458 matches found
CVE-2021-21962
A heap-based buffer overflow vulnerability exists in the OTA Update u-download functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. A series of specially-crafted MQTT payloads can lead to remote code execution. An attacker must perform a man-in-the-middle attack in order to trigger th...
CVE-2020-14096
Memory overflow in Xiaomi AI speaker Rom version 1.59.6 can happen when the speaker verifying a malicious firmware during OTA process...
CVE-2018-11966
Undefined behavior in UE while processing unknown IEI in OTA message in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in MDM9150, MDM9206, MDM9607, MDM9640, MDM9650, MDM9655, MSM8909W, MSM8996AU, QCS605, SD 210/SD...
CVE-2019-10487
Buffer over read can happen while parsing SMS OTA messages at transport layer if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ800...
CVE-2019-2271
Buffer over read can happen while parsing downlink session management OTA messages if network sends un-intended values in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in...
CVE-2024-49846
Memory corruption while decoding of OTA messages from T3448 IE...
CVE-2024-49846
Memory corruption while decoding of OTA messages from T3448 IE...
CVE-2024-49847
Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE...
CVE-2024-49846
CVE-2024-49846 is a memory corruption issue arising in the decoding of OTA messages from the T3448 Information Element, reported across multiple vendors. The vulnerability affects Qualcomm-based components where the OTA message decoding path is involved; the root cause is a flaw in decoding OTA m...
CVE-2024-49846 Buffer Over-read in Multi-Mode Call Processor
Memory corruption while decoding of OTA messages from T3448 IE...
CVE-2024-49846 Buffer Over-read in Multi-Mode Call Processor
Memory corruption while decoding of OTA messages from T3448 IE...
CVE-2024-49847: Buffer Over-read
Transient DOS while processing of a registration acceptance OTA due to incorrect ciphering key data IE...
PT-2025-19866 · Qualcomm · Snapdragon +28
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs during the decoding of Over-The-Air OTA messages from T3448 IE. This corruption happens due to a problem in the decoding process of these...
CVE-2024-49846: Buffer Over-read
Memory corruption while decoding of OTA messages from T3448 IE...
CVE-2024-38404
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem...
CVE-2022-40536
Transient DOS due to improper authentication in modem while receiving plain TLB OTA request message from network...
CVE-2024-38404
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem...
CVE-2024-38404: Buffer Over-read
Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem...
CVE-2023-29114
System logs could be accessed through web management application due to a lack of access control. An attacker can obtain the following sensitive information: • Wi-Fi access point credentials to which the EV charger can connect. • APN web address and credentials. • IPSEC credentials...
GHSA-WRJC-FMFQ-W3JR baserCMS has a Cross-site Scripting (XSS) Vulnerability in Blog posts and Contents list Feature
XSS vulnerability in Blog posts and Contents list Feature to baserCMS. Target baserCMS 5.1.1 and earlier versions Vulnerability Malicious code may be executed in Blog posts and Contents list feature. Countermeasures Update to the latest version of baserCMS Please refer to the following page to...