CVE-2022-25677: Use After Free

Memory corruption in diag due to use after free while processing dci packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking...

CVE-2020-23584

Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes arbitrary commands with IP-ADDRESS using " | " to execute commands on " /diagtracertadmin.asp " in the "PingTest" parameter that leads to command execution...

PT-2022-8676 · Optilink · Optilink Op-Xt71000N

Name of the Vulnerable Software and Affected Versions: OPTILINK OP-XT71000N version 2.2 Description: The issue is related to Remote Code Execution. It occurs when an attacker sends arbitrary code to the "/diag ping admin.asp" API endpoint, specifically to the "PingTest" interface, leading to...

PT-2022-8677 · Optilink · Optilink Op-Xt71000N

Name of the Vulnerable Software and Affected Versions: OPTILINK OP-XT71000N version V2.2 Description: The issue occurs due to unauthenticated remote code execution when an attacker passes arbitrary commands with an IP-ADDRESS using " | " to execute commands on "/diag tracert admin.asp" in the...

ppc64-diag bug fix and enhancement update

An update is available for ppc64-diag. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9...

CVE-2022-37001

The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitation of this vulnerability will cause the diag-router module to crash...

CVE-2022-37001

The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitation of this vulnerability will cause the diag-router module to crash...

Design/Logic Flaw

The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitation of this vulnerability will cause the diag-router module to crash...

CVE-2022-37001

CVE-2022-37001 concerns the diag-router module, where a vulnerability in intercepting excessively long and short instructions can be exploited to crash the diag-router, causing an availability impact. Connected sources confirm the affected component and crash effect, but no vendor/patch/version d...

CVE-2022-37001

The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitation of this vulnerability will cause the diag-router module to crash...

PT-2022-23746

Name of the Vulnerable Software and Affected Versions diag-router module affected versions not specified Description The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitation of this issue will cause the diag-router module to crash...

CVE-2022-37001: Undefined Security Weakness

The diag-router module has a vulnerability in intercepting excessive long and short instructions. Successful exploitation of this vulnerability will cause the diag-router module to crash...

HUAWEI HarmonyOS 安全漏洞

HUAWEI HarmonyOS is an operating system from the Chinese company Huawei HUAWEI. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in HUAWEI HarmonyOS version 2.0, which stems from the failure of the diag-router module to intercept...

PT-2022-32553

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.6 Description The issue concerns the cfi slowpath diag RCU usage with cpuidle. It was introduced in version v5.13 and fixed in version v5.18.6. The actual impact and attack plausibility have not yet been...

PT-2022-32751

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.49 Description The issue concerns the cfi slowpath diag RCU usage with cpuidle. It was introduced in version v5.13 and fixed in version v5.15.49. The actual impact and attack plausibility have not yet been...

CVE-2021-35072

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

Out-of-bounds

Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music...

CVE-2021-35084

CVE-2021-35084 involves a possible out-of-bounds read due to lack of length check on the data length for a DIAG event in Qualcomm Snapdragon products (Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Mobile, Voice & Music). Affected components are Snap...

CVE-2021-35072: Improper Validation of Array Index

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...

PT-2022-10393

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue is related to a possible buffer overflow due to improper validation of an array index while processing an external DIAG command. This affects various Qualcomm...