Browse CVEs

HIGH 7.3 CVE-2024-43495 Windows libarchive Remote Code Execution Vulnerability Windows 11 22h2 10.0.22621.3880 / 10.0.22631.3880+ Fix from $1,9502024-09-10 HIGH 8.6 CVE-2024-44087EPSS 11% A vulnerability has been identified in Automation License Manager V5 (All versions), Automation License Manager V6.0 (All versions < V6.0 SP12 Upd3),… Mitigation only Fix from $1,9502024-09-10 HIGH 7.5 CVE-2024-45287 A malicious value of size in a structure of packed libnv can cause an integer overflow, leading to the allocation of a smaller buffer than required f… FreeBSD 13.3+ Fix from $1,9502024-09-05 MEDIUM 5.5 CVE-2024-44981 In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix UBSAN 'subtraction overflow' error in shift_and_mask() UBSAN rep… Linux Kernel 6.10.7+ Fix from $1,6002024-09-04 HIGH 8.4 CVE-2024-33035 Memory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients. Qam8255p Firmware No fix yet Fix from $1,9502024-09-02 MEDIUM 5.5 CVE-2024-28044 in OpenHarmony v4.1.0 and prior versions allow a local attacker cause crash through integer overflow. Openharmony after 4.1 Fix from $1,6002024-09-02 HIGH 7.5 CVE-2024-45490 An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a negative length for XML_ParseBuffer. Libexpat 2.6.3+ Fix from $1,9502024-08-30 CRITICAL 9.8 CVE-2024-45491 An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT… Libexpat 2.6.3+ Fix from $2,3002024-08-30 CRITICAL 9.8 CVE-2024-45492 An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (wh… Libexpat 2.6.3+ Fix from $2,3002024-08-30 MEDIUM 5.5 CVE-2024-43890 In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in get_free_elt() "tracing_map->next_elt" in get_free_elt… Linux Kernel 4.19.320 / 5.4.282+ Fix from $1,6002024-08-26 MEDIUM 5.5 CVE-2022-48938 In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device may give an extreme … Linux Kernel 5.10.103 / 5.15.26+ Fix from $1,6002024-08-22 CRITICAL 9.8 CVE-2024-30949 An issue in newlib v.4.3.0 allows an attacker to execute arbitrary code via the time unit scaling in the _gettimeofday function. Newlib Patch available Fix from $2,3002024-08-20 MEDIUM 5.5 CVE-2024-43838 In the Linux kernel, the following vulnerability has been resolved: bpf: fix overflow check in adjust_jmp_off() adjust_jmp_off() incorrectly used t… Linux Kernel 6.10 / 6.10.3+ Fix from $1,6002024-08-17 HIGH 7.8 CVE-2024-31333 In _MMU_AllocLevel of mmu_common.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of p… Android Mitigation only Fix from $1,9502024-08-15 HIGH 7.8 CVE-2024-34740 In attributeBytesBase64 and attributeBytesHex of BinaryXmlSerializer.java, there is a possible arbitrary XML injection due to an integer overflow. Th… Android Patch available Fix from $1,9502024-08-15 MEDIUM 6.2 CVE-2024-7867 In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero. Xpdf after 4.05 Fix from $1,6002024-08-15 HIGH 7.8 CVE-2024-41851 InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary… Indesign 18.5.3 / 19.5+ Fix from $1,9502024-08-14 HIGH 7.8 CVE-2024-41858 InCopy versions 18.5.2, 19.4 and earlier are affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code executio… Incopy 19.4+ Fix from $1,9502024-08-14 HIGH 7.8 CVE-2024-38215 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.6189 / 10.0.19044.4780+ Fix from $1,9502024-08-13 HIGH 8.8 CVE-2024-38144EPSS 32% Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20751 / 10.0.14393.7259+ Fix from $1,9502024-08-13 HIGH 8.8 CVE-2024-38128 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability Windows Server 2008 6.2.9200.25031 / 10.0.14393.7259+ Fix from $1,9502024-08-13 HIGH 7.5 CVE-2024-33024 Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length. Ar8035 Firmware Patch available Fix from $1,9502024-08-05 HIGH 7.8 CVE-2024-33022 Memory corruption while allocating memory in HGSL driver. Ar8035 Firmware Patch available Fix from $1,9502024-08-05 HIGH 7.5 CVE-2023-33976 TensorFlow is an end-to-end open source platform for machine learning. `array_ops.upper_bound` causes a segfault when not given a rank 2 tensor. The … Tensorflow 2.13.0+ Fix from $1,9502024-07-30 MEDIUM 5.5 CVE-2024-42223 In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: tda10048: Fix integer overflow state->xtal_hz can be up t… Linux Kernel 4.19.318 / 5.4.280+ Fix from $1,6002024-07-30 HIGH 7.8 CVE-2024-42136 In the Linux kernel, the following vulnerability has been resolved: cdrom: rearrange last_media_change check to avoid unintentional overflow When r… Debian Linux 6.1.98 / 6.6.39+ Fix from $1,9502024-07-30 MEDIUM 5.5 CVE-2024-40784 An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macO… Ipados 1.3 / 10.6+ Fix from $1,6002024-07-29 MEDIUM 5.5 CVE-2024-42066 In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix potential integer overflow in page size calculation Explicitly cast… Linux Kernel 6.9.8+ Fix from $1,6002024-07-29 MEDIUM 5.5 CVE-2024-6638 An integer overflow vulnerability due to improper input validation when reading TDMS files in LabVIEW may result in an infinite loop. Successful exp… Labview after 2021 Fix from $1,6002024-07-22 CRITICAL 9.8 CVE-2024-41184 In the vrrp_ipsets_handler handler (fglobal_parser.c) of keepalived through 2.3.1, an integer overflow can occur. NOTE: this CVE Record might not be … Mitigation only Fix from $2,3002024-07-18