Browse CVEs

HIGH 7.8 CVE-2023-52482 In the Linux kernel, the following vulnerability has been resolved: x86/srso: Add SRSO mitigation for Hygon processors Add mitigation for the specu… Linux Kernel 5.10.215 / 5.15.134+ Fix from $1,9502024-02-29 HIGH 7.8 CVE-2024-1847 Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Va… Solidworks 2024+ Fix from $1,9502024-02-28 MEDIUM 5.5 CVE-2021-46931 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Wrap the tx reporter dump callback to extract the sq Function mlx5e_… Linux Kernel 5.10.90 / 5.15.13+ Fix from $1,6002024-02-27 CRITICAL 9.8 CVE-2024-23605 A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially crafted .ggu… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26 CRITICAL 9.8 CVE-2024-23496 A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26 CRITICAL 9.8 CVE-2024-21802 A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17. A specially crafted .ggu… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26 CRITICAL 9.8 CVE-2024-21825 A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26 CRITICAL 9.8 CVE-2024-21836 A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26 MEDIUM 6.7 CVE-2024-26586 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix stack corruption When tc filters are first added … Linux Kernel 5.10.209 / 5.15.148+ Fix from $1,6002024-02-22 HIGH 7.8 CVE-2024-23124 A maliciously crafted STP file, when parsed in ASMIMPORT228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A maliciou… Autocad 2021.1.4 / 2022.1.4+ Fix from $1,9502024-02-22 HIGH 7.8 CVE-2024-23125 A maliciously crafted SLDPRT file when parsed ODXSW_DLL.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious ac… Autocad Electrical 2021.1.4 / 2022.1.4+ Fix from $1,9502024-02-22 HIGH 7.8 CVE-2024-23126 A maliciously crafted CATPART file when parsed CC5Dll.dll through Autodesk applications can be used to cause a Stack-based Overflow. A malicious acto… Autocad 2021.1.4 / 2022.1.4+ Fix from $1,9502024-02-22 HIGH 7.8 CVE-2024-23127 A maliciously crafted MODEL, SLDPRT, or SLDASM file, when parsed in ODXSW_DLL.dll and libodxdll.dll through Autodesk applications, can be used to cau… Autocad 2021.1.4 / 2022.1.4+ Fix from $1,9502024-02-22 HIGH 7.8 CVE-2024-23121 A maliciously crafted MODEL file, when parsed in libodxdll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious … Autocad Electrical 2021.1.4 / 2022.1.4+ Fix from $1,9502024-02-22 HIGH 7.8 CVE-2024-23122 A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability. A malicious ac… Autocad Electrical 2021.1.4 / 2022.1.4+ Fix from $1,9502024-02-22 HIGH 7.8 CVE-2024-23123 A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerab… Autocad 2021.1.4 / 2022.1.4+ Fix from $1,9502024-02-22 HIGH 7.0 CVE-2024-25423 An issue in MAXON CINEMA 4D R2024.2.0 allows a local attacker to execute arbitrary code via a crafted c4d_base.xdl64 file. Cinema 4d Mitigation only Fix from $1,9502024-02-22 HIGH 7.8 CVE-2024-23120 A maliciously crafted STP and STEP file, when parsed in ASMIMPORT228A.dll and ASMIMPORT229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds … Autocad 2021.1.4 / 2022.1.4+ Fix from $1,9502024-02-22 HIGH 7.8 CVE-2024-0446 A maliciously crafted STP, CATPART or MODEL file, when parsed in ASMKERN228A.dll and ASMdatax229A.dll through Autodesk AutoCAD, may force an Out-of-B… Autocad 2021.1.4 / 2022.1.4+ Fix from $1,9502024-02-22 HIGH 7.8 CVE-2023-42848 The issue was addressed with improved bounds checks. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, tvOS 17.1, iOS 16.7.2 and iPadOS 16.7.2,… Ipad Os 10.1 / 13.6.1+ Fix from $1,9502024-02-21 HIGH 7.8 CVE-2023-42873 The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadO… Ipad Os 12.7.1 / 13.6.1+ Fix from $1,9502024-02-21 HIGH 8.8 CVE-2024-1669 Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a c… Chrome 122.0.6261.57+ Fix from $1,9502024-02-21 CRITICAL 9.8 CVE-2024-23606 An out-of-bounds write vulnerability exists in the sopen_FAMOS_read functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111).… Fedora No fix yet Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2024-21795 A heap-based buffer overflow vulnerability exists in the .egi parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (ab0ee111… Fedora No fix yet Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2024-23305 An out-of-bounds write vulnerability exists in the BrainVisionMarker Parsing functionality of The Biosig Project libbiosig 2.5.0 and Master Branch (a… Fedora No fix yet Fix from $2,3002024-02-20 CRITICAL 9.8 CVE-2023-45318 A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit 80d4004. A specially crafted… Gecko Software Development Kit No fix yet Fix from $2,3002024-02-20 HIGH 8.1 CVE-2024-1557 Memory safety bugs present in Firefox 122. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of the… Firefox 123.0+ Fix from $1,9502024-02-20 MEDIUM 6.0 CVE-2024-26328 An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c does not set NumVFs to PCI_SRIOV_TOTAL_VF, and thus interact… Qemu after 8.2.1 Fix from $1,6002024-02-19 MEDIUM 5.3 CVE-2024-26327 An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater… Qemu after 8.2.1 Fix from $1,6002024-02-19 CRITICAL 9.8 CVE-2023-5779 can: out of bounds in remove_rx_filter function Zephyr after 3.5.0 Fix from $2,3002024-02-18