Lucene search
K

882 matches found

OSV
OSV
added 2021/12/26 12:15 a.m.3 views

CVE-2021-37583

MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle IEEE 1905 protocols. Affected Chipsets MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915; Affected Software Versions 2.0.2; Out-of-bounds write...

8.8CVSS5.8AI score0.01352EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/12/17 12:0 a.m.2 views

MediaTek Apusys缓冲区错误漏洞

MediaTek Apusys is a chipset component from China's MediaTek Corporation MediaTek. A buffer error vulnerability exists in MediaTek Apusys, which stems from the product's apusys component not effectively checking resource boundaries. An attacker could use this vulnerability to cause privilege...

6.7CVSS6.8AI score0.00115EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/12/17 12:0 a.m.3 views

MediaTek Apusys缓冲区错误漏洞

MediaTek Apusys is a chipset component from China's MediaTek Corporation MediaTek. A buffer error vulnerability exists in MediaTek Apusys, which stems from the product's apusys component not effectively checking resource boundaries. An attacker could use this vulnerability to cause privilege...

6.7CVSS6.8AI score0.00115EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/12/06 12:0 a.m.3 views

Qualcomm 芯片代码问题漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and are from time to time fabricated on the surface of semiconductor wafers. A code issue vulnerability exists in Qualcomm Chipsets that stems...

7.8CVSS7.4AI score0.00151EPSS
Exploits0References4
Cvelist
Cvelist
added 2021/12/01 3:43 p.m.22 views

CVE-2021-26334 AMD Chipset Driver Information Disclosure Vulnerability

The AMDPowerProfiler.sys driver of AMD μProf tool may allow lower privileged users to access MSRs in kernel which may lead to privilege escalation and ring-0 code execution by the lower privileged user...

9.7AI score0.0117EPSS
Exploits0References1
OSV
OSV
added 2021/11/16 7:15 p.m.2 views

CVE-2020-12954

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification...

5.5CVSS6.1AI score0.00224EPSS
Exploits0References1
NVD
NVD
added 2021/11/16 7:15 p.m.20 views

CVE-2020-12954

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification...

5.5CVSS0.00224EPSS
Exploits0References1
Prion
Prion
added 2021/11/16 7:15 p.m.24 views

Design/Logic Flaw

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification...

2.1CVSS5.9AI score0.00224EPSS
Exploits0References1Affected Software58
Cvelist
Cvelist
added 2021/11/16 6:11 p.m.25 views

CVE-2020-12954

A side effect of an integrated chipset option may be able to be used by an attacker to bypass SPI ROM protections, allowing unauthorized SPI ROM modification...

5.4AI score0.00224EPSS
Exploits0References1
CVE
CVE
added 2021/11/16 6:11 p.m.81 views

CVE-2020-12954

CVE-2020-12954 relates to an AMD Platform Security Processor (ASP) boot loader header where improper input and range validation can allow attacker-controlled values before signature verification, potentially enabling arbitrary code execution and bypassing SPI ROM protections to modify SPI ROM. Th...

5.5CVSS5.9AI score0.00224EPSS
Exploits0References1Affected Software1
Amd
Amd
added 2021/11/14 12:0 a.m.49 views

AMD Chipset Driver Information Disclosure Vulnerability

Bulletin ID: AMD-SB-1009 Potential Impact: Information Disclosure Severity: Medium Summary Low privileged malicious users may be able to access and leak data through the AMD Chipset Driver. CVE Details CVE-2021-26333 Insufficient access controls in the AMD Link Android app may potentially result ...

5.5CVSS5AI score0.00501EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2021/11/09 12:0 a.m.3 views

PT-2021-8201 · Amd +1 · Amd Epyc Agesa Pi +1

Name of the Vulnerable Software and Affected Versions: AMD EPYC AGESA PI affected versions not specified Description: The issue is related to a side effect of an integrated chipset option that can be exploited by an attacker to bypass SPI ROM protections, allowing unauthorized modification of the...

9.9CVSS6AI score0.0117EPSS
Exploits0References11
Malwarebytes
Malwarebytes
added 2021/11/02 4:48 p.m.92 views

Google patches zero-day vulnerability, and others, in Android

Google has issued security patches for the Android Operating System. In total, the patches address 39 vulnerabilities. There are indications that one of the patched vulnerabilities may be under limited, targeted exploitation. The most severe of these issues is a critical security vulnerability in...

10CVSS8.7AI score0.03057EPSS
Exploits0
Android Security Bulletins
Android Security Bulletins
added 2021/11/01 12:0 a.m.202 views

Android Security Bulletin—November 2021Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2021-11-06 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...

10CVSS8.6AI score0.04447EPSS
Exploits2
CNVD
CNVD
added 2021/10/10 12:0 a.m.14 views

Samsung LTE RRC Buffer Overflow Vulnerability

Samsung LTE RRC is a protocol in Samsung mobile devices.The RRC word layer has a number of functions including broadcasting of Non-Access Layer NAS-related system information, broadcasting of Access Layer AS-related system information, paging, and establishing, maintaining, and releasing the RRC...

7.2CVSS7.3AI score0.00533EPSS
Exploits0References1
OSV
OSV
added 2021/10/06 6:15 p.m.1 views

CVE-2021-25479

A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution...

7.2CVSS6.8AI score0.00533EPSS
Exploits0References1
OSV
OSV
added 2021/10/06 6:15 p.m.2 views

CVE-2021-25478

A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution...

7.2CVSS6.3AI score0.00533EPSS
Exploits0References1
NVD
NVD
added 2021/10/06 6:15 p.m.10 views

CVE-2021-25479

A possible heap-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution...

7.2CVSS0.00533EPSS
Exploits0References1
NVD
NVD
added 2021/10/06 6:15 p.m.13 views

CVE-2021-25478

A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution...

7.2CVSS0.00533EPSS
Exploits0References1
Prion
Prion
added 2021/10/06 6:15 p.m.16 views

Stack overflow

A possible stack-based buffer overflow vulnerability in Exynos CP Chipset prior to SMR Oct-2021 Release 1 allows arbitrary memory write and code execution...

6.5CVSS7.4AI score0.00533EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder