20589 matches found
CVE-2022-25676
CVE-2022-25676: Information disclosure due to a buffer over-read while parsing AVI files in Qualcomm Snapdragon firmware (Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, Mobile, Wearables). Root cause is a buffer over-read during AVI parsing that can affect confidentiality. Documents indi...
CVE-2022-33237
Transient DOS due to buffer over-read in WLAN firmware while processing PPE threshold. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music,...
CVE-2022-25676
Information disclosure in video due to buffer over-read while parsing avi files in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...
CVE-2022-33237
Qualcomm Snapdragon WLAN firmware vulnerability CVE-2022-33237 causes a transient denial-of-service (DoS) due to a buffer over-read while processing the PPE threshold in various Snapdragon modules (Auto, Compute, Connectivity, Consumer Electronics Connectivity, Consumer IOT, Industrial IOT, Mobil...
PT-2022-17473 · Qualcomm · Snapdragon
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a denial of service due to a null pointer dereference that occurs when GATT is disconnected. This affects various Qualcomm Snapdragon products, including...
CVE-2022-25679
CVE-2022-25679 concerns a denial of service in video caused by improper access control in broadcast receivers across Qualcomm Snapdragon platforms (Compute, Consumer IOT, Industrial IOT, Mobile, Wearables). Multiple sources (NVD, Red Hat, PRION, CVE CVEList) corroborate the issue and its scope to...
CVE-2022-33234
CVE-2022-33234 describes memory corruption in video processing due to a configuration weakness affecting Qualcomm Snapdragon family products: Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, and Wearables. The Red Hat/NVD entries and related advisories confirm a memor...
PT-2022-17450 · Qualcomm · Snapdragon Mobile
Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Mobile affected versions not specified Description: The issue is related to a denial of service in the MODEM component due to a reachable assertion. This affects the Snapdragon Mobile platform. Recommendations: At the...
CVE-2022-25679
Denial of service in video due to improper access control in broadcast receivers in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...
CVE-2022-33236
Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking...
CVE-2022-33234
Memory corruption in video due to configuration weakness. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...
CVE-2022-25724
CVE-2022-25724 describes a memory corruption issue caused by a buffer overflow while validating the user address in Qualcomm Snapdragon graphics stack, affecting Snapdragon Auto, Compute, Connectivity, Consumer IoT, Industrial IoT, Mobile, Voice & Music, and Wearables. The publicly documented imp...
Advanced threat predictions for 2023
It is fair to say that since last years predictions, the world has dramatically changed. While the geopolitical landscape has durably shifted, cyberattacks remain a constant threat and show no signs of receding – quite the contrary. No matter where they are, people around the world should be...
CVE-2022-41339
In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation...
CVE-2022-41339
In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation...
Privilege escalation
In Zoho ManageEngine Mobile Device Manager Plus before 10.1.2207.5, the User Administration module allows privilege escalation...
PT-2022-25817 · Zoho · Zoho Manageengine Mobile Device Manager Plus
Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine Mobile Device Manager Plus versions prior to 10.1.2207.5 Description: The issue allows privilege escalation through the User Administration module. Recommendations: For versions prior to 10.1.2207.5, update to version...
ZOHO ManageEngine Mobile Device Manager Plus 安全漏洞
ZOHO ManageEngine Mobile Device Manager Plus is an enterprise mobile device management MDM software from ZOHO, Inc. It can be used to manage and protect Apple, Android, Windows and Chrome OS devices. A security vulnerability exists in ZOHO ManageEngine Mobile Device Manager Plus versions prior to...
CVE-2022-41339
The vulnerability CVE-2022-41339 affects Zoho ManageEngine Mobile Device Manager Plus (prior to version 10.1.2207.5). In the User Administration module, a privilege-escalation flaw exists that could allow a user with low privileges to gain higher access (impacting confidentiality, integrity, and ...