Browse CVEs

MEDIUM 5.5 CVE-2023-0796 LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file… Libtiff after 4.4.0 Fix from $1,6002023-02-13 MEDIUM 5.5 CVE-2023-0797 LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing a… Libtiff after 4.4.0 Fix from $1,6002023-02-13 HIGH 7.8 CVE-2023-0817 Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV. Gpac 2.3.0-dev+ Fix from $1,9502023-02-13 HIGH 7.8 CVE-2023-22349 Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when pr… Screen Creator Advance 2 after 0.1.1.4 Fix from $1,9502023-02-13 HIGH 7.8 CVE-2023-22350 Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when pr… Screen Creator Advance 2 after 0.1.1.4 Fix from $1,9502023-02-13 HIGH 7.8 CVE-2023-22353 Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when pr… Screen Creator Advance 2 after 0.1.1.4 Fix from $1,9502023-02-13 HIGH 7.8 CVE-2023-22346 Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when pr… Screen Creator Advance 2 after 0.1.1.4 Fix from $1,9502023-02-13 HIGH 7.8 CVE-2023-22347 Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when pr… Screen Creator Advance 2 after 0.1.1.4 Fix from $1,9502023-02-13 MEDIUM 5.5 CVE-2022-47363 In wlan driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service in wlan services. Android Mitigation only Fix from $1,6002023-02-12 MEDIUM 5.5 CVE-2022-47323 In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services. Android Mitigation only Fix from $1,6002023-02-12 HIGH 7.5 CVE-2022-40512 Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon. Apq8009 Firmware Mitigation only Fix from $1,9502023-02-12 HIGH 7.5 CVE-2022-33271 Information disclosure due to buffer over-read in WLAN while parsing NMF frame. Apq8096au Firmware Mitigation only Fix from $1,9502023-02-12 HIGH 7.5 CVE-2022-33306 Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs. Ar8035 Firmware Mitigation only Fix from $1,9502023-02-12 HIGH 7.5 CVE-2022-34145 Transient DOS due to buffer over-read in WLAN Host while parsing frame information. Csr8811 Firmware Mitigation only Fix from $1,9502023-02-12 HIGH 7.5 CVE-2022-25732 Information disclosure in modem due to buffer over read in dns client due to missing length check Ar8031 Firmware Mitigation only Fix from $1,9502023-02-12 HIGH 7.5 CVE-2022-25738 Information disclosure in modem due to buffer over-red while performing checksum of packet received Ar8031 Firmware No fix yet Fix from $1,9502023-02-12 MEDIUM 5.5 CVE-2022-33221 Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests. Sd 8 Gen1 5g Firmware Mitigation only Fix from $1,6002023-02-12 HIGH 7.5 CVE-2022-33229 Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets. Ar8031 Firmware Mitigation only Fix from $1,9502023-02-12 HIGH 7.5 CVE-2022-25728 Information disclosure in modem due to buffer over-read while processing response from DNS server Ar8031 Firmware Mitigation only Fix from $1,9502023-02-12 HIGH 7.8 CVE-2023-21430 An out-of-bound read vulnerability in mapToBuffer function in libSDKRecognitionText.spensdk.samsung.so library prior to SMR JAN-2023 Release 1 allows… Android Mitigation only Fix from $1,9502023-02-09 MEDIUM 6.5 CVE-2022-48292 The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. Emui Patch available Fix from $1,6002023-02-09 MEDIUM 6.5 CVE-2022-48293 The Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentiality. Emui Patch available Fix from $1,6002023-02-09 HIGH 8.8 CVE-2023-0698 Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted … Chrome 110.0.5481.77+ Fix from $1,9502023-02-07 HIGH 7.5 CVE-2023-24977 Out-of-bounds Read vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.1.0 through 1.5.0. Users are ad… Inlong after 1.5.0 Fix from $1,9502023-02-01 MEDIUM 6.5 CVE-2022-39061 ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for parameter length. An unauthe… Megaservisignadapter 1.0.22.1004+ Fix from $1,6002023-01-31 MEDIUM 5.5 CVE-2022-48303 GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the… Fedora after 1.34 Fix from $1,6002023-01-30 HIGH 7.8 CVE-2022-42417 This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to… Pdf Xchange Editor 9.5.366.0+ Fix from $1,9502023-01-26 HIGH 7.8 CVE-2022-42399 This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to… Pdf Xchange Editor 9.5.366.0+ Fix from $1,9502023-01-26 MEDIUM 5.5 CVE-2022-42401 This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is req… Pdf Xchange Editor 9.5.366.0+ Fix from $1,6002023-01-26 HIGH 7.8 CVE-2022-42402 This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to… Pdf Xchange Editor 9.5.366.0+ Fix from $1,9502023-01-26