Browse CVEs

HIGH 7.8 CVE-2024-34623 Out-of-bounds write in applying connected information in Samsung Notes prior to version 4.4.21.62 allows local attackers to potentially execute arbit… Notes 4.4.21.62+ Fix from $1,9502024-08-07 HIGH 7.8 CVE-2024-34612 Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. Android Mitigation only Fix from $1,9502024-08-07 HIGH 7.8 CVE-2024-34614 Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code. Android Mitigation only Fix from $1,9502024-08-07 HIGH 7.8 CVE-2024-34615 Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption. Android Mitigation only Fix from $1,9502024-08-07 HIGH 8.8 CVE-2024-7534 Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 127.0.6533.99+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-7535 Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a cra… Chrome 127.0.6533.99+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-7532 Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a c… Chrome 127.0.6533.99+ Fix from $1,9502024-08-06 CRITICAL 9.8 CVE-2024-42395 There is a vulnerability in the AP Certificate Management Service which could allow a threat actor to execute an unauthenticated RCE attack. Successf… Arubaos 8.10.0.13 / 8.12.0.2+ Fix from $2,3002024-08-06 CRITICAL 9.8 CVE-2024-42393 There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploit… Arubaos 8.10.0.13 / 8.12.0.2+ Fix from $2,3002024-08-06 CRITICAL 9.8 CVE-2024-42394 There are vulnerabilities in the Soft AP Daemon Service which could allow a threat actor to execute an unauthenticated RCE attack. Successful exploit… Arubaos 8.10.0.13 / 8.12.0.2+ Fix from $2,3002024-08-06 HIGH 7.8 CVE-2024-7502 A crafted DPA file could force Delta Electronics DIAScreen to overflow a stack-based buffer, which could allow an attacker to execute arbitrary code. Diascreen 1.4.2+ Fix from $1,9502024-08-06 HIGH 8.8 CVE-2024-6994 Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted… Chrome 127.0.6533.72+ Fix from $1,9502024-08-06 CRITICAL 9.6 CVE-2024-7519 Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to perform a s… Firefox 115.14.0 / 129.0+ Fix from $2,3002024-08-06 HIGH 8.8 CVE-2024-7055 A vulnerability was found in FFmpeg up to 7.0.1. It has been classified as critical. This affects the function pnm_decode_frame in the library /libav… Ffmpeg 4.3.8 / 4.4.5+ Fix from $1,9502024-08-06 HIGH 7.8 CVE-2024-7544 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code o… Ofono Mitigation only Fix from $1,9502024-08-06 HIGH 7.8 CVE-2024-7545 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code o… Ofono Mitigation only Fix from $1,9502024-08-06 HIGH 7.8 CVE-2024-7546 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code o… Ofono Mitigation only Fix from $1,9502024-08-06 HIGH 7.8 CVE-2024-7547 oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code… Ofono Mitigation only Fix from $1,9502024-08-06 HIGH 7.8 CVE-2024-7539 oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected … Ofono Mitigation only Fix from $1,9502024-08-06 HIGH 7.8 CVE-2024-7543 oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code o… Ofono Mitigation only Fix from $1,9502024-08-06 HIGH 7.8 CVE-2024-7538 oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code o… Ofono Mitigation only Fix from $1,9502024-08-06 HIGH 7.9 CVE-2024-21980 Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to potentially overwrite a guest's memory or UMC seed res… Epyc 7203 Firmware Mitigation only Fix from $1,9502024-08-05 MEDIUM 6.0 CVE-2023-31355 Improper restriction of write operations in SNP firmware could allow a malicious hypervisor to overwrite a guest's UMC seed potentially allowing read… Epyc 7203 Firmware Mitigation only Fix from $1,6002024-08-05 HIGH 7.8 CVE-2024-23355 Memory corruption when keymaster operation imports a shared key. Wsa8845h Firmware Mitigation only Fix from $1,9502024-08-05 HIGH 7.8 CVE-2024-23356 Memory corruption during session sign renewal request calls in HLOS. Wsa8845h Firmware No fix yet Fix from $1,9502024-08-05 HIGH 8.4 CVE-2024-21481 Memory corruption when preparing a shared memory notification for a memparcel in Resource Manager. Ar8035 Firmware Mitigation only Fix from $1,9502024-08-05 HIGH 7.8 CVE-2024-39392 InDesign Desktop versions ID18.5.2, ID19.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code… Indesign 18.5.3 / 19.4+ Fix from $1,9502024-08-02 MEDIUM 5.5 CVE-2024-31203 A “CWE-121: Stack-based Buffer Overflow” in the wd210std.dll dynamic library packaged with the ThermoscanIP installer allows a local attacker to poss… Thermoscan Ip Mitigation only Fix from $1,6002024-07-31 MEDIUM 5.5 CVE-2024-41439 A heap buffer overflow in the function cp_block() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Denial of Service (DoS) via a cr… Hicolor No fix yet Fix from $1,6002024-07-30 MEDIUM 5.5 CVE-2024-41443 A stack overflow in the function cp_dynamic() (/vendor/cute_png.h) of hicolor v0.5.0 allows attackers to cause a Denial of Service (DoS) via a crafte… Hicolor No fix yet Fix from $1,6002024-07-30