SUSE CVE-2019-14198

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfsreadreply when calling storeblock in the NFSv3 case...

SUSE CVE-2020-12284

cbsjpegsplitfragment in libavcodec/cbsjpeg.c in FFmpeg 4.1 and 4.2.2 has a heap-based buffer overflow during JPEGMARKERSOS handling because of a missing length check...

SUSE CVE-2020-36323

In the standard library in Rust before 1.52.0, there is an optimization for joining strings that can cause uninitialized bytes to be exposed or the program to crash if the borrowed string changes after its length is checked...

CVE-2022-25729

Memory corruption in modem due to improper length check while copying into memory...

CVE-2022-25732

Information disclosure in modem due to buffer over read in dns client due to missing length check...

Memory corruption

Memory corruption in modem due to improper length check while copying into memory...

Information disclosure

Information disclosure in modem due to buffer over read in dns client due to missing length check...

CVE-2022-25732 Buffer Over-read in MODEM

Information disclosure in modem due to buffer over read in dns client due to missing length check...

CVE-2022-25729

CVE-2022-25729 affects Qualcomm modem circuitry, described as memory corruption due to an improper length check when copying into memory. The vulnerability is tied to the modem component in Qualcomm devices; explicit affected product/version details are not provided in the documents. The root cau...

PT-2023-12809 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure in the modem due to a buffer over-read in the DNS client. This occurs because of a missing length check, which allows for unauthorized access to...

PT-2023-12806 · Qualcomm · Snapdragon +30

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption in a modem, caused by an improper length check while copying data into memory. Recommendations: At the moment,...

GSD-2023-1000585 bpf: make sure skb->len != 0 when redirecting to a tunneling device

bpf: make sure skb-len != 0 when redirecting to a tunneling device This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.16 by commit...

Information disclosure

Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check...

CVE-2022-33283 Buffer over-read in WLAN

Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check...

PT-2023-13288 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in WLAN while parsing WLAN frames. This occurs because of a missing frame length check, leading to potential data...

PT-2025-37558

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.0.0-rc7 Description: A use-after-free vulnerability exists in the Linux kernel's NTFS3 filesystem, specifically within the indx get root function. The vulnerability is due to a missing length check, potentiall...

Tenda A15 缓冲区错误漏洞

Tenda A15 is a WiFi extender from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda A15 security5g parameter, which originates from a lack of length checking of input data in the security5g parameter of /goform/WifiBasicSet, which can be exploited by an attacker to...

UBUNTU-CVE-2022-46393

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffer over-read in DTLS if MBEDTLSSSLDTLSCONNECTIONID is enabled and MBEDTLSSSLCIDINLENMAX 2 MBEDTLSSSLCIDOUTLENMAX...

GSD-2022-1008140 Input: iforce - invert valid length check when fetching device IDs

Input: iforce - invert valid length check when fetching device IDs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.225 by commit...

GSD-2022-1007711 Input: iforce - invert valid length check when fetching device IDs

Input: iforce - invert valid length check when fetching device IDs This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...