CVE-2022-40519

Information disclosure due to buffer overread in Core...

Information disclosure

Information disclosure due to buffer overread in Core...

Information disclosure

Information disclosure due to buffer overread in Core...

CVE-2022-40519

CVE-2022-40519 describes an information disclosure via a buffer overread in the Core component. Public documents tie this to Qualcomm chipset cores and note patches/mitigations exist: Qualcomm’s January 2023 security bulletin patches several CVEs (including 2022-40519) for affected chipsets; Leno...

CVE-2022-40518 Buffer overread in Core

Information disclosure due to buffer overread in Core...

CVE-2022-40518

CVE-2022-40518 is a buffer over-read in Core leading to information disclosure. Multiple connected sources tie this to Qualcomm chipsets and relate Lenovo ThinkPad X13 BIOS fixes (e.g., BIOS 1.47) and Qualcomm January 2023 patches addressing this family (CVE-2022-40516–40520). The Pixel security ...

CVE-2022-40518 Buffer overread in Core

Information disclosure due to buffer overread in Core...

PT-2023-13288 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in WLAN while parsing WLAN frames. This occurs because of a missing frame length check, leading to potential data...

PT-2023-13807 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to information disclosure due to a buffer overread in Core. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2023-12680 · Qualcomm · Snapdragon +38

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a denial of service that occurs while processing the fastboot flash command on mmc due to a buffer over read. Recommendations: A...

PT-2023-13266 · Unknown · Bluetooth Host

Name of the Vulnerable Software and Affected Versions: Bluetooth HOST affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in the Bluetooth HOST. This occurs while processing GetFolderItems and GetItemAttribute commands from a peer...

PT-2023-13264 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in WLAN when parsing corrupted NAN frames. Recommendations: At the moment, there is no information about ...

PT-2023-13291 · Qualcomm · Snapdragon +254

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in WLAN when processing 802.11 management frames. This occurs whi...

PT-2023-13289 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in WLAN while parsing BTM action frame. Recommendations: At the moment, there is no information about a newer version...

PT-2023-13290 · Qualcomm · Snapdragon +251

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a transient DOS due to a buffer over-read in WLAN while parsing WLAN CSA action frames. Recommendations: At the moment, there is no information about a newer...

PT-2023-13808 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to information disclosure due to a buffer overread. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabilit...

CVE-2022-4433

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4434

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4432

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

Lenovo ThinkPad 缓冲区错误漏洞

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. A security vulnerability exists in the Lenovo ThinkPad, which stems from a vulnerability in its PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause an information disclosure via a...