Information disclosure

Information disclosure due to buffer overread in Core...

CVE-2022-40519

CVE-2022-40519 describes an information disclosure via a buffer overread in the Core component. Public documents tie this to Qualcomm chipset cores and note patches/mitigations exist: Qualcomm’s January 2023 security bulletin patches several CVEs (including 2022-40519) for affected chipsets; Leno...

CVE-2022-40518 Buffer overread in Core

Information disclosure due to buffer overread in Core...

CVE-2022-40518

CVE-2022-40518 is a buffer over-read in Core leading to information disclosure. Multiple connected sources tie this to Qualcomm chipsets and relate Lenovo ThinkPad X13 BIOS fixes (e.g., BIOS 1.47) and Qualcomm January 2023 patches addressing this family (CVE-2022-40516–40520). The Pixel security ...

CVE-2022-40518 Buffer overread in Core

Information disclosure due to buffer overread in Core...

PT-2023-13807 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to information disclosure due to a buffer overread in Core. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2023-13288 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in WLAN while parsing WLAN frames. This occurs because of a missing frame length check, leading to potential data...

PT-2023-12680 · Qualcomm · Snapdragon +38

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a denial of service that occurs while processing the fastboot flash command on mmc due to a buffer over read. Recommendations: A...

PT-2023-13291 · Qualcomm · Snapdragon +254

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in WLAN when processing 802.11 management frames. This occurs whi...

PT-2023-13266 · Unknown · Bluetooth Host

Name of the Vulnerable Software and Affected Versions: Bluetooth HOST affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in the Bluetooth HOST. This occurs while processing GetFolderItems and GetItemAttribute commands from a peer...

PT-2023-13264 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in WLAN when parsing corrupted NAN frames. Recommendations: At the moment, there is no information about ...

PT-2023-13289 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in WLAN while parsing BTM action frame. Recommendations: At the moment, there is no information about a newer version...

PT-2023-13808 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to information disclosure due to a buffer overread. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabilit...

PT-2023-13290 · Qualcomm · Snapdragon +251

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a transient DOS due to a buffer over-read in WLAN while parsing WLAN CSA action frames. Recommendations: At the moment, there is no information about a newer...

CVE-2022-4432

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4434

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4433

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

Lenovo ThinkPad 缓冲区错误漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. A security vulnerability exists in the Lenovo ThinkPad, which stems from a vulnerability in its PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause an information disclosure via a...

The vulnerability of the UAX200.dll library in the Corel Presentations presentation preparation and viewing software allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the UAX200.dll library in Corel Presentations’ presentation preparation and viewing software is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information through a specially...

The vulnerability of the IPPP82.FLT module of the Corel Presentations presentation preparation and viewing software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the IPPP82.FLT module in the Corel Presentations preparation and presentation software relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information using a specially crafted PPT fi...