CVE-2024-20091

In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1701...

CVE-2024-20091

CVE-2024-20091 affects MediaTek’s vdec component in the ALPS platform (ALPS09028313) due to a missing bounds check, enabling an out-of-bounds read that could lead to local information disclosure with system execution privileges and no user interaction required. Patch and issue IDs (MSV-1701) are ...

PT-2024-18583 · M4U · M4U

Name of the Vulnerable Software and Affected Versions: m4u affected versions not specified Description: The issue is related to a possible out of bounds read in m4u due to a missing bounds check. This could lead to local information disclosure, requiring System execution privileges for...

PT-2024-18582 · M4U · M4U

Name of the Vulnerable Software and Affected Versions: m4u affected versions not specified Description: The issue is related to a possible out of bounds read in m4u due to a missing bounds check. This could lead to local information disclosure, requiring System execution privileges for...

PT-2024-18584 · Vdec · Vdec

Name of the Vulnerable Software and Affected Versions: vdec affected versions not specified Description: The issue is related to a possible out of bounds read in vdec due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User...

PT-2024-18580 · Mediatek · Mediatek

Name of the Vulnerable Software and Affected Versions: MediaTek products affected versions not specified Description: The issue is related to a possible out of bounds read in vdec due to a missing bounds check, which could lead to local information disclosure with System execution privileges...

PT-2024-18579 · Mediatek · Mediatek

Name of the Vulnerable Software and Affected Versions: MediaTek products affected versions not specified Description: A high-severity vulnerability affects MediaTek products, allowing for local escalation of privilege with System execution privileges needed. User interaction is not required for...

PT-2024-18586 · Power · Power

Name of the Vulnerable Software and Affected Versions: power affected versions not specified Description: The issue involves a possible out of bounds write due to a missing bounds check, which could lead to local escalation of privilege. System execution privileges are needed for exploitation, an...

PT-2024-18585 · Power · Power

Name of the Vulnerable Software and Affected Versions: power affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in power. This could lead to local escalation of privilege with System execution privileges needed. User...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : OpenIPMI (SUSE-SU-2024:3505-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:3505-1 advisory. - CVE-2024-42934: crash or message authentication bypass on IPMI simulator due to missing bounds check...

SUSE-SU-2024:3505-1 Security update for OpenIPMI

This update for OpenIPMI fixes the following issues: - CVE-2024-42934: crash or message authentication bypass on IPMI simulator due to missing bounds check. bsc1229910...

PUB-A-319710920

In validaddress of syscall.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-310937217

In gscgsarescue of gscgsa.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-299775134

In smsExtractCbLanguage of smsCellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-322820753

In mmGetMobileIdIndexForNsUpdate of mmGmmPduCodec.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-39432

In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed...

CVE-2024-39433

In drm service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2024-39431

In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed...

CVE-2024-39434

In drm service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2024-39434

In drm service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...