CVE-2022-22092

Memory corruption in kernel due to use after free issue in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-22091

CVE-2022-22091 affects Qualcomm’s Snapdragon family (Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Wearables). The issue is improper authorization of a replayed LTE securityModeCommand, which can cause DoS. The available documents identify the vulnerable surface as Qualcomm’s...

CVE-2022-22089

CVE-2022-22089 affects Qualcomm Snapdragon components. The issue is memory corruption in audio during record playback caused by improper list handling in two threads in Snapdragon Connectivity/Mobile/Wearables, with an underlying integer overflow in the audio component per PT- security source. Th...

CVE-2022-22081

CVE-2022-22081 corresponds to memory corruption in Qualcomm’s Snapdragon audio path due to an integer overflow affecting Snapdragon Auto/Connectivity/Mobile/Wearables. Public records show high impact (C/H/I/A) with local attack vector and no user interaction required in the NVD assessment, and Re...

CVE-2022-22089

Memory corruption in audio while playing record due to improper list handling in two threads in Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-22081

Memory corruption in audio module due to integer overflow in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wearables...

CVE-2022-22074

CVE-2022-22074 describes a memory corruption due to an integer overflow in the Audio component of Qualcomm’s embedded platform software affecting Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables. The root cause is integer overflow during W...

CVE-2022-22066

CVE-2022-22066 is associated with a buffer length check flaw that can cause memory corruption when processing commands from HLOS in Qualcomm Snapdragon embedded software. Connected sources (PT-2022-4881) specify this as a buffer length check issue affecting Snapdragon Auto, Compute, Connectivity,...

PT-2022-17472 · Qualcomm · Snapdragon Mobile +1

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Connectivity, Snapdragon Mobile affected versions not specified Description: The issue is related to memory corruption in WLAN due to a buffer copy without checking the size of the input while parsing keys. This problem...

CVE-2022-34726

Microsoft ODBC Driver Remote Code Execution Vulnerability...

CVE-2022-34727

Microsoft ODBC Driver Remote Code Execution Vulnerability...

CVE-2022-34730

Microsoft ODBC Driver Remote Code Execution Vulnerability...

CVE-2022-34734

Microsoft ODBC Driver Remote Code Execution Vulnerability...

PT-2022-5737 · Microsoft · Odbc Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft ODBC Driver. It allows a remote attacker to execute arbitrary code, potentially impacting the system...

CVE-2017-18018: In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file

In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition. Affected Products All versions of...

PT-2022-5741 · Microsoft · Odbc Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft ODBC driver for the Windows operating system. This allows a remote attacker to execute arbitrary code,...

PT-2022-5742 · Microsoft · Odbc Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft ODBC driver for the Windows operating system. This allows a remote attacker to execute arbitrary code. T...

Microsoft ODBC Driver 安全漏洞

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in the Microsoft Windows ODBC Driver. The following products and versions are affected:Windows...

CVE-2018-0732. Client DoS due to large DH parameter.

Security Advisory ID : BSA-2022-627 Component : OpenSSL Revision : 1.0 During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client to spend an unreasonably long period of time generating a key...

PT-2022-5739 · Microsoft · Odbc Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft ODBC Driver affected versions not specified Description: The issue exists due to insufficient input validation in the Microsoft ODBC driver for the Windows operating system. This allows a remote attacker to execute arbitrary code. T...