Browse CVEs

CRITICAL 9.8 CVE-2022-35951 Redis is an in-memory database that persists on disk. Versions 7.0.0 and above, prior to 7.0.5 are vulnerable to an Integer Overflow. Executing an `X… Redis 7.0.5+ Fix from $2,3002022-09-23 CRITICAL 9.8 CVE-2022-36934 An integer overflow in WhatsApp could result in remote code execution in an established video call. Whatsapp 2.22.16.12+ Fix from $2,3002022-09-22 HIGH 7.5 CVE-2022-36015 TensorFlow is an open source platform for machine learning. When `RangeSize` receives values that do not fit into an `int64_t`, it crashes. We have p… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 HIGH 7.5 CVE-2022-35940 TensorFlow is an open source platform for machine learning. The `RaggedRangOp` function takes an argument `limits` that is eventually used to constru… Tensorflow 2.7.2 / 2.8.1+ Fix from $1,9502022-09-16 MEDIUM 5.5 CVE-2022-36402 An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file… Linux Kernel Mitigation only Fix from $1,6002022-09-16 CRITICAL 9.8 CVE-2022-22105 Memory corruption in bluetooth due to integer overflow while processing HFP-UNIT profile in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobi… Apq8009 Firmware Mitigation only Fix from $2,3002022-09-16 HIGH 7.8 CVE-2022-25656 Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in… Ar8035 Firmware Patch available Fix from $1,9502022-09-16 HIGH 7.8 CVE-2022-22074 Memory Corruption during wma file playback due to integer overflow in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consum… Apq8009 Firmware Mitigation only Fix from $1,9502022-09-16 HIGH 7.8 CVE-2022-22081 Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables Ar8035 Firmware Mitigation only Fix from $1,9502022-09-16 HIGH 7.8 CVE-2022-22089 Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdrago… Ar8035 Firmware Mitigation only Fix from $1,9502022-09-16 HIGH 7.8 CVE-2021-0871 In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow ou… Android Mitigation only Fix from $1,9502022-09-13 CRITICAL 9.8 CVE-2022-31789 An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially e… Fireware 12.1.4 / 12.5.10+ Fix from $2,3002022-09-06 MEDIUM 6.7 CVE-2022-26466 In audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execut… Android Mitigation only Fix from $1,6002022-09-06 MEDIUM 6.7 CVE-2022-26454 In teei, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution pri… Android Mitigation only Fix from $1,6002022-09-06 MEDIUM 6.1 CVE-2022-39842 An issue was discovered in the Linux kernel before 5.19. In pxa3xx_gcu_write in drivers/video/fbdev/pxa3xx-gcu.c, the count parameter has a type conf… Linux Kernel 5.19+ Fix from $1,6002022-09-05 HIGH 7.8 CVE-2022-24106 In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the first scan of the image, leadin… Xpdfreader 4.04+ Fix from $1,9502022-08-30 HIGH 7.8 CVE-2022-24107 Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc. Xpdfreader 4.04+ Fix from $1,9502022-08-30 HIGH 7.8 CVE-2022-38784 Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIGStream.cc). Process… Debian Linux after 22.08.0 Fix from $1,9502022-08-30 MEDIUM 5.5 CVE-2021-20224 An integer overflow issue was discovered in ImageMagick's ExportIndexQuantum() function in MagickCore/quantum-export.c. Function calls to GetPixelInd… Imagemagick 6.9.11-57 / 7.0.10-57+ Fix from $1,6002022-08-25 HIGH 7.5 CVE-2021-20304 A flaw was found in OpenEXR's hufDecode functionality. This flaw allows an attacker who can pass a crafted file to be processed by OpenEXR, to trigge… Openexr after 2.5.7 Fix from $1,9502022-08-23 HIGH 7.8 CVE-2022-38171 Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2Stream.cc). Processing a speci… Xpdf 22.09.0+ Fix from $1,9502022-08-22 MEDIUM 6.5 CVE-2022-36008 Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC result of the exit reason in case … Frontier Patch available Fix from $1,6002022-08-19 HIGH 7.5 CVE-2022-2831 A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory co… Blender Patch available Fix from $1,9502022-08-16 HIGH 7.5 CVE-2022-38216 An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products includ… Maps Software Development Kit 10.6.1+ Fix from $1,9502022-08-16 HIGH 8.8 CVE-2022-20362 In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no add… Android Mitigation only Fix from $1,9502022-08-12 HIGH 8.8 CVE-2022-20283 In Bluetooth, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution over Bluetooth with no add… Android Mitigation only Fix from $1,9502022-08-12 HIGH 7.8 CVE-2022-20383 In AllocateInternalBuffers of g3aa_buffer_allocator.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local … Android Mitigation only Fix from $1,9502022-08-11 MEDIUM 6.7 CVE-2022-20366 In ioctl_dpm_clk_update of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of p… Android Mitigation only Fix from $1,6002022-08-11 MEDIUM 6.7 CVE-2022-20367 In construct_transaction of lwis_ioctl.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of … Android Mitigation only Fix from $1,6002022-08-11 HIGH 7.5 CVE-2022-36125 It is possible to crash (panic) an application by providing a corrupted data to be read. This issue affects Rust applications using Apache Avro Rust … Avro 0.14.0+ Fix from $1,9502022-08-09