Browse CVEs

HIGH 7.8 CVE-2023-42562 Integer overflow vulnerability in detectionFindFaceSupportMultiInstance of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 … Android 14.0+ Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-42563 Integer overflow vulnerability in landmarkCopyImageToNative of libFacePreProcessingjni.camera.samsung.so prior to SMR Dec-2023 Release 1 allows attac… Android 14.0+ Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-33107 KEV Memory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call. 315 5g Iot Modem Firmware Patch available Fix from $1,9502023-12-05 HIGH 7.5 CVE-2023-28588 Transient DOS in Bluetooth Host while rfc slot allocation. Apq8017 Firmware Patch available Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-33018 Memory corruption while using the UIM diag command to get the operators name. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-33022 Memory corruption in HLOS while invoking IOCTL calls from user-space. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502023-12-05 CRITICAL 9.6 CVE-2023-6345 KEVEPSS 16% Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially p… Chrome 119.0.2151.97 / 119.0.6045.199+ Fix from $2,3002023-11-29 HIGH 7.5 CVE-2023-4398 An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions … Zld after 5.37 Fix from $1,9502023-11-28 HIGH 7.8 CVE-2021-27502 Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values… Real Time Operating System 4.10.03 / 4.40.00+ Fix from $1,9502023-11-21 HIGH 7.8 CVE-2021-27504 Texas Instruments devices running FREERTOS, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an intege… Freertos 4.10.03 / 4.40.00+ Fix from $1,9502023-11-21 HIGH 8.8 CVE-2023-4424 An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE… Zephyr after 3.4.0 Fix from $1,9502023-11-21 HIGH 7.8 CVE-2021-22636 Texas Instruments TI-RTOS, when configured to use HeapMem heap(default), malloc returns a valid pointer to a small buffer on extremely large values, … Real Time Operating System 4.10.03 / 4.40.00+ Fix from $1,9502023-11-20 HIGH 7.8 CVE-2021-27429 Texas Instruments TI-RTOS returns a valid pointer to a small buffer on extremely large values. This can trigger an integer overflow vulnerability in … Real Time Operating System 4.10.03 / 4.40.00+ Fix from $1,9502023-11-20 MEDIUM 5.5 CVE-2023-22305 Integer overflow in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via… Aptio V Uefi Firmware Integrator Tools Mitigation only Fix from $1,6002023-11-14 HIGH 7.2 CVE-2023-36401 Microsoft Remote Registry Service Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20308 / 10.0.14393.6452+ Fix from $1,9502023-11-14 HIGH 7.5 CVE-2023-36395 Windows Deployment Services Denial of Service Vulnerability Windows Server 2008 Patch available Fix from $1,9502023-11-14 MEDIUM 6.7 CVE-2023-4949 An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way… Grub after 0.97 Fix from $1,6002023-11-10 HIGH 7.8 CVE-2023-4295 A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. Mali Gpu Kernel Driver No fix yet Fix from $1,9502023-11-07 HIGH 8.8 CVE-2023-5849 Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML … Chrome 119.0.6045.105+ Fix from $1,9502023-11-01 HIGH 7.8 CVE-2023-21375 In Sysproxy, there is a possible out of bounds write due to an integer underflow. This could lead to local escalation of privilege with no additional… Android 14.0+ Fix from $1,9502023-10-30 MEDIUM 6.7 CVE-2023-21370 In the Security Element API, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege wit… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 6.7 CVE-2023-21371 In Secure Element, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System e… Android 14.0+ Fix from $1,6002023-10-30 MEDIUM 5.5 CVE-2023-46246 Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `sr… Vim 9.0.2068+ Fix from $1,6002023-10-27 HIGH 8.8 CVE-2023-42295 An issue in OpenImageIO oiio v.2.4.12.0 allows a remote attacker to execute arbitrary code and cause a denial of service via the read_rle_image funct… Openimageio No fix yet Fix from $1,9502023-10-23 HIGH 7.8 CVE-2023-45681 stb_vorbis is a single file MIT licensed library for processing ogg vorbis files. A crafted file may trigger memory write past an allocated heap buff… Stb Vorbis.c Mitigation only Fix from $1,9502023-10-21 HIGH 7.8 CVE-2023-3487 An integer overflow in Silicon Labs Gecko Bootloader version 4.3.1 and earlier allows unbounded memory access when reading from or writing to storage… Gecko Bootloader after 4.3.1 Fix from $1,9502023-10-20 HIGH 7.8 CVE-2023-38127 An integer overflow exists in the "HyperLinkFrame" stream parser of Ichitaro 2023 1.0.1.59372. A specially crafted document can cause the parser to m… Easy Postcard Max No fix yet Fix from $1,9502023-10-19 HIGH 7.8 CVE-2023-46228 zchunk before 1.3.2 has multiple integer overflows via malformed zchunk files to lib/comp/comp.c, lib/comp/zstd/zstd.c, lib/dl/multipart.c, or lib/he… Zchunk 1.3.2+ Fix from $1,9502023-10-19 CRITICAL 9.8 CVE-2023-45853 MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment,… Pyminizip 1.3.1+ Fix from $2,3002023-10-14 MEDIUM 5.5 CVE-2023-42752 An integer overflow flaw was found in the Linux kernel. This issue leads to the kernel allocating `skb_shared_info` in the userspace, which is exploi… Linux Kernel after 6.5.7 Fix from $1,6002023-10-13