Browse CVEs

MEDIUM 6.8 CVE-2024-37086 VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with an exist… Cloud Foundation 5.2+ Fix from $1,6002024-06-25 HIGH 7.8 CVE-2024-36999 A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write. A malicious actor can l… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-37005 A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can leve… Advance Steel 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23152 A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Read. A malicious actor can le… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23153 A maliciously crafted MODEL file, when parsed in libodx.dll through Autodesk applications, can force an Out-of-Bounds Read. A malicious actor can lev… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23145 A maliciously crafted PRT file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can lev… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23149 A maliciously crafted SLDDRW file, when parsed in ODXSW_DLL.dll through Autodesk applications, can force an Out-of-Bound Read. A malicious actor can … Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23143 A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-… Autocad Map 3d 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-23140 A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atf_api.dll through Autodesk applications, can force an Out-of-Bound Read.… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 8.1 CVE-2024-38373 FreeRTOS-Plus-TCP is a lightweight TCP/IP stack for FreeRTOS. FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0 contain a buffer over-read issue in the … Freertos Plus Tcp 4.1.1+ Fix from $1,9502024-06-24 HIGH 7.8 CVE-2024-36477 In the Linux kernel, the following vulnerability has been resolved: tpm_tis_spi: Account for SPI header when allocating TPM SPI xfer buffer The TPM… Linux Kernel 6.6.33 / 6.9.4+ Fix from $1,9502024-06-21 HIGH 7.8 CVE-2024-39277 In the Linux kernel, the following vulnerability has been resolved: dma-mapping: benchmark: handle NUMA_NO_NODE correctly cpumask_of_node() can be … Linux Kernel 5.15.161 / 6.1.93+ Fix from $1,9502024-06-21 HIGH 7.1 CVE-2024-34777 In the Linux kernel, the following vulnerability has been resolved: dma-mapping: benchmark: fix node id validation While validating node ids in map… Linux Kernel 5.15.161 / 6.1.93+ Fix from $1,9502024-06-21 HIGH 7.1 CVE-2024-38635 In the Linux kernel, the following vulnerability has been resolved: soundwire: cadence: fix invalid PDI offset For some reason, we add an offset to… Linux Kernel 5.4.278 / 5.10.219+ Fix from $1,9502024-06-21 HIGH 7.1 CVE-2022-48738 In the Linux kernel, the following vulnerability has been resolved: ASoC: ops: Reject out of bounds values in snd_soc_put_volsw() We don't currentl… Linux Kernel 4.9.300 / 4.14.265+ Fix from $1,9502024-06-20 HIGH 7.1 CVE-2022-48739 In the Linux kernel, the following vulnerability has been resolved: ASoC: hdmi-codec: Fix OOB memory accesses Correct size of iec_status array by c… Linux Kernel 5.15.22 / 5.16.8+ Fix from $1,9502024-06-20 HIGH 7.1 CVE-2022-48714 In the Linux kernel, the following vulnerability has been resolved: bpf: Use VM_MAP instead of VM_ALLOC for ringbuf After commit 2fd3fb0be1d1 ("kas… Linux Kernel 5.10.99 / 5.15.22+ Fix from $1,9502024-06-20 MEDIUM 5.5 CVE-2021-47620 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: refactor malicious adv data check Check for out-of-bound read was be… Linux Kernel 4.4.302 / 4.9.300+ Fix from $1,6002024-06-20 HIGH 8.8 CVE-2024-6102 Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a c… Chrome 126.0.6478.114+ Fix from $1,9502024-06-20 HIGH 7.1 CVE-2021-47604 In the Linux kernel, the following vulnerability has been resolved: vduse: check that offset is within bounds in get_config() This condition checks… Linux Kernel 5.15.11+ Fix from $1,9502024-06-19 MEDIUM 5.5 CVE-2021-47586 In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-rk: fix oob read in rk_gmac_setup KASAN reports an out-of-bo… Linux Kernel 5.15.11+ Fix from $1,6002024-06-19 HIGH 7.1 CVE-2024-38606 In the Linux kernel, the following vulnerability has been resolved: crypto: qat - validate slices count returned by FW The function adf_send_admin_… Linux Kernel 6.8.12 / 6.9.3+ Fix from $1,9502024-06-19 HIGH 7.1 CVE-2024-38599 In the Linux kernel, the following vulnerability has been resolved: jffs2: prevent xattr node from overflowing the eraseblock Add a check to make s… Linux Kernel 4.19.316 / 5.4.278+ Fix from $1,9502024-06-19 HIGH 7.1 CVE-2024-38585 In the Linux kernel, the following vulnerability has been resolved: tools/nolibc/stdlib: fix memory error in realloc() Pass user_p_len to memcpy() … Linux Kernel 6.1.93 / 6.6.33+ Fix from $1,9502024-06-19 HIGH 7.1 CVE-2024-38572 In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix out-of-bound access of qmi_invoke_handler() Currently, there … Linux Kernel 6.6.33 / 6.8.12+ Fix from $1,9502024-06-19 HIGH 7.1 CVE-2024-38560 In the Linux kernel, the following vulnerability has been resolved: scsi: bfa: Ensure the copied buf is NUL terminated Currently, we allocate a nby… Linux Kernel 4.19.316 / 5.4.278+ Fix from $1,9502024-06-19 HIGH 7.5 CVE-2024-37795 A segmentation fault in CVC5 Solver v1.1.3 allows attackers to cause a Denial of Service (DoS) via a crafted SMT-LIB input file containing the `set-l… Mitigation only Fix from $1,9502024-06-17 MEDIUM 5.5 CVE-2024-36502 Out-of-bounds read vulnerability in the audio module Impact: Successful exploitation of this vulnerability will affect availability. Emui No fix yet Fix from $1,6002024-06-14 MEDIUM 5.5 CVE-2024-32914 In tpu_get_int_state of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure … Android Mitigation only Fix from $1,6002024-06-13 HIGH 7.1 CVE-2024-32920 In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo… Android Mitigation only Fix from $1,9502024-06-13