Browse CVEs

CRITICAL 9.8 CVE-2024-5171 Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Ca… Libaom after 3.9.0 Fix from $2,3002024-06-05 CRITICAL 9.1 CVE-2024-36121 netty-incubator-codec-ohttp is the OHTTP implementation for netty. BoringSSLAEADContext keeps track of how many OHTTP responses have been sent and us… Netty Incubator Codec Ohttp 0.0.11+ Fix from $2,3002024-06-04 CRITICAL 9.1 CVE-2024-5197 There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter… Debian Linux 1.14.1+ Fix from $2,3002024-06-03 HIGH 7.8 CVE-2023-43545 Memory corruption when more scan frequency list or channels are sent from the user space. Ar8035 Firmware Patch available Fix from $1,9502024-06-03 MEDIUM 5.5 CVE-2024-36948 In the Linux kernel, the following vulnerability has been resolved: drm/xe/xe_migrate: Cast to output precision before multiplying operands Address… Linux Kernel 6.8.10+ Fix from $1,6002024-05-30 MEDIUM 5.5 CVE-2024-36917 In the Linux kernel, the following vulnerability has been resolved: block: fix overflow in blk_ioctl_discard() There is no check for overflow of 's… Linux Kernel 6.1.91 / 6.6.31+ Fix from $1,6002024-05-30 MEDIUM 5.5 CVE-2024-36918 In the Linux kernel, the following vulnerability has been resolved: bpf: Check bloom filter map value size This patch adds a missing check to bloom… Linux Kernel 6.1.91 / 6.6.31+ Fix from $1,6002024-05-30 HIGH 7.0 CVE-2024-30212 If a SCSI READ(10) command is initiated via USB using the largest LBA (0xFFFFFFFF) with it's default block size of 512 and a count of 1, the first … Patch available Fix from $1,9502024-05-28 HIGH 7.8 CVE-2024-4453 GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary… Debian Linux Patch available Fix from $1,9502024-05-22 MEDIUM 5.5 CVE-2023-52857 In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix coverity issue with unintentional integer overflow 1. Instead… Linux Kernel 6.5.12 / 6.6.2+ Fix from $1,6002024-05-21 MEDIUM 5.5 CVE-2023-52762 In the Linux kernel, the following vulnerability has been resolved: virtio-blk: fix implicit overflow on virtio_max_dma_size The following codes ha… Linux Kernel 5.15.140 / 6.1.64+ Fix from $1,6002024-05-21 MEDIUM 5.5 CVE-2021-47432 In the Linux kernel, the following vulnerability has been resolved: lib/generic-radix-tree.c: Don't overflow in peek() When we started spreading ne… Linux Kernel 6.1.64 / 6.5.13+ Fix from $1,6002024-05-21 HIGH 7.8 CVE-2024-35905 In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduce… Linux Kernel 5.10.215 / 5.15.154+ Fix from $1,9502024-05-19 MEDIUM 5.5 CVE-2023-52676 In the Linux kernel, the following vulnerability has been resolved: bpf: Guard stack limits against 32bit overflow This patch promotes the arithmet… Linux Kernel 5.11 / 6.6.14+ Fix from $1,6002024-05-17 MEDIUM 5.5 CVE-2024-35827 In the Linux kernel, the following vulnerability has been resolved: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() The "controllen" va… Linux Kernel 6.1.83 / 6.6.23+ Fix from $1,6002024-05-17 MEDIUM 6.8 CVE-2024-30021 Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.5820 / 10.0.19044.4412+ Fix from $1,6002024-05-14 MEDIUM 6.8 CVE-2024-30012 Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.5820 / 10.0.19044.4412+ Fix from $1,6002024-05-14 MEDIUM 6.8 CVE-2024-30005 Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.5820 / 10.0.19044.4412+ Fix from $1,6002024-05-14 MEDIUM 6.8 CVE-2024-30004 Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.5820 / 10.0.19044.4412+ Fix from $1,6002024-05-14 MEDIUM 6.8 CVE-2024-30003 Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.5820 / 10.0.19044.4412+ Fix from $1,6002024-05-14 MEDIUM 6.8 CVE-2024-30001 Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.5820 / 10.0.19044.4412+ Fix from $1,6002024-05-14 MEDIUM 6.8 CVE-2024-30000 Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.5820 / 10.0.19044.4412+ Fix from $1,6002024-05-14 MEDIUM 6.8 CVE-2024-29999 Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.5820 / 10.0.19044.4412+ Fix from $1,6002024-05-14 MEDIUM 6.8 CVE-2024-29997 Windows Mobile Broadband Driver Remote Code Execution Vulnerability Windows 10 1809 10.0.17763.5820 / 10.0.19044.4412+ Fix from $1,6002024-05-14 HIGH 8.1 CVE-2024-32655 Npgsql is the .NET data provider for PostgreSQL. The `WriteBind()` method in `src/Npgsql/Internal/NpgsqlConnector.FrontendMessages.cs` uses `int` var… Patch available Fix from $1,9502024-05-14 MEDIUM 5.5 CVE-2024-3757 in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow. Openharmony 4.0.1+ Fix from $1,6002024-05-07 HIGH 7.8 CVE-2023-43530 Memory corruption in HLOS while checking for the storage type. Aqt1000 Firmware Mitigation only Fix from $1,9502024-05-06 HIGH 7.8 CVE-2023-44443EPSS 94% GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on a… Gimp 2.10.36+ Fix from $1,9502024-05-03 HIGH 7.5 CVE-2023-41185 Unified Automation UaGateway Certificate Parsing Integer Overflow Denial-of-Service Vulnerability. This vulnerability allows remote attackers to crea… Uagateway 1.5.13.487+ Fix from $1,9502024-05-03 HIGH 8.8 CVE-2023-40475 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… Gstreamer 1.22.6+ Fix from $1,9502024-05-03