CVE-2024-53526

composio =0.5.40 is vulnerable to Command Execution in composioopenai, composioclaude, and composiojulep via the handletoolcalls function...

WordPress plugin AdForest 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

Composio 安全漏洞

Composio is a production-ready toolset for AI agents open-sourced by Composio. Composio has a security vulnerability that stems from the ease of executing commands in composioopenai, composioclaude, and composiojulep via the handletoolcalls function...

CVE-2024-53526

composio =0.5.40 is vulnerable to Command Execution in composioopenai, composioclaude, and composiojulep via the handletoolcalls function...

CVE-2024-53931

The com.glitter.caller.screen aka iCaller, Caller Theme & Dialer application through 1.1 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.glitter.caller.screen.DialerActivity component...

CVE-2024-53933

The com.callerscreen.colorphone.themes.callflash aka Color Call Theme & Call Screen application through 1.0.7 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the...

CVE-2024-53936

The com.asianmobile.callcolor aka Color Phone Call Screen App application through 24 for Android enables any application with no permissions to place phone calls without user interaction by sending a crafted intent via the com.asianmobile.callcolor.ui.component.call.CallActivity component...

CVE-2024-45550

Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls...

CVE-2024-33055

Memory corruption while invoking IOCTL calls to unmap the DMA buffers...

CVE-2024-33059

Memory corruption while processing frame command IOCTL calls...

CVE-2024-33041

Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,...

CVE-2024-45550

CVE-2024-45550 involves memory corruption when an IOCTL-calling application executes all MCDM driver IOCTL calls on Qualcomm chipsets. The affected component is the MCDM driver IOCTL interface; root cause is memory corruption triggered by IOCTL invocation patterns. Reported impact includes high c...

CVE-2024-45550 Improper Validation of Array Index in DSP Services

Memory corruption occurs when invoking any IOCTL-calling application that executes all MCDM driver IOCTL calls...

CVE-2024-33059

CVE-2024-33059 involves memory corruption in Qualcomm chipsets caused by processing frame command IOCTL calls. Reported impact per metrics includes High confidentiality, integrity, and availability with Local, Low-Complexity, Low-Privileges requirements (no user interaction). No exploitation deta...

CVE-2024-33059 Use After Free in Computer Vision

Memory corruption while processing frame command IOCTL calls...

CVE-2024-33055

CVE-2024-33055 describes memory corruption occurring when invoking IOCTL calls to unmap DMA buffers in Qualcomm chipsets. Connected sources confirm the issue affects memory handling in the DMA buffer unmapping path and classify the impact at the memory-corruption level; several advisories referen...

CVE-2024-33055 Use After Free in Computer Vision

Memory corruption while invoking IOCTL calls to unmap the DMA buffers...

CVE-2024-33055 Use After Free in Computer Vision

Memory corruption while invoking IOCTL calls to unmap the DMA buffers...

CVE-2024-33041

CVE-2024-33041 concerns memory corruption in Qualcomm chipsets caused by missing input parameter validation for the fence frame IOCTL calls (specifically the number of fences). The root cause is a validation gap in the fence framework IOCTL path, leading to potential memory corruption with high i...

PT-2025-2998 · Unknown · Com.Glitter.Caller.Screen

Name of the Vulnerable Software and Affected Versions: com.glitter.caller.screen versions 1.1 and earlier Description: The issue allows any application to place phone calls without user interaction by sending a crafted intent via the com.glitter.caller.screen.DialerActivity component. This enable...