Browse CVEs

HIGH 7.8 CVE-2024-26736 In the Linux kernel, the following vulnerability has been resolved: afs: Increase buffer size in afs_update_volume_status() The max length of volum… Linux Kernel 5.4.270 / 5.10.211+ Fix from $1,9502024-04-03 HIGH 7.8 CVE-2024-26742 In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix disable_managed_interrupts Correct blk-mq registration issu… Linux Kernel 6.1.80 / 6.6.19+ Fix from $1,9502024-04-03 HIGH 7.8 CVE-2024-26753 In the Linux kernel, the following vulnerability has been resolved: crypto: virtio/akcipher - Fix stack overflow on memcpy sizeof(struct virtio_cry… Linux Kernel 5.10.212 / 6.1.80+ Fix from $1,9502024-04-03 HIGH 7.0 CVE-2024-26730 In the Linux kernel, the following vulnerability has been resolved: hwmon: (nct6775) Fix access to temperature configuration registers The number o… Linux Kernel 6.6.19 / 6.7.7+ Fix from $1,9502024-04-03 MEDIUM 5.5 CVE-2024-26706 In the Linux kernel, the following vulnerability has been resolved: parisc: Fix random data corruption from exception handler The current exception… Linux Kernel 6.1.79 / 6.6.18+ Fix from $1,6002024-04-03 MEDIUM 5.5 CVE-2024-26718 In the Linux kernel, the following vulnerability has been resolved: dm-crypt, dm-verity: disable tasklets Tasklets have an inherent problem with me… Linux Kernel 6.1.79 / 6.6.18+ Fix from $1,6002024-04-03 MEDIUM 5.5 CVE-2024-26685 In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential bug in end_buffer_async_write According to a syzbot repor… Linux Kernel 3.3 / 3.5+ Fix from $1,6002024-04-03 MEDIUM 5.5 CVE-2024-26692 In the Linux kernel, the following vulnerability has been resolved: smb: Fix regression in writes when non-standard maximum write size negotiated T… Linux Kernel 6.6.18 / 6.7.6+ Fix from $1,6002024-04-03 MEDIUM 5.5 CVE-2024-26697 In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix data corruption in dsync block recovery for small block sizes The h… Linux Kernel 4.19.307 / 5.4.269+ Fix from $1,6002024-04-03 HIGH 7.8 CVE-2024-30355 Foxit PDF Reader AcroForm Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary co… Pdf Editor after 2023.3.0.23028 Fix from $1,9502024-04-02 HIGH 7.8 CVE-2024-30349 Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi… Pdf Editor after 2023.3.0.23028 Fix from $1,9502024-04-02 HIGH 7.8 CVE-2024-30348 Foxit PDF Reader U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi… Pdf Editor after 2023.3.0.63083 Fix from $1,9502024-04-02 CRITICAL 9.8 CVE-2024-30620 Tenda AX1803 v1.0.0.1 contains a stack overflow via the serviceName parameter in the function fromAdvSetMacMtuWan. Ax1803 Firmware No fix yet Fix from $2,3002024-04-02 CRITICAL 9.8 CVE-2024-30621 Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan. Ax1803 Firmware No fix yet Fix from $2,3002024-04-02 MEDIUM 6.8 CVE-2023-51454 A Out-of-bounds Write issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to overwrite… Mitigation only Fix from $1,6002024-04-02 MEDIUM 6.8 CVE-2023-51456 A Improper Input Validation issue affecting the v2_sdk_service running on a set of DJI drone devices on the port 10000 could allow an attacker to tri… Mitigation only Fix from $1,6002024-04-02 CRITICAL 9.8 CVE-2024-31002 Buffer Overflow vulnerability in Bento4 Bento v.1.6.0-641 allows a remote attacker to execute arbitrary code via the AP4 BitReader::ReadCache() at Ap… Bento4 No fix yet Fix from $2,3002024-04-02 HIGH 7.1 CVE-2024-26674 In the Linux kernel, the following vulnerability has been resolved: x86/lib: Revert to _ASM_EXTABLE_UA() for {get,put}_user() fixups During memory … Linux Kernel 6.6.17 / 6.7.5+ Fix from $1,9502024-04-02 MEDIUM 5.5 CVE-2024-26678 In the Linux kernel, the following vulnerability has been resolved: x86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section The .compa… Linux Kernel 6.7.5+ Fix from $1,6002024-04-02 HIGH 7.1 CVE-2024-26664 In the Linux kernel, the following vulnerability has been resolved: hwmon: (coretemp) Fix out-of-bounds memory access Fix a bug that pdata->cpu_map… Linux Kernel 4.19.307 / 5.4.269+ Fix from $1,9502024-04-02 HIGH 7.1 CVE-2024-26669 In the Linux kernel, the following vulnerability has been resolved: net/sched: flower: Fix chain template offload When a qdisc is deleted from a ne… Linux Kernel 6.6.15 / 6.7.3+ Fix from $1,9502024-04-02 MEDIUM 5.5 CVE-2024-26670 In the Linux kernel, the following vulnerability has been resolved: arm64: entry: fix ARM64_WORKAROUND_SPECULATIVE_UNPRIV_LOAD Currently the ARM64_… Linux Kernel 6.6.15 / 6.7.3+ Fix from $1,6002024-04-02 HIGH 7.8 CVE-2024-24581 in OpenHarmony v4.0.0 and prior versions allow a local attacker arbitrary code execution through out-of-bounds write. Openharmony after 4.0 Fix from $1,9502024-04-02 MEDIUM 5.5 CVE-2024-26659 In the Linux kernel, the following vulnerability has been resolved: xhci: handle isoc Babble and Buffer Overrun events properly xHCI 4.9 explicitly… Linux Kernel 5.10.213 / 5.15.152+ Fix from $1,6002024-04-02 MEDIUM 5.0 CVE-2023-52633 In the Linux kernel, the following vulnerability has been resolved: um: time-travel: fix time corruption In 'basic' time-travel mode (without =inf-… Linux Kernel 5.15.149 / 6.1.77+ Fix from $1,6002024-04-02 HIGH 7.8 CVE-2024-20846 Out-of-bounds write vulnerability while decoding hcr of libsavsac.so prior to SMR Apr-2024 Release 1 allows local attacker to execute arbitrary code. Android Mitigation only Fix from $1,9502024-04-02 HIGH 7.8 CVE-2024-20848 Improper Input Validation vulnerability in text parsing implementation of libsdffextractor prior to SMR Apr-2024 Release 1 allows local attackers to … Android Mitigation only Fix from $1,9502024-04-02 HIGH 7.8 CVE-2024-20849 Out-of-bound Write vulnerability in chunk parsing implementation of libsdffextractor prior to SMR Apr-2023 Release 1 allows local attackers to execut… Android Mitigation only Fix from $1,9502024-04-02 MEDIUM 6.7 CVE-2024-20842 Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local privileged attackers to write out… Android Mitigation only Fix from $1,6002024-04-02 MEDIUM 6.7 CVE-2024-20843 Out-of-bound write vulnerability in command parsing implementation of libIfaaCa prior to SMR Apr-2024 Release 1 allows local privileged attackers to … Android Mitigation only Fix from $1,6002024-04-02