Browse CVEs

HIGH 7.5 CVE-2024-38064 Windows TCP/IP Information Disclosure Vulnerability Windows 10 1507 10.0.10240.20710 / 10.0.14393.7159+ Fix from $1,9502024-07-09 HIGH 7.8 CVE-2024-23159 A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to uninitialized variables. This vuln… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.8 CVE-2024-37002 A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables. This vulnerabi… Autocad 2022.1.5 / 2023.1.6+ Fix from $1,9502024-06-25 HIGH 7.1 CVE-2024-38381 In the Linux kernel, the following vulnerability has been resolved: nfc: nci: Fix uninit-value in nci_rx_work syzbot reported the following uninit-… Linux Kernel 4.19.316 / 5.4.278+ Fix from $1,9502024-06-21 MEDIUM 5.5 CVE-2024-33619 In the Linux kernel, the following vulnerability has been resolved: efi: libstub: only free priv.runtime_map when allocated priv.runtime_map is onl… Linux Kernel 6.1.93 / 6.6.33+ Fix from $1,6002024-06-21 HIGH 7.5 CVE-2022-48747 In the Linux kernel, the following vulnerability has been resolved: block: Fix wrong offset in bio_truncate() bio_truncate() clears the buffer outs… Linux Kernel 5.4.176 / 5.10.96+ Fix from $1,9502024-06-20 MEDIUM 5.5 CVE-2024-38619 In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Check whether the media is initialized The member "uzonesi… Linux Kernel 4.19.317 / 5.4.279+ Fix from $1,6002024-06-20 MEDIUM 5.5 CVE-2021-47597 In the Linux kernel, the following vulnerability has been resolved: inet_diag: fix kernel-infoleak for UDP sockets KMSAN reported a kernel-infoleak… Linux Kernel 5.4.168 / 5.10.88+ Fix from $1,6002024-06-19 MEDIUM 5.5 CVE-2021-47583 In the Linux kernel, the following vulnerability has been resolved: media: mxl111sf: change mutex_init() location Syzbot reported, that mxl111sf_ct… Linux Kernel 4.19.222 / 5.4.168+ Fix from $1,6002024-06-19 MEDIUM 5.5 CVE-2024-38592 In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Init `ddp_comp` with devm_kcalloc() In the case where `conn_route… Linux Kernel 6.8.12 / 6.9.3+ Fix from $1,6002024-06-19 MEDIUM 5.5 CVE-2024-38593 In the Linux kernel, the following vulnerability has been resolved: net: micrel: Fix receiving the timestamp in the frame for lan8841 The blamed co… Linux Kernel 6.6.33 / 6.8.12+ Fix from $1,6002024-06-19 HIGH 7.1 CVE-2024-38538 In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot trigg… Linux Kernel 6.1.93 / 6.6.33+ Fix from $1,9502024-06-19 MEDIUM 5.5 CVE-2024-36503 Memory management vulnerability in the Gralloc module Impact: Successful exploitation of this vulnerability will affect availability. Emui No fix yet Fix from $1,6002024-06-14 MEDIUM 5.5 CVE-2024-32910 In handle_msg_shm_map_req of trusty/user/base/lib/spi/srv/tipc/tipc.c, there is a possible stack data disclosure due to uninitialized data. This coul… Android Mitigation only Fix from $1,6002024-06-13 HIGH 7.8 CVE-2024-32906 In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of privilege with no additional … Android Mitigation only Fix from $1,9502024-06-13 MEDIUM 5.5 CVE-2024-29785 In aur_get_state of aurora.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure w… Android No fix yet Fix from $1,6002024-06-13 MEDIUM 5.5 CVE-2024-29780 In hwbcc_ns_deprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disclosure due to uninitialized da… Android Mitigation only Fix from $1,6002024-06-13 MEDIUM 5.3 CVE-2024-36454 Use of uninitialized resource issue exists in IPCOM EX2 Series (V01L0x Series) V01L07NF0201 and earlier, and IPCOM VE2 Series V01L07NF0201 and earlie… Mitigation only Fix from $1,6002024-06-12 MEDIUM 5.5 CVE-2024-36933 In the Linux kernel, the following vulnerability has been resolved: nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment… Linux Kernel 4.19.314 / 5.4.276+ Fix from $1,6002024-05-30 HIGH 7.8 CVE-2024-36898 In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix uninitialised kfifo If a line is requested with debounce, an… Linux Kernel 5.15.203 / 6.1.91+ Fix from $1,9502024-05-30 MEDIUM 5.5 CVE-2024-36900 In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when devlink reload during initialization The devli… Linux Kernel 6.1.91 / 6.6.31+ Fix from $1,6002024-05-30 MEDIUM 5.5 CVE-2024-36903 In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix potential uninit-value access in __ip6_make_skb() As it was done in c… Linux Kernel 4.15 / 4.20+ Fix from $1,6002024-05-30 MEDIUM 5.5 CVE-2024-36020 In the Linux kernel, the following vulnerability has been resolved: i40e: fix vf may be used uninitialized in this function warning To fix the regr… Linux Kernel 4.19.312 / 5.4.274+ Fix from $1,6002024-05-30 MEDIUM 5.5 CVE-2024-36021 In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash when devlink reload during pf initialization The de… Linux Kernel 6.1.85 / 6.6.26+ Fix from $1,6002024-05-30 HIGH 7.8 CVE-2021-47553 In the Linux kernel, the following vulnerability has been resolved: sched/scs: Reset task stack state in bringup_cpu() To hot unplug a CPU, the idl… Linux Kernel 5.10.83 / 5.13+ Fix from $1,9502024-05-24 MEDIUM 5.5 CVE-2021-47554 In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: avoid putting an uninitialized iova_domain The system will crash if w… Linux Kernel 5.15.6+ Fix from $1,6002024-05-24 MEDIUM 5.5 CVE-2021-47462 In the Linux kernel, the following vulnerability has been resolved: mm/mempolicy: do not allow illegal MPOL_F_NUMA_BALANCING | MPOL_LOCAL in mbind()… Linux Kernel 5.14.15+ Fix from $1,6002024-05-22 MEDIUM 5.5 CVE-2021-47451 In the Linux kernel, the following vulnerability has been resolved: netfilter: xt_IDLETIMER: fix panic that occurs when timer_type has garbage value… Linux Kernel 5.10.76 / 5.14.15+ Fix from $1,6002024-05-22 MEDIUM 5.5 CVE-2021-47446 In the Linux kernel, the following vulnerability has been resolved: drm/msm/a4xx: fix error handling in a4xx_gpu_init() This code returns 1 on erro… Linux Kernel 5.14.14+ Fix from $1,6002024-05-22 HIGH 7.1 CVE-2023-52842 In the Linux kernel, the following vulnerability has been resolved: virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() KMSAN reported th… Linux Kernel 6.6.2+ Fix from $1,9502024-05-21