478 matches found
CVE-2025-20697
In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915681; Issue ID: MSV-3795...
CVE-2025-20697
CVE-2025-20697 : In Power HAL (MediaTek), an out-of-bounds write caused by a missing bounds check could enable local escalation of privilege if the attacker already has System privileges. Exploitation requires no user interaction. A patch is available: ALPS09915681 (MSV-3795). Multiple feeds corr...
PT-2025-31795 · Power Hal · Power Hal
Name of the Vulnerable Software and Affected Versions: Power HAL affected versions not specified Description: Power HAL contains a possible out of bounds write due to a missing bounds check. Successful exploitation of this issue could lead to local escalation of privilege if an attacker has alrea...
PT-2025-31794 · Power Hal · Power Hal
Name of the Vulnerable Software and Affected Versions: Power HAL affected versions not specified Description: Power HAL contains a possible out-of-bounds write due to a missing bounds check. Successful exploitation of this issue could lead to local privilege escalation if an attacker already...
org.jboss.hal:hal-console: Wildfly HAL Console Cross-Site Scripting
A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups...
org.jboss.hal:hal-console: Wildfly HAL Console Cross-Site Scripting
A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups...
org.jboss.hal:hal-console: Wildfly HAL Console Cross-Site Scripting
A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups...
org.jboss.hal-hal-parent: Stored Cross-Site Scripting (XSS) in JBoss EAP Management Console
No description is available for this CVE...
org.jboss.hal-hal-parent: Stored Cross-Site Scripting (XSS) in JBoss EAP Management Console
No description is available for this CVE...
org.jboss.hal-hal-parent: Stored Cross-Site Scripting (XSS) in JBoss EAP Management Console
No description is available for this CVE...
CVE-2025-27029 Buffer Over-read in WLAN HAL
Transient DOS while processing the tone measurement response buffer when the response buffer is out of range...
CVE-2025-27029
CVE-2025-27029 affects Qualcomm WLAN HAL (closed-source Qualcomm components). The issue is a transient Denial of Service caused by processing a tone measurement response buffer that is out of range. Metrics indicate network attack vector, low complexity, no privileges required, no user interactio...
OESA-2025-1573 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: add srng-lock for ath11khalsrng in monitor mode ath11khalsrng should be used with srng-lock to protect srng data. For ath11kdprxmondestprocess and...
CVE-2024-47293
Out-of-bounds write vulnerability in the HAL-WIFI module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-32900
In lwisfencesignal of lwisdebug.c, there is a possible Use after Free due to improper locking. This could lead to local escalation of privilege from halcameradefault SELinux label with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-20863
Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code...
CVE-2023-33118
Memory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL...
CVE-2023-22674
Missing Authorization, Cross-Site Request Forgery CSRF vulnerability in Hal Gatewood Dashicons + Custom Post Types.This issue affects Dashicons + Custom Post Types: from n/a through 1.0.2...