13798 matches found
MAL-2025-1716 Malicious code in airbnb-model (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-43060
Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP...
CVE-2024-43061
Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive...
CVE-2024-43061 Use After Free in Audio
Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive...
CVE-2024-43061 Use After Free in Audio
Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive...
CVE-2024-43061
CVE-2024-43061 describes a memory corruption issue in Qualcomm chipsets during voice activation when sound model parameters are loaded from HLOS and the received sound model list is empty in the HLOS drive. Connected sources consistently reference a memory-corruption/UAF-like underlying condition...
CVE-2024-43060
CVE-2024-43060 affects Qualcomm chipsets. It describes memory corruption during voice activation when sound model parameters are loaded from the High-Level Operating System (HLOS) to the Audio Digital Signal Processor (ADSP). The issue is rooted in the parameter loading path, with CVSSv3.1 metric...
CVE-2024-43060 Use of Out-of-range Pointer Offset in Automotive Audio
Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP...
Qualcomm Chipsets 资源管理错误漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A resource management error vulnerability exists in Qualcomm Chipsets, which originates from memory corruption during voice activation when sound model parameters are loaded from HLOS and the received sound model list is...
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from memory corruption during voice activation when sound model parameters are loaded from HLOS to ADSP...
[SECURITY] Fedora 41 Update: nodejs22-22.14.0-2.fc41
Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven, non-blocking I/O model that \ makes it lightweight and efficient, perfect for data-intensive \ real-time applications that run across distributed...
USN-7309-1 Ruby SAML vulnerabilities
It was discovered that Ruby SAML did not properly validate SAML responses. An unauthenticated attacker could use this vulnerability to log in as an abitrary user. This issue only affected Ubuntu 16.04 LTS. CVE-2016-5697 It was discovered that Ruby SAML incorrectly utilized the results of XML DOM...
OESA-2025-1199 nodejs security update
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...
OESA-2025-1200 nodejs security update
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...
EPSS Decoded: An Examination & Comparison to CVSS
Running short on time but still want to stay in the know? Well, we've got you covered! We've condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all! A Paradigm Shift in Vulnerability Management Vulnerability...
CVE-2024-50689
SunGrow iSolarCloud before the October 31, 2024 remediation is vulnerable to insecure direct object references IDOR via the orgService API model...
SUSE CVE-2022-49266
In the Linux kernel, the following vulnerability has been resolved: block: fix rq-qos breakage from skipping rqqosdonebio a647a524a467 "block: don't call rqqosops-donebio if the bio isn't tracked" made bioendio skip rqqosdonebio if BIOTRACKED is not set. While this fixed a potential oops, it also...
The vulnerability of the Microsoft COM component in the Windows operating system, which allows a hacker to increase their privileges
The vulnerability of the Microsoft COM component in the Windows operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...