CVE-2020-3625

When making query to DSP capabilities, Stack out of bounds occurs due to wrong buffer length configured for DSP attributes in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Mobile in SM8250, SXR2130...

CVE-2020-3625

CVE-2020-3625 concerns a stack-out-of-bounds condition in the DSP capabilities query on Qualcomm SoCs. A wrong buffer length configured for DSP attributes in Snapdragon Auto, Snapdragon Consumer IOT, and Snapdragon Mobile (SM8250, SXR2130) enables the vulnerability. The issue affects Qualcomm com...

D-Link DSP-W215 Information Disclosure Vulnerability

The D-Link DSP-W215 is a smart plug product from Taiwan, China-based AUO D-Link. A security vulnerability exists in D-Link DSP-W215 version 1.26b03. An attacker can exploit the vulnerability to obtain information...

D-Link DSP-W215 Information Disclosure Vulnerability (CNVD-2020-33174)

The D-Link DSP-W215 is a smart plug product from Taiwan, China-based AUO D-Link. A security vulnerability exists in D-Link DSP-W215 version 1.26b03. An attacker can exploit the vulnerability to cause information disclosure...

CVE-2020-13136

D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer...

CVE-2020-13135

D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy...

CVE-2020-13135

D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy...

CVE-2020-13136

D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer...

Design/Logic Flaw

D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer...

Information disclosure

D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy...

CVE-2020-13135

D-Link DSP-W215 1.26b03 devices allow information disclosure by intercepting messages on the local network, as demonstrated by a Squid Proxy...

CVE-2020-13135

CVE-2020-13135 concerns the D-Link DSP-W215 smart plug (version 1.26b03). According to the provided documents, the issue is an information-disclosure vulnerability where an attacker can intercept messages on the local network, demonstrated via a Squid Proxy. The CVE entry notes local-network acce...

CVE-2020-13136

D-Link DSP-W215 1.26b03 devices send an obfuscated hash that can be retrieved and understood by a network sniffer...

CVE-2020-13136

CVE-2020-13136 affects D-Link DSP-W215 (version 1.26b03): the device transmits an obfuscated hash that can be intercepted and decoded by a network sniffer, enabling information disclosure. The NVD records a CVSS2 base score of 5.0 (Medium) and CVSS3.1 base score of 7.5 (High) with network access ...

PT-2020-13350 · D Link · D-Link Dsp-W215

Name of the Vulnerable Software and Affected Versions: D-Link DSP-W215 version 1.26b03 Description: The issue concerns the transmission of an obfuscated hash by the device, which can be intercepted and decoded by a network sniffer. Recommendations: For D-Link DSP-W215 version 1.26b03, consider...

PT-2020-13349 · Squid +1 · Squid Proxy +1

Name of the Vulnerable Software and Affected Versions: D-Link DSP-W215 version 1.26b03 Description: The issue allows information disclosure by intercepting messages on the local network. This can be demonstrated using a Squid Proxy. Recommendations: For D-Link DSP-W215 version 1.26b03, consider...

Design/Logic Flaw

While transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data buffer which can be controlled by DSP in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdrag...

Aerotech Ensemble QL/QLe Servo Drives Detection

Binary data 763921.prm...

PT-2019-2906 · Sox +2 · Sox +2

Name of the Vulnerable Software and Affected Versions: SoX version 14.4.2 Description: A problem was discovered in the lsx make lpf function in effect i dsp.c, which allows a NULL pointer dereference. This issue can be exploited by a remote attacker to cause a denial of service. Recommendations:...

UBUNTU-CVE-2018-19129

In Libav 12.3, a NULL pointer dereference RIP points to zero issue in ffmpasynthfilterfloat in libavcodec/mpegaudiodsptemplate.c can cause a segmentation fault application crash via a crafted mov file...