CVE-2024-32898

CVE-2024-32898 affects the ProtocolCellIdentityParserV4::Parse() function in protocolnetadapter.cpp. A missing bounds check causes an out-of-bounds read, enabling potential information disclosure. The impact is described as a local disclosure risk that could enable baseband firmware compromise; e...

CVE-2024-32895

In BCMFASTPATH of dhdmsgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32894

In bcgetconvertedreceivedbearer of bcutilities.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32894

The CVE-2024-32894 entry describes a likely out-of-bounds read in bc_get_converted_received_bearer of bc_utilities.c, enabling remote information disclosure with no privileges or user interaction. Multiple connected records (Red Hat, NVD, OSV, CNNVD) reiterate the same root cause and impact, with...

CVE-2024-29786

In pktprocfilldataaddrwithoutbm of linkrxpktproc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-29786

CVE-2024-29786 describes a potential remote code execution in Google Pixel devices due to an out-of-bounds write in the function pktproc_fill_data_addr_without_bm within link_rx_pktproc.c caused by a missing bounds check. The issue affects Pixel firmware/CPIF as listed in the Pixel bulletin; the ...

CVE-2024-29778

In ProtocolPsDedicatedBearInfoAdapter::processQosSession of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation...

CVE-2024-29778

In ProtocolPsDedicatedBearInfoAdapter::processQosSession of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation...

CVE-2024-29778

CVE-2024-29778 : Vulnerability in ProtocolPsDedicatedBearInfoAdapter::processQosSession (protocolpsadapter.cpp) with a missing bounds check causing an out-of-bounds read. This could enable local information disclosure and require baseband firmware compromise; exploitation does not require user in...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the ProtocolVsimOperationAdapter module of protocolvsimadapter.cpp, which may allow out-of-bounds reads...

PT-2024-24971 · Google · Android +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in the pl330 dma from peri start function of fp spi dma.c, which could lead to a possible out of bounds...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the pl330dmafromperistart module of fpspidma.c, where out-of-bounds writes may exist...

PT-2024-24980 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in the dhd prot txstatus process function of dhd msgbuf.c, which could lead to a possible out of bounds...

PT-2024-23029 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in the pktproc fill data addr without bm function of link rx pktproc.c, which could lead to an out of...

PT-2024-24975 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in the set secure reg function of sac handler.c, which can lead to an out of bounds read. This could resu...

PT-2024-24976 · Lwip · Lwip

Name of the Vulnerable Software and Affected Versions: lwip affected versions not specified Description: The issue is related to a missing bounds check in the lwis initialize transaction fences function of lwis fence.c, which could lead to a possible out of bounds write. This could result in loca...

PT-2024-24958 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write in the circ read function of link device memory legacy.c due to an incorrect bounds check. This...

kernel: nvmet-tcp: add bounds check on Transfer Tag

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds check on Transfer Tag ttag is used as an index to get cmd in nvmettcphandleh2cdatapdu, add a bounds check to avoid out-of-bounds access...

DEBIAN-CVE-2024-27851

The issue was addressed with improved bounds checks. This issue is fixed in Safari 17.5, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, tvOS 17.5, visionOS 1.2, watchOS 10.5. Processing maliciously crafted web content may lead to arbitrary code execution...

kernel: hwmon: (coretemp) Fix out-of-bounds memory access

In the Linux kernel, the following vulnerability has been resolved: hwmon: coretemp Fix out-of-bounds memory access Fix a bug that pdata-cpumap is set before out-of-bounds check. The problem might be triggered on systems with more than 128 cores per package...