Browse CVEs

CRITICAL 9.8 CVE-2023-49433 Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetVirtualServerCfg. Ax9 Firmware No fix yet Fix from $2,3002023-12-07 CRITICAL 9.8 CVE-2023-49434 Tenda AX9 V22.03.01.46 has been found to contain a stack overflow vulnerability in the 'list' parameter at /goform/SetNetControlList. Ax9 Firmware No fix yet Fix from $2,3002023-12-07 CRITICAL 9.8 CVE-2023-49425 Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the deviceList parameter at /goform/setMacFilterCfg . Ax12 Firmware No fix yet Fix from $2,3002023-12-07 CRITICAL 9.8 CVE-2023-49426 Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg. Ax12 Firmware No fix yet Fix from $2,3002023-12-07 CRITICAL 9.8 CVE-2023-49424 Tenda AX12 V22.03.01.46 was discovered to contain a stack overflow via the list parameter at /goform/SetVirtualServerCfg. Ax12 Firmware No fix yet Fix from $2,3002023-12-07 CRITICAL 9.8 CVE-2023-41268 Improper input validation vulnerability in Samsung Open Source Escargot allows stack overflow and segmentation fault. This issue affects Escargot: fr… Escargot Patch available Fix from $2,3002023-12-06 HIGH 7.8 CVE-2023-42566 Out-of-bound write vulnerability in libsavsvc prior to SMR Dec-2023 Release 1 allows local attackers to execute arbitrary code. Android 14.0+ Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-42567 Improper size check vulnerability in softsimd prior to SMR Dec-2023 Release 1 allows stack-based buffer overflow. Android Mitigation only Fix from $1,9502023-12-05 MEDIUM 6.7 CVE-2023-42557 Out-of-bound write vulnerability in libIfaaCa prior to SMR Dec-2023 Release 1 allows local system attackers to execute arbitrary code. Android 14.0+ Fix from $1,6002023-12-05 HIGH 7.8 CVE-2023-42558 Out of bounds write vulnerability in HDCP in HAL prior to SMR Dec-2023 Release 1 allows attacker to perform code execution. Android Mitigation only Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-42560 Heap out-of-bounds write vulnerability in dec_mono_audb of libsavsac.so prior to SMR Dec-2023 Release 1 allows an attacker to execute arbitrary code. Android 14.0+ Fix from $1,9502023-12-05 MEDIUM 6.8 CVE-2023-42561 Heap out-of-bounds write vulnerability in bootloader prior to SMR Dec-2023 Release 1 allows a physical attacker to execute arbitrary code. Android 14.0+ Fix from $1,6002023-12-05 HIGH 7.8 CVE-2023-28551 Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-28580 Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache. Ar8035 Firmware Patch available Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-28587 Memory corruption in BT controller while parsing debug commands with specific sub-opcodes at HCI interface level. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-21634 Memory Corruption in Radio Interface Layer while sending an SMS or writing an SMS to SIM. Aqt1000 Firmware Mitigation only Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-22383 Memory Corruption in camera while installing a fd for a particular DMA buffer. Aqt1000 Firmware Patch available Fix from $1,9502023-12-05 HIGH 7.8 CVE-2023-28550 Memory corruption in MPP performance while accessing DSM watermark using external memory address. 315 5g Iot Modem Firmware Mitigation only Fix from $1,9502023-12-05 CRITICAL 9.8 CVE-2023-48697 Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause re… Threadx Usbx 6.3.0+ Fix from $2,3002023-12-05 CRITICAL 9.8 CVE-2023-48695 Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause re… Threadx Usbx 6.3.0+ Fix from $2,3002023-12-05 CRITICAL 9.8 CVE-2023-48315 Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote … Azure Rtos Netx Duo 6.3.0+ Fix from $2,3002023-12-05 CRITICAL 9.8 CVE-2023-48316 Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote … Azure Rtos Netx Duo 6.3.0+ Fix from $2,3002023-12-05 CRITICAL 9.8 CVE-2023-48691 Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause an out-… Azure Rtos Netx Duo 6.3.0+ Fix from $2,3002023-12-05 CRITICAL 9.8 CVE-2023-48692 Azure RTOS NetX Duo is a TCP/IP network stack designed specifically for deeply embedded real-time and IoT applications. An attacker can cause remote … Azure Rtos Netx Duo 6.3.0+ Fix from $2,3002023-12-05 HIGH 7.8 CVE-2023-5944 Delta Electronics DOPSoft is vulnerable to a stack-based buffer overflow, which may allow for arbitrary code execution if an attacker can lead a legi… Dopsoft Mitigation only Fix from $1,9502023-12-04 MEDIUM 5.5 CVE-2023-40465 Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area netwo… Aleos after 4.16.0 Fix from $1,6002023-12-04 HIGH 7.8 CVE-2023-45773 In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o… Android Patch available Fix from $1,9502023-12-04 HIGH 7.8 CVE-2023-45775 In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation… Android Patch available Fix from $1,9502023-12-04 HIGH 7.8 CVE-2023-45776 In CreateAudioBroadcast of broadcaster.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation… Android Patch available Fix from $1,9502023-12-04 HIGH 8.8 CVE-2023-40087 In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to paired … Android Patch available Fix from $1,9502023-12-04