Browse CVEs

MEDIUM 5.9 CVE-2024-32897 In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. Th… Android Mitigation only Fix from $1,6002024-06-13 MEDIUM 5.5 CVE-2024-32893 In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting. This could lead to local information discl… Android Mitigation only Fix from $1,6002024-06-13 HIGH 7.5 CVE-2024-32894 In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remot… Android Mitigation only Fix from $1,9502024-06-13 HIGH 7.5 CVE-2024-29781 In ss_AnalyzeOssReturnResUssdArgIe of ss_OssAsnManagement.c, there is a possible out of bounds read due to improper input validation. This could lead… Android Mitigation only Fix from $1,9502024-06-13 MEDIUM 5.5 CVE-2024-37877 UERANSIM before 3.2.6 allows out-of-bounds read when a RLS packet is sent to gNodeB with malformed PDU length. This occurs in function readOctetStrin… Mitigation only Fix from $1,6002024-06-13 HIGH 7.8 CVE-2024-20753 Photoshop Desktop versions 24.7.3, 25.7 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could resu… Photoshop 24.7.4 / 25.9+ Fix from $1,9502024-06-13 MEDIUM 5.5 CVE-2024-30278 Media Encoder versions 23.6.5, 24.3 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitiv… Media Encoder after 24.3 Fix from $1,6002024-06-13 MEDIUM 5.5 CVE-2024-30276 Audition versions 24.2, 23.6.4 and earlier Answer: are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive mem… Audition after 23.6.4 Fix from $1,6002024-06-13 HIGH 7.5 CVE-2024-5560 CWE-125: Out-of-bounds Read vulnerability exists that could cause denial of service of the device’s web interface when an attacker sends a specially … Sage Rtu Firmware Patch available Fix from $1,9502024-06-12 HIGH 8.8 CVE-2024-30068 Windows Kernel Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20680 / 10.0.14393.7070+ Fix from $1,9502024-06-11 HIGH 7.8 CVE-2024-27802 An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, ma… Ipados 1.2 / 12.7.5+ Fix from $1,9502024-06-10 HIGH 7.1 CVE-2022-48578 An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.5. Processing an AppleScript may result i… macOS 12.5+ Fix from $1,9502024-06-10 CRITICAL 9.1 CVE-2024-37407 Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slurp_centr… Libarchive Patch available Fix from $2,3002024-06-08 CRITICAL 9.1 CVE-2024-24192 robdns commit d76d2e6 was discovered to contain a heap overflow via the component block->filename at /src/zonefile-insertion.c. Robdns Mitigation only Fix from $2,3002024-06-06 MEDIUM 6.5 CVE-2024-5268 Sonos Era 100 SMB2 Message Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to … Era 100 Firmware Mitigation only Fix from $1,6002024-06-06 HIGH 7.1 CVE-2024-27378 An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_send_acti… Exynos 980 Firmware Mitigation only Fix from $1,9502024-06-05 MEDIUM 6.0 CVE-2024-27380 An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_set_delay… Exynos 980 Firmware Mitigation only Fix from $1,6002024-06-05 MEDIUM 6.0 CVE-2024-27381 An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_send_acti… Exynos 980 Firmware Mitigation only Fix from $1,6002024-06-05 HIGH 7.1 CVE-2024-27382 An issue was discovered in Samsung Mobile Processor Exynos 980, Exynos 850, Exynos 1280, Exynos 1380, and Exynos 1330. In the function slsi_send_acti… Exynos 980 Firmware Mitigation only Fix from $1,9502024-06-05 HIGH 8.1 CVE-2024-5629 An out-of-bounds read in the 'bson' module of PyMongo 4.6.2 or earlier allows deserialization of malformed BSON provided by a Server to raise an exce… Pymongo 4.6.3+ Fix from $1,9502024-06-05 MEDIUM 5.3 CVE-2024-36124 iq80 Snappy is a compression/decompression library. When uncompressing certain data, Snappy tries to read outside the bounds of the given byte arrays… Snappy 0.5+ Fix from $1,6002024-06-03 HIGH 7.5 CVE-2024-23363 Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame. Ar8035 Firmware Mitigation only Fix from $1,9502024-06-03 HIGH 7.5 CVE-2023-43555 Information disclosure in Video while parsing mp2 clip with invalid section length. Aqt1000 Firmware Mitigation only Fix from $1,9502024-06-03 HIGH 7.5 CVE-2023-43537 Information disclosure while handling T2LM Action Frame in WLAN Host. Ar8035 Firmware Patch available Fix from $1,9502024-06-03 HIGH 7.1 CVE-2024-36960 In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Fix invalid reads in fence signaled events Correctly set the length… Linux Kernel 4.19.314 / 5.4.276+ Fix from $1,9502024-06-03 HIGH 8.8 CVE-2024-5497 Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage in specif… Chrome 125.0.6422.141+ Fix from $1,9502024-05-30 HIGH 7.1 CVE-2024-36931 In the Linux kernel, the following vulnerability has been resolved: s390/cio: Ensure the copied buf is NUL terminated Currently, we allocate a lbuf… Linux Kernel 5.15.159 / 6.1.91+ Fix from $1,9502024-05-30 HIGH 7.1 CVE-2024-36935 In the Linux kernel, the following vulnerability has been resolved: ice: ensure the copied buf is NUL terminated Currently, we allocate a count-siz… Linux Kernel 6.8.10+ Fix from $1,9502024-05-30 HIGH 7.1 CVE-2024-36915 In the Linux kernel, the following vulnerability has been resolved: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies syzbot reported unsafe calls… Linux Kernel 6.1.119 / 6.6.47+ Fix from $1,9502024-05-30 HIGH 7.1 CVE-2024-36916 In the Linux kernel, the following vulnerability has been resolved: blk-iocost: avoid out of bounds shift UBSAN catches undefined behavior in blk-i… Linux Kernel 5.10.217 / 5.15.159+ Fix from $1,9502024-05-30