kernel: drm: Don't unref the same fb many times by mistake due to deadlock handling

A flaw was found in the Linux kernel. A frame buffer can be freed while still in use in a specific situation in drivers/gpu/drm/drmplane.c. This issue may compromise the availability...

The vulnerability of the ID3_Support::ID3v2Frame::getFrameValue function in the exempli utility allows a hacker to trigger a service failure.

The vulnerability of the ID3Support::ID3v2Frame::getFrameValue function in the exempli utility is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2024-33050

Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper...

CVE-2024-23364

Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element IE of a beacon frame that is received from over-the-air OTA...

CVE-2024-33051

CVE-2024-33051 is a WLAN firmware issue (Qualcomm) causing a transient Denial of Service when processing TIM Information Elements from beacon frames due to a missing length check. The CVE entries (NVD, Red Hat, CVE List, CNVD-style feeds) consistently describe a buffer over-read/length-check omis...

CVE-2024-33050 Buffer Over-read in WLAN Host Communication

Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper...

CVE-2024-33048 Buffer Over-read in WLAN Host

Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame...

CVE-2024-33048 Buffer Over-read in WLAN Host

Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame...

CVE-2024-23364 Buffer Over-read in WLAN Firmware

Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element IE of a beacon frame that is received from over-the-air OTA...

CVE-2024-23364

The CVE-2024-23364 issue is a Transient DoS in WLAN where processing of non-transmitted BSSID profile sub-elements in the MBSSID Information Element (IE) of OTA beacon frames can cause Denial-of-Service. Public sources indicate this vulnerability concerns Qualcomm WLAN firmware components and rel...

PT-2024-19843

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon Auto versions up to XR2+ Gen 1 Description A transient Denial of Service DOS can occur when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element IE of a beacon frame that i...

PT-2024-25094

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A Transient Denial of Service DOS issue occurs when processing the TIM IE from a beacon frame due to the lack of a length check for the IE. This results i...

CVE-2024-33048: Buffer Over-read

Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame...

CVE-2024-33051: Buffer Over-read

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length...

CVE-2024-33050: Buffer Over-read

Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper...

CVE-2024-23364: Buffer Over-read

Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element IE of a beacon frame that is received from over-the-air OTA...

Android Open Source Platform (AOSP) Browser UXSS

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Android Open Source Platform AOSP Browser UXSS', 'Description' = %q This module exploits a Universal Cross-Site Scripting UXSS vulnerability...

OESA-2024-2075 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A vulnerability was fou...

libvpx: Heap buffer overflow related to VP9 encoding

A flaw was found in libvpx. Encoding a frame with larger dimensions than the original configured size with VP9 may result in a heap overflow...

kernel: virtio-net: tun: mlx5_core short frame denial of service

A denial of service DoS attack was found in the mlx5 driver in the Linux kernel. A KVM guest VM using virtio-net can crash the host by sending a short packet, for example, size = ETHHLEN...