Fix from $2,3002024-01-24 CRITICAL 9.8 CVE-2021-42144 Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input t… Contiki Ng Tinydtls after 2018-08-30 Fix from $2,3002024-01-24 HIGH 7.8 CVE-2024-22705 An issue was discovered in ksmbd in the Linux kernel before 6.6.10. smb2_get_data_area_len in fs/smb/server/smb2misc.c can cause an smb_strndup_from_… Linux Kernel 6.6.10+ Fix from $1,9502024-01-23 HIGH 7.5 CVE-2023-39197 An out-of-bounds read vulnerability was found in Netfilter Connection Tracking (conntrack) in the Linux kernel. This flaw allows a remote user to dis… Linux Kernel 5.4.251 / 5.10.188+ Fix from $1,9502024-01-23 MEDIUM 5.5 CVE-2024-22957 swftools 0.9.2 was discovered to contain an Out-of-bounds Read vulnerability via the function dict_do_lookup in swftools/lib/q.c:1190. Swftools No fix yet Fix from $1,6002024-01-19 MEDIUM 5.5 CVE-2023-48341 In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additio… Android Mitigation only Fix from $1,6002024-01-18 MEDIUM 5.5 CVE-2023-48344 In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additio… Android Mitigation only Fix from $1,6002024-01-18 MEDIUM 5.5 CVE-2023-48345 In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additio… Android No fix yet Fix from $1,6002024-01-18 MEDIUM 5.5 CVE-2023-48347 In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with no additio… Android No fix yet Fix from $1,6002024-01-18 HIGH 8.8 CVE-2024-0519 KEV Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 7.2.5 / 120.0.6099.224+ Fix from $1,9502024-01-16 MEDIUM 6.5 CVE-2023-45229 EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertise message… Edk2 after 202311 Fix from $1,6002024-01-16 MEDIUM 6.5 CVE-2023-45231 EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing  Neighbor Discovery Redirect message. This vulnerabili… Edk2 after 202311 Fix from $1,6002024-01-16 HIGH 7.5 CVE-2023-44112 Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentiality. Emui No fix yet Fix from $1,9502024-01-16 CRITICAL 9.6 CVE-2024-21640 Chromium Embedded Framework (CEF) is a simple framework for embedding Chromium-based browsers in other applications.`CefVideoConsumerOSR::OnFrameCapt… Chromium Embedded Framework 2024-01-05+ Fix from $2,3002024-01-13 CRITICAL 9.6 CVE-2024-21639 CEF (Chromium Embedded Framework ) is a simple framework for embedding Chromium-based browsers in other applications. `CefLayeredWindowUpdaterOSR::On… Chromium Embedded Framework 2024-01-05+ Fix from $2,3002024-01-12 HIGH 7.8 CVE-2023-6040 An out-of-bounds access vulnerability involving netfilter was reported and fixed as: f1082dd31fe4 (netfilter: nf_tables: Reject tables of unsupported… Linux Kernel 4.19.305 / 5.4.267+ Fix from $1,9502024-01-12 MEDIUM 6.5 CVE-2023-42862 An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, tvOS 16.4, iOS 16.4 and iPadOS 16.4, w… Ipados 9.4 / 13.3+ Fix from $1,6002024-01-10