PT-2024-40049 · Unknown · Shared Preferences Android

Name of the Vulnerable Software and Affected Versions: shared preferences android versions prior to 2.3.4 Description: The issue arises from the serialization and deserialization of special string prefixes used to store data types that are not natively representable by the available storage...

shared_preferences_android vulnerability

Due to some data types not being natively representable for the available storage options, sharedpreferencesandroid serializes and deserializes special string prefixes to store these unrepresentable data types. This allows arbitrary classes to be deserialized leading to arbitrary code execution. ...

liboqs information leakage vulnerability

liboqs is an Open Quantum Safe open source C library for quantum-safe cryptographic algorithms. An information disclosure vulnerability exists in versions of liboqs prior to 0.12.0 that stems from an indexing error where part of the key is incorrectly treated as non-secret data, resulting in the...

kernel: mm/filemap: make MAX_PAGECACHE_ORDER acceptable to xarray

In the Linux kernel, the following vulnerability has been resolved: mm/filemap: make MAXPAGECACHEORDER acceptable to xarray Patch series "mm/filemap: Limit page cache size to that supported by xarray", v2. Currently, xarray can't support arbitrary page cache size. More details can be found from t...

kernel: net/smc: fix illegal rmb_desc access in SMC-D connection dump

A flaw was found in the Linux kernel in which functions providing information about SMC-D connections caused a NULL pointer dereference. This flaw allows an attacker with permission to read this information to cause a denial of service...

kernel: mm/shmem: disable PMD-sized page cache if needed

A denial of service vulnerability was found in the Linux Kernel. In architectures such as ARM64 where the base page size is 64KB, a 512MB page cache could lead to a software crash...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a deadlock issue in the mm/shmem module due to the undoing of a previous data contention fix...

ocfs2 Privilege Escalation

The vulnerability of the ocfs2 component in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...

@acronis-platform/ui-component-library (1.33.0), @intlify/core (>=10.0.0, <=10.0.4) +32 more potentially affected by CVE-2024-52810 via @intlify/shared (>=10.0.0, <=10.0.4)

@intlify/shared NPM version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves: CVE-2024-52810 Source advisory: GHSA-HJWQ-MJWJ-4X6C...

GHSA-HJWQ-MJWJ-4X6C @intlify/shared Prototype Pollution vulnerability

Vulnerability type: Prototype Pollution Affected Package: Product: @intlify/shared Version: 10.0.4 Vulnerability Locations: nodemodules/@intlify/shared/dist/shared.cjs:232:26 Description: The latest version of @intlify/shared 10.0.4 is vulnerable to Prototype Pollution through the entry functions...

@actindo/core-ui (>=0.0.17, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +146 more potentially affected by CVE-2024-52810 via @intlify/shared (>=9.7.0, <=9.14.1)

@intlify/shared NPM version =9.7.0, =0.0.17, =0.0.1, =0.0.1, =0.0.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =0.17.0, =0.17.0, =0.17.0, =0.18.1 and more Source cves: CVE-2024-52810 Source advisory: OSV:GHSA-HJWQ-MJWJ-4X6C...

@actindo/core-ui (>=0.0.17, <=0.0.75), @actindo/datahub (>=0.0.1, <=0.0.7) +146 more potentially affected by CVE-2024-52810 via @intlify/shared (>=9.7.0, <=9.14.1)

@intlify/shared NPM version =9.7.0, =0.0.17, =0.0.1, =0.0.1, =0.0.1, =1.6.4, =0.0.0, =0.0.1, =0.0.0, =1.0.0-rc16, =0.17.0, =0.17.0, =0.17.0, =0.18.1 and more Source cves: CVE-2024-52810 Source advisory: GHSA-HJWQ-MJWJ-4X6C...

@acronis-platform/ui-component-library (1.33.0), @intlify/core (>=10.0.0, <=10.0.4) +32 more potentially affected by CVE-2024-52810 via @intlify/shared (>=10.0.0, <=10.0.4)

@intlify/shared NPM version =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =10.0.0, =0.0.16, =2.4.8, =3.0.0, =4.0.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves: CVE-2024-52810 Source advisory: OSV:GHSA-HJWQ-MJWJ-4X6C...

libreswan: Missing PreSharedKey for connection can cause crash

A flaw was found in Libreswan. This issue causes Libreswan to restart under some IKEv2 retransmit scenarios when a connection is configured to use PreSharedKeys authby=secret, and the connection cannot find a matching configured secret. When automatically added on startup using the auto= keyword,...

Model Manager Component Code Execution

The vulnerability of the Model Manager component in the integrated development environment designed for the design, modeling, and development of complex engineering systems, IBM Engineering Systems Design Rhapsody, is related to synchronization errors when using a shared resource “Race Situation”...

Victure RX1800 WiFi 6 security vulnerability

The Victure RX1800 WiFi 6 is a wireless router from Victure. A security vulnerability exists in the Victure RX1800 WiFi 6 that originates from an attacker being able to obtain the default Wi-Fi PSK value via the last 4 octets of the BSSID...

Qualcomm Chipsets security vulnerabilities

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from sequential allocation and access of entries in the SMEM partition, which may result in memory corruption if not managed properly...

Race Condition

Overview minio is a MinIO Python SDK for Amazon S3 Compatible Cloud Storage Affected versions of this package are vulnerable to Race Condition due to improper handling of shared resources in worker threads via the helpers.py function. An attacker can exploit this by initiating multiple asynchrono...

CVE-2024-52810

@intlify/shared is a shared library for the intlify project. The latest version of @intlify/shared 10.0.4 is vulnerable to Prototype Pollution through the entry functions lib.deepCopy. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the globa...

CVE-2024-52810 Prototype Pollution in @intlify/shared >=9.7.0 <= 10.0.4

@intlify/shared is a shared library for the intlify project. The latest version of @intlify/shared 10.0.4 is vulnerable to Prototype Pollution through the entry functions lib.deepCopy. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the globa...