Browse CVEs

HIGH 7.8 CVE-2024-45139 Substance3D - Stager versions 3.0.3 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execut… Substance 3d Stager 3.0.4+ Fix from $1,9502024-10-09 HIGH 7.8 CVE-2024-47417 Animate versions 23.0.7, 24.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution … Animate 23.0.8 / 24.0.5+ Fix from $1,9502024-10-09 HIGH 7.8 CVE-2024-47410 Animate versions 23.0.7, 24.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution… Animate 23.0.8 / 24.0.5+ Fix from $1,9502024-10-09 HIGH 7.8 CVE-2024-45150 Dimension versions 4.0.3 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the contex… Dimension 4.0.4+ Fix from $1,9502024-10-09 CRITICAL 9.8 CVE-2024-32608 HDF5 library through 1.14.3 has memory corruption in H5A__close resulting in the corruption of the instruction pointer and causing denial of service … Hdf5 1.14.4+ Fix from $2,3002024-10-09 HIGH 7.8 CVE-2024-45471 A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14… Tecnomatix Plant Simulation 2302.0016 / 2404.0005+ Fix from $1,9502024-10-08 HIGH 7.8 CVE-2024-45469 A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14… Tecnomatix Plant Simulation 2302.0016 / 2404.0005+ Fix from $1,9502024-10-08 HIGH 7.8 CVE-2024-45470 A vulnerability has been identified in Teamcenter Visualization V14.2 (All versions < V14.2.0.14), Teamcenter Visualization V14.3 (All versions < V14… Tecnomatix Plant Simulation 2302.0016 / 2404.0005+ Fix from $1,9502024-10-08 HIGH 7.8 CVE-2024-41902 A vulnerability has been identified in JT2Go (All versions < V2406.0003). The affected application contains a stack-based buffer overflow vulnerabili… Jt2go 2406.0003+ Fix from $1,9502024-10-08 HIGH 8.8 CVE-2024-34669 Out-of-bounds write in parsing h.263+ format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code wi… Android Mitigation only Fix from $1,9502024-10-08 HIGH 8.8 CVE-2024-34665 Out-of-bounds write in parsing h.264 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code wit… Android Mitigation only Fix from $1,9502024-10-08 HIGH 8.8 CVE-2024-34666 Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute… Android Mitigation only Fix from $1,9502024-10-08 HIGH 8.8 CVE-2024-34667 Out-of-bounds write in parsing h.265 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code wit… Android Mitigation only Fix from $1,9502024-10-08 HIGH 8.8 CVE-2024-34668 Out-of-bounds write in parsing h.263 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code wit… Android Mitigation only Fix from $1,9502024-10-08 MEDIUM 5.5 CVE-2024-45382 in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through out-of-bounds write. Openharmony after 4.1.0 Fix from $1,6002024-10-08 MEDIUM 6.7 CVE-2024-23374 Memory corruption is possible when an attempt is made from userspace or console to write some haptics effects pattern to the haptics debugfs file. Wsa8835 Firmware Mitigation only Fix from $1,6002024-10-07 MEDIUM 6.7 CVE-2024-20098 In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executi… Yocto Mitigation only Fix from $1,6002024-10-07 MEDIUM 6.7 CVE-2024-20099 In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executi… Yocto Mitigation only Fix from $1,6002024-10-07 CRITICAL 9.8 CVE-2024-20100 In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional… Iot Yocto after 3.3 Fix from $2,3002024-10-07 CRITICAL 9.8 CVE-2024-20101 In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional… Software Development Kit after 3.3 Fix from $2,3002024-10-07 CRITICAL 9.8 CVE-2024-20103 In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no addition… Software Development Kit after 3.3 Fix from $2,3002024-10-07 MEDIUM 6.7 CVE-2024-20090 In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executio… Android Mitigation only Fix from $1,6002024-10-07 HIGH 7.8 CVE-2024-20092 In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System executio… Android Mitigation only Fix from $1,9502024-10-07 MEDIUM 5.5 CVE-2024-9481 An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file t… Antivirus 24092400+ Fix from $1,6002024-10-04 MEDIUM 5.5 CVE-2024-9482 An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O fil… Antivirus 24092400+ Fix from $1,6002024-10-04 MEDIUM 6.5 CVE-2024-6444 No proper validation of the length of user input in olcp_ind_handler in zephyr/subsys/bluetooth/services/ots/ots_client.c. Zephyr after 3.6.0 Fix from $1,6002024-10-04 MEDIUM 6.5 CVE-2024-6443 In utf8_trunc in zephyr/lib/utils/utf8.c, last_byte_p can point to one byte before the string pointer if the string is empty. Zephyr after 3.6.0 Fix from $1,6002024-10-04 MEDIUM 6.5 CVE-2024-6442 In ascs_cp_rsp_add in /subsys/bluetooth/audio/ascs.c, an unchecked tailroom could lead to a global buffer overflow. Zephyr after 3.6.0 Fix from $1,6002024-10-04 CRITICAL 9.8 CVE-2024-41593 DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-ext… Vigor3912 Firmware 4.2.7 / 4.3.2.8+ Fix from $2,3002024-10-03 HIGH 8.0 CVE-2024-41595 DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to change settings or cause a denial of service via .cgi pages because of missing bo… Vigor3910 Firmware after 4.3.2.6 Fix from $1,9502024-10-03