6054 matches found
jinja2: Jinja has a sandbox breakout through indirect reference to format method
A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To exploit the vulnerability, an attacker needs to...
CVE-2024-36437
The com.enflick.android.TextNow aka TextNow: Call + Text Unlimited application 24.17.0.2 for Android enables any installed application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.enflick.android.TextNow.activities.DialerActivity...
CVE-2024-49840
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality...
CVE-2024-38412
Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors...
CVE-2024-38418
Memory corruption while parsing the memory map info in IOCTL calls...
CVE-2024-49840 Use of Out-of-range Pointer Offset in WLAN Windows Host
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality...
CVE-2024-49840 Use of Out-of-range Pointer Offset in WLAN Windows Host
Memory corruption while Invoking IOCTL calls from user-space to validate FIPS encryption or decryption functionality...
CVE-2024-45561 Use After Free in Windows WLAN Host
Memory corruption while handling IOCTL call from user-space to set latency level...
CVE-2024-38418
CVE-2024-38418 describes memory corruption occurring when parsing the memory map information in IOCTL calls, affecting Qualcomm chipsets (notably camera/Linux components). The vulnerability stems from parsing memory map data inside an IOCTL path, enabling local exploitation with low privileges an...
CVE-2024-38418 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux
Memory corruption while parsing the memory map info in IOCTL calls...
CVE-2024-38418 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Linux
Memory corruption while parsing the memory map info in IOCTL calls...
CVE-2024-38412 Use After Free in Computer Vision
Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors...
CVE-2024-38412 Use After Free in Computer Vision
Memory corruption while invoking IOCTL calls from user-space to kernel-space to handle session errors...
CVE-2024-38412
CVE-2024-38412 is a memory-corruption issue linked to IOCTL handling of session errors in Qualcomm chipsets. Multiple connected sources confirm a kernel-space/ user-space IOCTL path as the root cause, with local access required and high impact to confidentiality, integrity, and availability per C...
CVE-2024-38411
CVE-2024-38411 involves memory corruption that occurs when registering a buffer from user-space to kernel-space via an IOCTL call on Qualcomm chipsets. The issue is linked to buffer management during the registration flow, including the path that adds the buffer to in-kernel lists and attempts to...
CVE-2024-38411 Use After Free in Computer Vision
Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls...
CVE-2024-38411 Use After Free in Computer Vision
Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls...
CVE-2024-36437
The vulnerability CVE-2024-36437 affects TextNow: Call + Text Unlimited for Android (version 24.17.0.2). A crafted Intent sent to the DialerActivity component (com.enflick.android.TextNow.activities.DialerActivity) can be issued by any installed app with no permissions, allowing a call to be plac...
PT-2025-2450 · Enflick · Textnow
Name of the Vulnerable Software and Affected Versions: TextNow: Call + Text Unlimited version 24.17.0.2 Description: The issue allows any installed application, without requiring permissions, to place phone calls without user interaction. This is achieved by sending a crafted intent via the...