DEBIAN-CVE-2024-49910

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for function pointer in dcn401setoutputtransferfunc This commit adds a null check for the setoutputgamma function pointer in the dcn401setoutputtransferfunc function. Previously, setoutputgamma was...

AZL-51041 CVE-2024-49910 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL check for function pointer in dcn401setoutputtransferfunc This commit adds a null check for the setoutputgamma function pointer in the dcn401setoutputtransferfunc function. Previously, setoutputgamma was...

AZL-50954 CVE-2024-47720 affecting package kernel for versions less than 6.6.56.1-5

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add null check for setoutputgamma in dcn30setoutputtransferfunc This commit adds a null check for the setoutputgamma function pointer in the dcn30setoutputtransferfunc function. Previously, setoutputgamma was bei...

PT-2024-10030

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a double free vulnerability in the ma35 pinctrl dt node to map func function within the drivers/pinctrl/nuvoton/pinctrl-ma35.c module of the Linux kernel. This...

kernel: mmc: sdio: fix possible resource leaks in some error paths

In the Linux kernel, the following vulnerability has been resolved: mmc: sdio: fix possible resource leaks in some error paths If sdioaddfunc or sdioinitfunc fails, sdioremovefunc can not release the resources, because the sdio function is not presented in these two cases, it won't call ofnodeput...

PT-2024-32768

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58 Description A null pointer dereference error could occur in the Linux kernel due to a missing null check for the set output gamma function pointer in the dcn30 set output transfer func function. This issue...

PT-2024-30770

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.0-rc3-00131-g66b586715063 533 Description The issue is related to a missing check in the BPF verifier, which can lead to out-of-bounds memory accesses. This occurs when a modified CONST PTR TO DYNPTR is pass...

PT-2024-40794

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the involvement of mz zip mem read func, mz zip reader...

PT-2024-40796

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: ndpi search zoom, check ndpi detection func, and ndpi...

PT-2024-40795

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read crash has been reported. The crash involves the mz zip mem read func and mz zip validate file functions. This issue is related ...

CVE-2024-33112

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc...

CVE-2024-33112

D-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnapmainfunc...

CVE-2024-27044 drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10_set_output_transfer_func()'

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix potential NULL pointer dereferences in 'dcn10setoutputtransferfunc' The 'stream' pointer is used in dcn10setoutputtransferfunc before the check if 'stream' is NULL. Fixes the below:...

PT-2024-31324

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the drm/xe/preempt fence component in the Linux kernel, where subtle deadlocks can be introduced in the preempt fence work func due to the use of a single global...

PT-2024-22611

Name of the Vulnerable Software and Affected Versions Symfony 1 versions 1.1.0 through 1.5.18 Description The issue is related to a gadget chain due to dangerous deserialization in the sfNamespacedParameterHolder class, which could enable an attacker to achieve remote code execution if a develope...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in the pluginexternfunc method of the TBD module, which may be read out-of-bounds...

PT-2024-21768 · Google · Android

Name of the Vulnerable Software and Affected Versions: TBD affected versions not specified Description: The issue is related to a possible out of bounds read in the plugin extern func due to a missing bounds check. This could lead to local information disclosure with no additional execution...

PT-2024-19617

Name of the Vulnerable Software and Affected Versions eyoucms version 1.6.5 Description A Cross Site Scripting XSS issue exists in the func parameter, allowing a remote attacker to execute arbitrary code via a crafted URL. Recommendations For eyoucms version 1.6.5, consider restricting access to...

CVE-2024-22927: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in the func parameter in eyoucms v.1.6.5 allows a remote attacker to run arbitrary code via crafted URL...

PT-2024-8186

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a potential NULL pointer dereference in the dcn10 set output transfer func function. The stream pointer is used before checking if it is NULL, which could lead ...