Browse CVEs

CRITICAL 9.8 CVE-2022-48335 Widevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resultant buffer overflow. Trusted Application after 7.1.1 Fix from $2,3002023-06-26 CRITICAL 9.8 CVE-2022-48332 Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer overflow and resultant buffer overflow. Trusted Application after 5.1.1 Fix from $2,3002023-06-26 CRITICAL 9.8 CVE-2022-48333 Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len+feature_name_len integer overflow and resultant buffer overflo… Trusted Application after 5.1.1 Fix from $2,3002023-06-26 CRITICAL 9.8 CVE-2022-48331 Widevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len integer overflow and resultant buffer overflow. Trusted Application after 5.1.1 Fix from $2,3002023-06-26 HIGH 7.8 CVE-2023-32434 KEVEPSS 52% An integer overflow was addressed with improved input validation. This issue is fixed in watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 and iPadOS 1… Ipados 8.8.1 / 9.5.2+ Fix from $1,9502023-06-23 HIGH 7.5 CVE-2020-20335 Buffer Overflow vulnerability in Antirez Kilo before commit 7709a04ae8520c5b04d261616098cebf742f5a23 allows a remote attacker to cause a denial of se… Kilo 2020-07-02+ Fix from $1,9502023-06-20 HIGH 7.8 CVE-2023-28295 Microsoft Publisher Remote Code Execution Vulnerability 365 Apps Patch available Fix from $1,9502023-06-17 CRITICAL 9.8 CVE-2021-0701 In PVRSRVBridgeSyncPrimOpCreate of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of… Android Mitigation only Fix from $2,3002023-06-15 HIGH 7.5 CVE-2023-34453 snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1… Snappy Java 1.1.10.1+ Fix from $1,9502023-06-15 HIGH 7.5 CVE-2023-34454 snappy-java is a fast compressor/decompressor for Java. Due to unchecked multiplications, an integer overflow may occur in versions prior to 1.1.10.1… Snappy Java 1.1.10.1+ Fix from $1,9502023-06-15 HIGH 7.0 CVE-2023-29364 Windows Authentication Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.19983 / 10.0.14393.5989+ Fix from $1,9502023-06-14 MEDIUM 6.5 CVE-2023-29369 Remote Procedure Call Runtime Denial of Service Vulnerability Windows Server 2012 Patch available Fix from $1,6002023-06-14 CRITICAL 9.8 CVE-2023-33864 StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32_t(m_BufferSize-m_… Renderdoc 1.27+ Fix from $2,3002023-06-07 CRITICAL 9.8 CVE-2023-33863 SerialiseValue in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. 0xffffffff is sign-extended to 0xfffffffffffffff… Renderdoc 1.27+ Fix from $2,3002023-06-07 HIGH 7.8 CVE-2023-2603 A vulnerability was found in libcap. This issue occurs in the _libcap_strdup() function and can lead to an integer overflow if the input string is cl… Enterprise Linux 2.69+ Fix from $1,9502023-06-06 MEDIUM 5.5 CVE-2023-34151 A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and other code… Fedora 7.1.1-11+ Fix from $1,6002023-05-30 HIGH 7.5 CVE-2023-32307 Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to [GHSA-8599-x7rq-fr54](https://github.… Debian Linux 1.13.15+ Fix from $1,9502023-05-26 HIGH 7.5 CVE-2022-48480 Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality. Emui No fix yet Fix from $1,9502023-05-26 CRITICAL 9.8 CVE-2023-23298 The `Toybox.Graphics.BufferedBitmap.initialize` API method in CIQ API version 2.3.0 through 4.1.7 does not validate its parameters, which can result … Connect Iq after 4.1.7 Fix from $2,3002023-05-23 HIGH 7.8 CVE-2023-33204 sysstat through 12.7.2 allows a multiplication integer overflow in check_overflow in common.c. NOTE: this issue exists because of an incomplete fix f… Fedora after 12.7.2 Fix from $1,9502023-05-18 HIGH 8.1 CVE-2023-2512 Prior to version v1.20230419.0, the FormData API implementation was subject to an integer overflow. If a FormData instance contained more than 2^31 e… Workerd 1.20230419.0+ Fix from $1,9502023-05-12 HIGH 7.5 CVE-2023-32058 Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing overflow check for loop variable… Vyper 0.3.8+ Fix from $1,9502023-05-11 MEDIUM 5.5 CVE-2023-22443 Integer overflow in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable denial of service via local acc… Server System D50tnp1mhcrlc Firmware 2.90+ Fix from $1,6002023-05-10 HIGH 7.8 CVE-2023-2610 Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1532. Vim 9.0.1532+ Fix from $1,9502023-05-09 HIGH 7.8 CVE-2023-24949EPSS 25% Windows Kernel Elevation of Privilege Vulnerability Windows 10 1809 10.0.17763.4377 / 10.0.19042.2965+ Fix from $1,9502023-05-09 MEDIUM 5.5 CVE-2023-24945 Windows iSCSI Target Service Information Disclosure Vulnerability Windows 10 1507 10.0.10240.19926 / 10.0.14393.5921+ Fix from $1,6002023-05-09 HIGH 7.8 CVE-2023-27937 An integer overflow was addressed with improved input validation. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, macOS Big Sur … Ipados 9.4 / 11.7.5+ Fix from $1,9502023-05-08 HIGH 8.6 CVE-2022-46720 An integer overflow was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. An app may be … Ipados 13.1 / 16.2+ Fix from $1,9502023-05-08 MEDIUM 6.5 CVE-2023-27354 This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Aut… One Firmware 11.7.1 / 15.1+ Fix from $1,6002023-04-20 HIGH 7.8 CVE-2021-0872 In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-boun… Android Mitigation only Fix from $1,9502023-04-19