CVE-2020-11276: Out-of-bounds Read

Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer...

CVE-2020-11275: Out-of-bounds Read

Possible buffer over-read while parsing quiet IE in Rx beacon frame due to improper check of IE length in received beacon in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon...

PT-2021-9283

Name of the Vulnerable Software and Affected Versions Snapdragon Auto affected versions not specified Snapdragon Compute affected versions not specified Snapdragon Connectivity affected versions not specified Snapdragon Consumer Electronics Connectivity affected versions not specified Snapdragon...

PT-2021-9284

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description The issue is related to a possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames. This occurs due to improper validation of P2P IE...

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. The vulnerability exists in net/wireless/nl80211.c as it does not check the length of variable elements in a beacon head, leading to a buffer overflow...

Qualcomm Wlan Firmware Buffer Error Vulnerability

Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Wlan Firmware that originates from a buffer over-read due to improper IE length checking in receive beacons...

Researchers Discover Raindrop — 4th Malware Linked to the SolarWinds Attack

Cybersecurity researchers have unearthed a fourth new malware strain—designed to spread the malware onto other computers in victims' networks—which was deployed as part of the SolarWinds supply chain attack disclosed late last year. Dubbed "Raindrop" by Broadcom-owned Symantec, the malware joins...

Researchers Disclose Undocumented Chinese Malware Used in Recent Attacks

Cybersecurity researchers have disclosed a series of attacks by a threat actor of Chinese origin that has targeted organizations in Russia and Hong Kong with malware — including a previously undocumented backdoor. Attributing the campaign to Winnti or APT41, Positive Technologies dated the first...

Qualcomm Wlan Firmware Buffer Error Vulnerability

Qualcomm Wlan Firmware is a Wlan support firmware from Qualcomm Incorporated USA. A buffer error vulnerability exists in Qualcomm WLAN Firmware that originates from a buffer over-read that occurs if the length of the IE is less than the length of the accessed frame pointer when processing a...

aglvq (1.0.0), beacon-trellis (0.1.0) +74 more potentially affected by CVE-2020-26267 via tensorflow (>=2.1.0, <=2.1.2)

tensorflow PYPI version =2.1.0, =3.0.0, =0.0.1, =0.2.0, =0.2.2 - deepkingnet 0.0.1.dev0 - dgbpy-dm 0.1.2 and more Source cves: CVE-2020-26267 Source advisory: OSV:PYSEC-2020-140...

aglvq (1.0.0), beacon-trellis (0.1.0) +74 more potentially affected by CVE-2020-26270 via tensorflow (>=2.1.0, <=2.1.2)

tensorflow PYPI version =2.1.0, =3.0.0, =0.0.1, =0.2.0, =0.2.2 - deepkingnet 0.0.1.dev0 - dgbpy-dm 0.1.2 and more Source cves: CVE-2020-26270 Source advisory: MEND:CVE-2020-26270...

Multiple Qualcomm Products Buffer Error Vulnerability

The Qualcomm Component is a component of Qualcomm Incorporated USA. The intrinsic parts that provide the functionality of Qualcomm devices. A security vulnerability exists in multiple Qualcomm products that stems from an incorrect field check length that reads out of range when parsing NAN beacon...

Blackrota Golang Backdoor Packs Heavy Obfuscation Punch

Researchers have discovered a new backdoor written in the Go programming language Golang, which turned their heads due to its heavy level of obfuscation. The backdoor, called Blackrota, was first discovered in a honeypot owned by researchers, attempting to exploit an unauthorized-access...

CVE-2020-8669

creationtimestamp| type| source ---|---|--- 2020-11-12 22:32:14+00:00| seen| https://t.me/cibsecurity/16267...

Kegtap, Singlemalt, Winekey Malware Serve Up Ransomware to Hospitals

The boozy names might sound like the kind of thing conjured up in a frat-house common room, but malware families Kegtap, Singlemalt and Winekey are being used to gain initial network access in potentially lethal ransomware attacks on healthcare organizations in the midst of a global pandemic,...

CVE-2020-12911

creationtimestamp| type| source ---|---|--- 2020-10-08 18:43:16+00:00| seen| https://t.me/techactu/203 2020-10-14 02:39:01+00:00| seen| https://t.me/cibsecurity/15250 2022-06-07 23:41:54+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1875...

aglvq (1.0.0), beacon-trellis (0.1.0) +74 more potentially affected by CVE-2020-15202 via tensorflow (>=2.1.0, <=2.1.1)

tensorflow PYPI version =2.1.0, =3.0.0, =0.0.1, =0.2.0, =0.2.2 - deepkingnet 0.0.1.dev0 - dgbpy-dm 0.1.2 and more Source cves: CVE-2020-15202 Source advisory: OSV:PYSEC-2020-125...

aglvq (1.0.0), beacon-trellis (0.1.0) +74 more potentially affected by CVE-2020-15190 via tensorflow (>=2.1.0, <=2.1.1)

tensorflow PYPI version =2.1.0, =3.0.0, =0.0.1, =0.2.0, =0.2.2 - deepkingnet 0.0.1.dev0 - dgbpy-dm 0.1.2 and more Source cves: CVE-2020-15190 Source advisory: OSV:PYSEC-2020-113...

aglvq (1.0.0), beacon-trellis (0.1.0) +74 more potentially affected by CVE-2020-15208 via tensorflow (>=2.1.0, <=2.1.1)

tensorflow PYPI version =2.1.0, =3.0.0, =0.0.1, =0.2.0, =0.2.2 - deepkingnet 0.0.1.dev0 - dgbpy-dm 0.1.2 and more Source cves: CVE-2020-15208 Source advisory: OSV:PYSEC-2020-131...

aglvq (1.0.0), beacon-trellis (0.1.0) +74 more potentially affected by CVE-2020-15209 via tensorflow (>=2.1.0, <=2.1.1)

tensorflow PYPI version =2.1.0, =3.0.0, =0.0.1, =0.2.0, =0.2.2 - deepkingnet 0.0.1.dev0 - dgbpy-dm 0.1.2 and more Source cves: CVE-2020-15209 Source advisory: OSV:PYSEC-2020-132...