Lucene search
+L

37 matches found

NVD
NVD
•added 2021/12/08 3:15 p.m.•27 views

CVE-2021-25517

An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution...

7.8CVSS0.0012EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/08 3:15 p.m.•26 views

Design/Logic Flaw

An improper boundary check in securelog of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution...

4.6CVSS6.8AI score0.00115EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/12/08 3:15 p.m.•26 views

Input validation

An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution...

4.6CVSS7.9AI score0.0012EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/12/08 2:20 p.m.•61 views

CVE-2021-25518

CVE-2021-25518 affects Samsung LDFW and BL31. The issue is an improper boundary check in the secure_log before SMR Dec-2021 Release 1, enabling arbitrary memory write and code execution. Reported impact includes local access with partial confidentiality/integrity/availability implications as per ...

6.7CVSS6.8AI score0.00115EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/12/08 2:20 p.m.•42 views

CVE-2021-25518

An improper boundary check in securelog of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution...

6.4CVSS7AI score0.00115EPSS
SaveExploits0References1
CVE
CVE
•added 2021/12/08 2:20 p.m.•58 views

CVE-2021-25517

CVE-2021-25517 affects Samsung LDFW firmware prior to SMR Dec-2021 Release 1. The vulnerability arises from improper input validation in LDFW, enabling arbitrary code execution on affected devices. Documented impact includes remote/local (depending on context) execution with high severity (CVSS v...

7.8CVSS7.8AI score0.0012EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/12/08 2:20 p.m.•34 views

CVE-2021-25517

An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution...

7.7CVSS8.1AI score0.0012EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/08 12:00 a.m.•3 views

CVE-2021-25518: Improper Restriction of Operations within the Bounds of a Memory Buffer

An improper boundary check in securelog of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution...

6.7CVSS6.1AI score0.00115EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/08 12:00 a.m.•7 views

CVE-2021-25517: Improper Input Validation

An improper input validation vulnerability in LDFW prior to SMR Dec-2021 Release 1 allows attackers to perform arbitrary code execution...

7.8CVSS6.3AI score0.0012EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/12/08 12:00 a.m.•14 views

Samsung Ldfw 输入验证错误漏洞

Samsung Ldfw is a loadable firmware from Samsung South Korea. A security vulnerability exists in Samsung LDFW that stems from improper input validation in LDFW, which allows an attacker to exploit the vulnerability to execute arbitrary code...

7.8CVSS7.7AI score0.0012EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/08 12:00 a.m.•17 views

PT-2021-16708 · Bl31 +1 · Bl31 +1

Name of the Vulnerable Software and Affected Versions: LDFW and BL31 versions prior to SMR Dec-2021 Release 1 Description: The issue is related to an improper boundary check in the secure log of LDFW and BL31, which allows for arbitrary memory write and code execution. Recommendations: For versio...

6.7CVSS6.8AI score0.00115EPSS
SaveExploits0References3
NVD
NVD
•added 2021/11/05 3:15 a.m.•38 views

CVE-2021-25500

A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise...

7.2CVSS0.00103EPSS
SaveExploits0References1
Prion
Prion
•added 2021/11/05 3:15 a.m.•29 views

Input validation

A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise...

2.1CVSS4.8AI score0.00103EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/11/05 2:03 a.m.•42 views

CVE-2021-25500

A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise...

7.2CVSS7.1AI score0.00103EPSS
SaveExploits0References1
CVE
CVE
•added 2021/11/05 2:03 a.m.•70 views

CVE-2021-25500

CVE-2021-25500 describes a missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 that allows attackers to overwrite TZASC , potentially causing a TEE compromise on Samsung mobile devices. The vulnerability affects versions prior to that release. The underlying issue is a lack of i...

7.2CVSS4.7AI score0.00103EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/05 12:00 a.m.•3 views

CVE-2021-25500: Improper Input Validation

A missing input validation in HDCP LDFW prior to SMR Nov-2021 Release 1 allows attackers to overwrite TZASC allowing TEE compromise...

7.2CVSS5.8AI score0.00103EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/11/05 12:00 a.m.•14 views

PT-2021-16690 · Hdcp Ldfw · Hdcp Ldfw

Name of the Vulnerable Software and Affected Versions: HDCP LDFW versions prior to SMR Nov-2021 Release 1 Description: A missing input validation in HDCP LDFW allows attackers to overwrite TZASC, which can lead to TEE compromise. Recommendations: For versions prior to SMR Nov-2021 Release 1, upda...

7.2CVSS4.7AI score0.00103EPSS
SaveExploits0References2
Rows per page
Query Builder