Lucene search
+L

943 matches found

Prion
Prion
added 2022/10/19 11:15 a.m.26 views

Memory corruption

Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile...

4.3CVSS7.9AI score0.00119EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/10/18 12:0 a.m.10 views

The vulnerability of the Cisco Discovery protocol implementation in the Cisco IOS XR operating system allows a perpetrator to trigger a maintenance failure.

The vulnerability of the Cisco Discovery protocol implementation in the Cisco IOS XR operating system lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending specially crafted...

4.3CVSS5.5AI score0.00958EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/10/17 12:0 a.m.40 views

CVE-2022-33217

Memory corruption in Qualcomm IPC due to buffer copy without checking the size of input while starting communication with a compromised kernel. in Snapdragon Mobile...

7.8CVSS8.1AI score0.00119EPSS
SaveExploits0References1
CVE
CVE
added 2022/10/17 12:0 a.m.138 views

CVE-2022-33217

CVE-2022-33217 : Memory corruption in Qualcomm IPC within Snapdragon Mobile due to a buffer copy that fails to validate input size when initiating communication with a compromised kernel. The issue targets Qualcomm IPC kernel components and can enable local exploitation with low privileges, carry...

7.8CVSS7.9AI score0.00119EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/10 12:0 a.m.15 views

The vulnerability in the AES Crypt file encryption program for Linux, related to copying buffers without checking input data, allows a hacker to trigger a service failure.

The vulnerability of the AES Crypt file encryption program for Linux lies in the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause a service failure...

9.8CVSS6AI score0.00164EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/04 12:0 a.m.9 views

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to execute arbitrary code.

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 relates to the copying of buffers without checking the size of the input data during the processing of the libcommonprod.so file. Exploiting this vulnerability allows a remote attacker to...

9.6CVSS8.2AI score0.01232EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2022/10/03 12:0 a.m.8 views

The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird lies in the copying of buffers without checking the size of the input data. This allows an attacker to execute arbitrary code.

The vulnerability in Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created website...

7.6CVSS8.1AI score0.01342EPSS
SaveExploits0References21Affected Software11
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:0 a.m.15 views

The vulnerability of the `cv::BmpDecoder::readData` function in the `modules/imgcodecs/src/grfmt_bmp.cpp` file of the Computer Vision Library (OpenCV), a freely available computer vision and image processing library for general-purpose numerical algorithms, allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the cv::BmpDecoder::readData function in the modules/imgcodecs/src/grfmtbmp.cpp file of the Computer Vision Library OpenSource Computer Vision Library – OpenCV involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to gain...

9.3CVSS6.9AI score0.02071EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/28 12:0 a.m.8 views

The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird lies in the copying of buffers without checking the size of the input data. This allows an attacker to execute arbitrary code.

The vulnerability in Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created website...

10CVSS8.1AI score0.01404EPSS
SaveExploits0References16Affected Software11
NVD
NVD
added 2022/09/16 6:15 a.m.26 views

CVE-2022-25708

Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile...

9.8CVSS0.00445EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/16 6:15 a.m.26 views

Memory corruption

Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile...

7.5CVSS9.6AI score0.00445EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/09/16 5:26 a.m.11 views

CVE-2022-25708

Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile...

9.8CVSS9.8AI score0.00445EPSS
SaveExploits0References1
CVE
CVE
added 2022/09/16 5:26 a.m.85 views

CVE-2022-25708

CVE-2022-25708 : A memory corruption issue in Qualcomm’s WLAN stack affecting Snapdragon Connectivity and Snapdragon Mobile, caused by a buffer copy that does not validate input size when parsing keys. The entry cites a very high impact (CVE-3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with a networ...

9.8CVSS9.6AI score0.00445EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/09/16 5:26 a.m.44 views

CVE-2022-25708

Memory corruption in WLAN due to buffer copy without checking size of input while parsing keys in Snapdragon Connectivity, Snapdragon Mobile...

9.8CVSS9.9AI score0.00445EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/09/16 12:0 a.m.11 views

PT-2022-17472 · Qualcomm · Snapdragon Mobile +1

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Connectivity, Snapdragon Mobile affected versions not specified Description: The issue is related to memory corruption in WLAN due to a buffer copy without checking the size of the input while parsing keys. This problem...

9.8CVSS9.4AI score0.00445EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2022/09/14 12:0 a.m.9 views

The vulnerability of the WPE WebKit web page rendering module, related to copying buffers without checking input data, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit web page rendering module is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS6.6AI score0.01932EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.20 views

The vulnerability of the GetValue() function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to execute arbitrary code.

The vulnerability in the implementation of the GetValue function in the microprogramming system of LinkHub Mesh Wi-Fi AC1200 lies in the copying of buffers without checking the size of the input data during the processing of the logserver file. Exploiting this vulnerability allows an attacker...

9.6CVSS8.1AI score0.01232EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.13 views

The vulnerability in the implementation of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to induce a service failure.

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 lies in the copying of buffers without checking the size of the input data during the processing of the apsteer file. Exploiting this vulnerability could allow a remote attacker to cause...

9.6CVSS7.8AI score0.01232EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.21 views

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 allows a hacker to execute arbitrary code.

The vulnerability of the GetValue function in the microprogramming software for LinkHub Mesh Wi-Fi AC1200 lies in the copying of buffers without checking the size of the input data during the processing of the confcli file. Exploiting this vulnerability allows a remote attacker to execute arbitra...

9.6CVSS8.1AI score0.01232EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:0 a.m.16 views

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W allows a perpetrator to execute arbitrary commands or cause service failures.

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W arises from the copying of buffers without checking the size of the input data during the processing of user fields in incoming HTTP packets. Exploiting...

6.5CVSS7.5AI score0.01109EPSS
SaveExploits0References4
Rows per page
Query Builder