CVE-2021-35077

Possible use after free scenario in compute offloads to DSP while multiple calls spawn a dynamic process in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2021-37115

There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2021-0117

Pointer issues in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

Cross site scripting

Out-of-bounds write in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

Design/Logic Flaw

Out-of-bounds read in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

Design/Logic Flaw

Insufficient control flow management in the firmware for some IntelR Processors may allow an authenticated user to potentially enable an escalation of privilege via local access...

GHSA-53HP-JPWQ-2JGQ Uncontrolled Resource Consumption in Apache Tomcat

A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient number of such requests were made on concurrent HTTP/2 connections, the server could become...

CVE-2021-0125

Improper initialization in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via physical access...

CVE-2021-0119

CVE-2021-0119 stems from improper initialization in Intel processor firmware that can allow a local attacker with physical access to escalate privileges. Connected advisories confirm affected platforms (e.g., IBM QRadar appliances M5/M6, certain Oracle/Red Hat/HP/F5-guided deployments) and descri...

CVE-2021-0107

CVE-2021-0107: Unchecked return value in the firmware for Intel processors can allow a local attacker to escalate privileges. Documented impact indicates local access is required and the consequence is elevated privileges, not remote code execution. Affected items include Intel processor firmware...

CVE-2021-0107

Unchecked return value in the firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0111

NULL pointer dereference in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-0103

Insufficient control flow management in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2021-0092

Improper access control in the firmware for some IntelR Processors may allow a privileged user to potentially enable a denial of service via local access...

CVE-2021-0103

CVE-2021-0103: Insufficient control flow management in Intel processor firmware can enable a local privilege escalation. Documents flag VELOS CX410 and VELOS BX110 Blade as affected; IBM/HP/F5 advisories reference Intel CPU vulnerabilities and firmware updates as mitigations. The connected source...

CVE-2021-0093

CVE-2021-0093: Incorrect default permissions in the firmware for some Intel processors may allow a local privileged user to cause a denial of service. The CVE is linked with multiple vendor advisories (IBM QRadar, F5 advisories, HP/Intel BIOS updates, and IBM/NCSC notes) that reference vulnerable...

HUAWEI EMUI security vulnerabilities

Huawei EMUI is an Android-based mobile operating system developed by the Chinese company Huawei Huawei. Huawei EMUI suffers from an information disclosure vulnerability, which is caused by an unauthorized rewrite vulnerability in the memory access management module on the ACPU. An attacker can...

HUAWEI EMUI security vulnerabilities

Huawei Emui is an Android-based mobile operating system developed by Huawei, a Chinese company. An access control error vulnerability exists in Huawei EMUI version 12.0.0, which stems from an unauthorized rewrite vulnerability in the memory access management module on the ACPU. An attacker can...

Huawei EMUI security vulnerabilities

Huawei Emui is an Android-based mobile operating system developed by Huawei, a Chinese company. Huawei EMUI suffers from an information disclosure vulnerability that originates from an unauthorized rewrite vulnerability in the memory access management module on the ACPU. The vulnerability can be...

CVE-2021-0127

A flaw was found in microcode. Under complex microarchitectural conditions, an unexpected code breakpoint may cause a system hang. The hang was observed on a Skylake server processor, and subsequent analysis indicated additional potentially affected processors. This flaw allows a possible tempora...