Browse CVEs

MEDIUM 6.5 CVE-2023-27353 This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Aut… One Firmware 11.7.1 / 15.1+ Fix from $1,6002023-04-20 HIGH 7.8 CVE-2023-2176 A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-… Linux Kernel 6.1.81 / 6.3+ Fix from $1,9502023-04-20 MEDIUM 5.5 CVE-2023-22295 Datakit CrossCadWare_x64.dll contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This v… Crosscadware 2023.1+ Fix from $1,6002023-04-20 MEDIUM 5.5 CVE-2023-22321 Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This v… Crosscadware 2023.1+ Fix from $1,6002023-04-20 MEDIUM 5.5 CVE-2023-22354 Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This v… Crosscadware 2023.1+ Fix from $1,6002023-04-20 MEDIUM 5.5 CVE-2023-22846 Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This v… Crosscadware 2023.1+ Fix from $1,6002023-04-20 MEDIUM 5.9 CVE-2023-1255 Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it to read past the input buffer,… OpenSSL 3.0.9 / 3.1.1+ Fix from $1,6002023-04-20 MEDIUM 5.5 CVE-2023-21080 In register_notification_rsp of btif_rc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio… Android Mitigation only Fix from $1,6002023-04-19 MEDIUM 5.5 CVE-2023-20935 In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… Android Mitigation only Fix from $1,6002023-04-19 HIGH 7.8 CVE-2023-27906 A malicious actor may convince a victim to open a malicious USD file that may trigger an out-of-bounds read vulnerability which may result in code ex… Maya Usd 0.23.0+ Fix from $1,9502023-04-17 CRITICAL 9.1 CVE-2022-48312 The HwPCAssistant module has the out-of-bounds read/write vulnerability. Successful exploitation of this vulnerability may affect confidentiality and… Emui No fix yet Fix from $2,3002023-04-16 HIGH 7.5 CVE-2023-29089 An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exyn… Exynos 5300 Firmware No fix yet Fix from $1,9502023-04-14 HIGH 7.8 CVE-2023-27915 A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 could lead to memory corruption vulnerability by read access violation. Th… Autocad 2023.1.3+ Fix from $1,9502023-04-14 HIGH 7.8 CVE-2023-27912 A maliciously crafted X_B file when parsed through Autodesk® AutoCAD® 2023 can force an Out-of-Bound Read. A malicious actor can leverage this vulner… Autocad 2023.1.3+ Fix from $1,9502023-04-14 HIGH 7.8 CVE-2023-26409 Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could … Substance 3d Designer after 12.4.0 Fix from $1,9502023-04-13 HIGH 7.8 CVE-2023-26411 Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could … Substance 3d Designer after 12.4.0 Fix from $1,9502023-04-13 HIGH 7.8 CVE-2023-26398 Adobe Substance 3D Designer version 12.4.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could … Substance 3d Designer after 12.4.0 Fix from $1,9502023-04-13 HIGH 7.5 CVE-2022-40503 Information disclosure due to buffer over-read in Bluetooth Host while A2DP streaming. 9206 Lte Modem Firmware Patch available Fix from $1,9502023-04-13 HIGH 7.5 CVE-2022-33295 Information disclosure in Modem due to buffer over-read while parsing the wms message received given the buffer and its length. Mdm8207 Firmware Mitigation only Fix from $1,9502023-04-13 MEDIUM 5.5 CVE-2022-33297 Information disclosure due to buffer overread in Linux sensors Qca6310 Firmware No fix yet Fix from $1,6002023-04-13 HIGH 7.5 CVE-2022-33291 Information disclosure in Modem due to buffer over-read while receiving a IP header with malformed length. 9205 Lte Modem Firmware Mitigation only Fix from $1,9502023-04-13 HIGH 7.5 CVE-2022-33287 Information disclosure in Modem due to buffer over-read while getting length of Unfragmented headers in an IPv6 packet. 9205 Lte Modem Firmware Mitigation only Fix from $1,9502023-04-13 HIGH 7.5 CVE-2022-33258 Information disclosure due to buffer over-read in modem while reading configuration parameters. Mdm8207 Firmware Mitigation only Fix from $1,9502023-04-13 HIGH 7.5 CVE-2022-33222 Information disclosure due to buffer over-read while parsing DNS response packets in Modem. Mdm9205 Firmware Mitigation only Fix from $1,9502023-04-13 HIGH 7.5 CVE-2022-33228 Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by-hop or destination option in header. Mdm8207 Firmware Mitigation only Fix from $1,9502023-04-13 HIGH 7.5 CVE-2022-25747 Information disclosure in modem due to improper input validation during parsing of upcoming CoAP message Mdm8207 Firmware Mitigation only Fix from $1,9502023-04-13 HIGH 7.5 CVE-2022-25730 Information disclosure in modem due to improper check of IP type while processing DNS server query Mdm8207 Firmware Mitigation only Fix from $1,9502023-04-13 HIGH 7.5 CVE-2022-25731 Information disclosure in modem due to buffer over-read while processing packets from DNS server Mdm9205 Firmware Mitigation only Fix from $1,9502023-04-13 HIGH 7.5 CVE-2022-25726 Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet Mdm9205 Firmware Mitigation only Fix from $1,9502023-04-13 HIGH 7.8 CVE-2023-26402 Adobe Substance 3D Stager version 2.0.1 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could res… Substance 3d Stager after 2.0.1 Fix from $1,9502023-04-12