CVE-2024-48855: Out-of-bounds Read

Out-of-bounds read in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec...

CVE-2024-48858: Improper Validation of Specified Type of Input

Improper input validation in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition in the context of the process using the image codec...

CVE-2024-48854: Off-by-one Error

Off-by-one error in the TIFF image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause an information disclosure in the context of the process using the image codec...

PT-2024-10697 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds read in the sdp copy raw data function of sdp discovery.cc due to an incorrect bounds check. This could...

PT-2024-10698 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions. Description: The issue is related to a possible out of bound read in the process service search attr rsp function of sdp discovery.cc due to a missing bounds chec...

The vulnerability of the Intel Server Debug and Provisioning Tool (Intel SDP) in managing and operating server infrastructure affects Windows operating systems. This vulnerability stems from an uncontrolled search path element, allowing attackers to escalate their privileges.

The vulnerability of the Intel Server Debug and Provisioning Tool Intel SDP for operating systems running on Windows relates to an uncontrolled element in the search process. Exploiting this vulnerability could allow a malicious individual to gain increased privileges...

CVE-2018-9479

In processserviceattrreq and processservicesearchattrreq of sdpserver.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9478

In processserviceattrreq and processservicesearchattrreq of sdpserver.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9479

In processserviceattrreq and processservicesearchattrreq of sdpserver.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2018-9479

In processserviceattrreq and processservicesearchattrreq of sdpserver.cc, there is an out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-10713 · Bluez · Bluez

Name of the Vulnerable Software and Affected Versions: BlueZ affected versions not specified Description: The issue is caused by an out of bounds write due to a missing bounds check in the process service attr req and process service search attr req functions of sdp server.cc. This could lead to...

CVE-2018-9456

In sdpuextractattrseq of sdputils.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-10699 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an incorrect bounds check in the sdpu extract attr seq function of sdp utils.cc, which could lead to a possible out of bounds...

CVE-2024-36253

Uncontrolled search path in the IntelR SDP Tool for Windows software all version may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-35201

Incorrect default permissions in the IntelR SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access...

CVE-2024-36253

Uncontrolled search path in the IntelR SDP Tool for Windows software all version may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36253

CVE-2024-36253 affects Intel® SDP Tool for Windows, with an issue described as uncontrolled search path, potentially enabling privilege escalation for an authenticated user with local access. The entry covers all versions of the Intel SDP Tool for Windows. Multiple sources corroborate the vulnera...

CVE-2024-36253

Uncontrolled search path in the IntelR SDP Tool for Windows software all version may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-35201

Incorrect default permissions in the IntelR SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access...

CVE-2024-35201

Intel SDP Tool for Windows (all versions) is affected by CVE-2024-35201, caused by incorrect default permissions that may allow an authenticated local user to escalate privileges. The Intel advisory (Intel SA-01179) notes a product discontinuation and that no updates will be released; Intel recom...