Browse CVEs

MEDIUM 6.7 CVE-2022-26443 In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System e… Mt7603 Firmware Mitigation only Fix from $1,6002022-08-01 MEDIUM 6.7 CVE-2022-26444 In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System e… Mt7603 Firmware Mitigation only Fix from $1,6002022-08-01 MEDIUM 6.7 CVE-2022-26445 In wifi driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System e… Mt7603 Firmware Mitigation only Fix from $1,6002022-08-01 MEDIUM 6.7 CVE-2022-21792 In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System ex… Android Mitigation only Fix from $1,6002022-08-01 MEDIUM 6.7 CVE-2022-26426 In camera isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System ex… Android Mitigation only Fix from $1,6002022-08-01 MEDIUM 6.5 CVE-2022-34526 A stack overflow was discovered in the _TIFFVGetField function of Tiffsplit v4.4.0. This vulnerability allows attackers to cause a Denial of Service … Fedora Patch available Fix from $1,6002022-07-29 HIGH 8.8 CVE-2022-34528 D-Link DSL-3782 v1.03 and below was discovered to contain a stack overflow via the function getAttrValue. Dsl 3782 Firmware No fix yet Fix from $1,9502022-07-29 HIGH 7.8 CVE-2022-27865 A maliciously crafted TGA or PCX file may be used to write beyond the allocated buffer through DesignReview.exe application while parsing TGA and PCX… Design Review Patch available Fix from $1,9502022-07-29 MEDIUM 5.5 CVE-2022-36752 png2webp v1.0.4 was discovered to contain an out-of-bounds write via the function w2p. This vulnerability is exploitable via a crafted png file. Png2webp Patch available Fix from $1,6002022-07-28 CRITICAL 9.8 CVE-2022-31627 In PHP versions 8.1.x below 8.1.8, when fileinfo functions, such as finfo_buffer, due to incorrect patch applied to the third party code from libmagi… PHP 8.1.8+ Fix from $2,3002022-07-28 HIGH 8.8 CVE-2022-2294 KEVEPSS 70% Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafte… Chrome 2.36.5 / 10.15.7+ Fix from $1,9502022-07-28 MEDIUM 6.5 CVE-2022-36998 An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and rel… Flex Appliance Patch available Fix from $1,6002022-07-28 HIGH 8.8 CVE-2022-2415 Heap buffer overflow in WebGL in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted … Chrome 103.0.5060.53+ Fix from $1,9502022-07-28 HIGH 8.8 CVE-2022-1876 Heap buffer overflow in DevTools in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to… Chrome 102.0.5005.61+ Fix from $1,9502022-07-27 HIGH 8.8 CVE-2022-1638 Heap buffer overflow in V8 Internationalization in Google Chrome prior to 101.0.4951.64 allowed a remote attacker to potentially exploit heap corrupt… Chrome 101.0.4951.64+ Fix from $1,9502022-07-26 MEDIUM 6.5 CVE-2022-1482 Inappropriate implementation in WebGL in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a … Chrome 101.0.4951.41+ Fix from $1,6002022-07-26 HIGH 8.8 CVE-2022-1483 Heap buffer overflow in WebGPU in Google Chrome prior to 101.0.4951.41 allowed a remote attacker who had compromised the renderer process to potentia… Chrome 101.0.4951.41+ Fix from $1,9502022-07-26 HIGH 8.8 CVE-2022-1484 Heap buffer overflow in Web UI Settings in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via … Chrome 101.0.4951.41+ Fix from $1,9502022-07-26 HIGH 8.8 CVE-2022-1489 Out of bounds memory access in UI Shelf in Google Chrome on Chrome OS, Lacros prior to 101.0.4951.41 allowed a remote attacker to potentially exploit… Chrome 101.0.4951.41+ Fix from $1,9502022-07-26 MEDIUM 5.5 CVE-2021-33448 An issue was discovered in mjs(mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow at 0x7fffe9049390. Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33464 An issue was discovered in yasm version 1.3.0. There is a heap-buffer-overflow in inc_fopen() in modules/preprocs/nasm/nasm-pp.c. Yasm No fix yet Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33438 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in json_parse_array() … Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33443 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in mjs_execute() in mj… Mjs 2.20.0+ Fix from $1,6002022-07-26 HIGH 8.8 CVE-2022-1041 In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning. Zephyr after 3.0.0 Fix from $1,9502022-07-26 HIGH 8.8 CVE-2022-1042 In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning. Zephyr after 3.0.0 Fix from $1,9502022-07-26 HIGH 8.8 CVE-2022-1142 Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user inter… Chrome 100.0.4896.60+ Fix from $1,9502022-07-23 HIGH 8.8 CVE-2022-1143 Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user inter… Chrome 100.0.4896.60+ Fix from $1,9502022-07-23 MEDIUM 5.5 CVE-2022-34502 Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consume_encoded_name_new at format/wasm/wasm.c. This vulnerability a… Radare2 No fix yet Fix from $1,6002022-07-22 MEDIUM 6.5 CVE-2022-34503 QPDF v8.4.2 was discovered to contain a heap buffer overflow via the function QPDF::processXRefStream. This vulnerability allows attackers to cause a… Qpdf No fix yet Fix from $1,6002022-07-22 HIGH 8.8 CVE-2022-0976 Heap buffer overflow in GPU in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTM… Chrome 99.0.4844.74+ Fix from $1,9502022-07-21