AZL-35633 CVE-2024-24786 affecting package azcopy for versions less than 10.24.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-35662 CVE-2024-24786 affecting package kubernetes for versions less than 1.30.1-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

AZL-37504 CVE-2023-45290 affecting package golang for versions less than 1.21.6-1

When parsing a multipart form either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile, limits on the total size of the parsed form were not applied to the memory consumed while reading a single form line. This permits a...

AZL-37462 CVE-2023-45289 affecting package golang for versions less than 1.21.6-1

When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as "Authorization" or "Cookie". For example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a...

AZL-35673 CVE-2024-24786 affecting package telegraf for versions less than 1.31.0-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

CVE-2022-41862 affecting package postgresql for versions less than 14.11-1

CVE-2022-41862 affecting package postgresql for versions less than 14.11-1. This CVE either no longer is or was never applicable...

CVE-2024-22667 affecting package vim for versions less than 9.0.2121-2

CVE-2024-22667 affecting package vim for versions less than 9.0.2121-2. A patched version of the package is available...

CVE-2023-50387 affecting package unbound for versions less than 1.19.1-1

CVE-2023-50387 affecting package unbound for versions less than 1.19.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2023-5679 affecting package bind for versions less than 9.16.48-1

CVE-2023-5679 affecting package bind for versions less than 9.16.48-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-20833

Use after free vulnerability in pubcryptorecvmsg prior to SMR Mar-2024 Release 1 due to race condition allows local attackers with system privilege to cause memory corruption...

Information disclosure

The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission...

Heap overflow

Heap overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows a privileged attacker to execute arbitrary code...

CVE-2024-20836

Out of bounds Read vulnerability in ssmisgetfrm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local attackers to read out of bounds memory...

CVE-2024-20835

CVE-2024-20835 concerns CustomFrequencyManagerService with an improper access-control vulnerability. Multiple connected sources (Red Hat, PT Security, CVE databases) confirm the issue affects CustomFrequencyManagerService prior to the Samsung SMR Mar-2024 Release 1, enabling local attackers to ex...

CVE-2024-20834

CVE-2024-20834 affects the WlanTest module in Samsung mobile environments. Affected: WlanTest versions prior to SMR Mar-2024 Release 1. Issue: sensitive information exposure enables local attackers to access the MAC address without permission. Impact: local disclosure of a low-integrity, low-avai...

CVE-2024-20832

The CVE-2024-20832 entry concerns the Little Kernel bootloader heap overflow in Samsung devices. Affected component: Little Kernel in the bootloader; root cause: heap overflow prior to SMR Mar-2024 Release 1. Impact: local privileged attackers can execute arbitrary code. Public exploitation detai...

CVE-2024-20831

Stack overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code...

CVE-2024-20831

CVE-2024-20831 describes a stack overflow in the Little Kernel bootloader. The vulnerability is exploitable locally to gain privileged code execution via the bootloader on versions prior to SMR Mar-2024 Release 1. Remediation per provided documents is to update to SMR Mar-2024 Release 1 or later;...

CVE-2023-52432

The CVE involves Samsung libsec-ril, specifically the IpcTxSndSetLoopbackCtrl function. Affected: libsec-ril versions prior to SMR Sep-2023 Release 1. Root cause: improper input validation in IpcTxSndSetLoopbackCtrl. Impact: local attackers can write out-of-bounds memory, with potential confident...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from South Korea's Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Mar-2024 Release 1, which originates from a sensitive information exposure vulnerability in the...