Browse CVEs

MEDIUM 5.5 CVE-2024-53680 In the Linux kernel, the following vulnerability has been resolved: ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init() Under c… Linux Kernel 5.4.287 / 5.10.231+ Fix from $1,6002025-01-11 HIGH 7.5 CVE-2024-56446 Vulnerability of variables not being initialized in the notification module Impact: Successful exploitation of this vulnerability may affect availabi… Harmonyos No fix yet Fix from $1,9502025-01-08 MEDIUM 5.5 CVE-2024-56769 In the Linux kernel, the following vulnerability has been resolved: media: dvb-frontends: dib3000mb: fix uninit-value in dib3000_write_reg Syzbot r… Linux Kernel 6.1.123 / 6.6.69+ Fix from $1,6002025-01-06 MEDIUM 5.5 CVE-2024-56739 In the Linux kernel, the following vulnerability has been resolved: rtc: check if __rtc_read_time was successful in rtc_timer_do_work() If the __rt… Linux Kernel 4.19.325 / 5.4.287+ Fix from $1,6002024-12-29 MEDIUM 5.5 CVE-2024-56685 In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: Check num_codecs is not zero to avoid panic during probe Follow… Linux Kernel 6.11.11 / 6.12.2+ Fix from $1,6002024-12-28 MEDIUM 5.5 CVE-2024-56677 In the Linux kernel, the following vulnerability has been resolved: powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init() Durin… Linux Kernel 6.1.120 / 6.6.64+ Fix from $1,6002024-12-28 MEDIUM 5.5 CVE-2024-56648 In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid potential out-of-bound access in fill_frame_info() syzbot is ab… Linux Kernel 5.10.231 / 5.15.174+ Fix from $1,6002024-12-27 MEDIUM 5.5 CVE-2024-56630 In the Linux kernel, the following vulnerability has been resolved: ocfs2: free inode when ocfs2_get_init_inode() fails syzbot is reporting busy in… Linux Kernel 5.4.287 / 5.10.231+ Fix from $1,6002024-12-27 HIGH 7.1 CVE-2024-53155 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix uninitialized value in ocfs2_file_read_iter() Syzbot has reported th… Linux Kernel 4.19.325 / 5.4.287+ Fix from $1,9502024-12-24 HIGH 7.3 CVE-2024-11364 Another “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE… Arena Mitigation only Fix from $1,9502024-12-19 CRITICAL 9.8 CVE-2024-47540 GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the… Gstreamer 1.24.10+ Fix from $2,3002024-12-12 MEDIUM 6.5 CVE-2024-11991 Motoko's incremental garbage collector is impacted by an uninitialized memory access bug, caused by incorrect use of write barriers in a few location… Motoko 0.13.4+ Fix from $1,6002024-12-09 MEDIUM 6.5 CVE-2018-9429 In buildImageItemsIfPossible of ItemTable.cpp there is a possible out of bound read due to uninitialized data. This could lead to information disclos… Android Patch available Fix from $1,6002024-12-02 HIGH 7.5 CVE-2018-9381 In gatts_process_read_by_type_req of gatt_sr.c, there is a possible information disclosure due to uninitialized data. This could lead to remote infor… Android Patch available Fix from $1,9502024-12-02 MEDIUM 5.5 CVE-2018-9377 In getIntentForIntentSender of ActivityManagerService.java, there is a possible way to access user metadata due to a pending intent. This could lead … Android Mitigation only Fix from $1,6002024-11-28 MEDIUM 5.5 CVE-2017-18306 Information disclosure due to uninitialized variable. Sd 450 Firmware No fix yet Fix from $1,6002024-11-26 MEDIUM 5.5 CVE-2024-53101 In the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() us… Linux Kernel 4.19.324 / 5.4.286+ Fix from $1,6002024-11-25 HIGH 7.8 CVE-2024-9717 Trimble SketchUp Viewer SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to ex… Sketchup Viewer Mitigation only Fix from $1,9502024-11-22 HIGH 7.8 CVE-2024-8842 PDF-XChange Editor RTF File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute… Pdf Tools 10.4.0.388+ Fix from $1,9502024-11-22 MEDIUM 5.5 CVE-2018-9420 In BnCameraService::onTransact of CameraService.cpp, there is a possible information disclosure due to uninitialized data. This could lead to local i… Android Patch available Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2018-9421 In writeInplace of Parcel.cpp, there is a possible information leak across processes, using Binder, due to uninitialized data. This could lead to loc… Android Patch available Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2018-9346 In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead … Android Patch available Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2018-9345 In BnAudioPolicyService::onTransact of AudioPolicyService.cpp, there is a possible information disclosure due to uninitialized data. This could lead … Android Patch available Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-53083 In the Linux kernel, the following vulnerability has been resolved: usb: typec: qcom-pmic: init value of hdr_len/txbuf_len earlier If the read of U… Linux Kernel 6.6.61 / 6.11.8+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-53066 In the Linux kernel, the following vulnerability has been resolved: nfs: Fix KMSAN warning in decode_getfattr_attrs() Fix the following KMSAN warni… Linux Kernel 4.19.324 / 5.4.286+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-50299 In the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb() A size validation fix simi… Linux Kernel 4.19.324 / 5.4.286+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-50300 In the Linux kernel, the following vulnerability has been resolved: regulator: rtq2208: Fix uninitialized use of regulator_config Fix rtq2208 drive… Linux Kernel 6.6.61 / 6.11.8+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-50302 KEV In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by… Debian Linux 3.2 / 4.19.324+ Fix from $1,6002024-11-19 MEDIUM 5.5 CVE-2024-50273 In the Linux kernel, the following vulnerability has been resolved: btrfs: reinitialize delayed ref list after deleting it from the list At insert_… Linux Kernel 4.19.324 / 5.4.286+ Fix from $1,6002024-11-19 HIGH 7.8 CVE-2024-49029 Microsoft Excel Remote Code Execution Vulnerability 365 Apps Patch available Fix from $1,9502024-11-12