CVE-2024-38414

CVE-2024-38414 affects Qualcomm chipsets. The issue is information disclosure that occurs while processing firmware image information during core initialization, indicating a confidentiality impact. CVSS metrics in the entry show a high confidentiality impact (C/H) with local attack vector and lo...

CVE-2024-38413 Improper Input Validation in Computer Vision

Memory corruption while processing frame packets...

CVE-2024-38413

CVE-2024-38413 affects Qualcomm chipsets; memory corruption occurs while processing frame packets due to insufficient input validation in Qualcomm’s embedded software, specifically in msm/eva/msm cvp buf.c and msm/eva/msm cvp.c. The issue is mapped to a partial/low exposure vector with potential ...

CVE-2024-38413 Improper Input Validation in Computer Vision

Memory corruption while processing frame packets...

CVE-2024-38411 Use After Free in Computer Vision

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls...

CVE-2024-38411 Use After Free in Computer Vision

Memory corruption while registering a buffer from user-space to kernel-space using IOCTL calls...

NI Vision Builder AI JPG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI Vision Builder AI. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

NI Vision Development Module Vision Assistant JPG File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI Vision Development Module. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

NI Vision Builder AI JPG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI Vision Builder AI. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

NI Vision Development Module Vision Assistant JPG File Parsing Out-of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of NI Vision Development Module. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

The vulnerability of the CoreMedia component in operating systems such as visionOS, iOS, iPadOS, macOS, watchOS, and tvOS allows attackers to gain increased privileges.

The vulnerability of the CoreMedia component in visionOS, iOS, iPadOS, macOS, watchOS, and tvOS systems is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially crafted application...

CVE-2025-23045

CVE-2025-23045 affects Computer Vision Annotation Tool (CVAT). An attacker with an account on an affected CVAT instance can execute arbitrary code in the Nuclio function container via serverless tracker functions (TransT and SiamMask); deployments with custom tracker functions may also be affecte...

Computer Vision Annotation Tool 代码问题漏洞

Computer Vision Annotation Tool CVAT is a cvat.ai open source interactive video and image annotation tool for computer vision. A code issue vulnerability exists in Computer Vision Annotation Tool that originates when running certain types of serverless functions, which could allow an attacker to...

PT-2025-4790 · Nuclio +1 · Nuclio +1

Name of the Vulnerable Software and Affected Versions: Computer Vision Annotation Tool CVAT versions prior to 2.26.0 Description: The issue allows an attacker with an account on an affected CVAT instance to run arbitrary code in the context of the Nuclio function container. This affects CVAT...

DEBIAN-CVE-2025-24162

This issue was addressed through improved state management. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, visionOS 2.3, watchOS 11.3. Processing maliciously crafted web content may lead to an unexpected process crash...

DEBIAN-CVE-2025-24143

The issue was addressed with improved access restrictions to the file system. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, visionOS 2.3. A maliciously crafted webpage may be able to fingerprint the user...

CVE-2024-54478

An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in iPadOS 17.7.4, visionOS 2.2, tvOS 18.2, watchOS 11.2, iOS 18.2 and iPadOS 18.2, macOS Sonoma 14.7.2, macOS Sequoia 15.2. Processing maliciously crafted web content may lead to an unexpected process...

CVE-2024-12740 Dependency on Vulnerable Third-Party Component exposes Vulnerabilities in NI Vision Software

Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file...

CVE-2024-12740 Dependency on Vulnerable Third-Party Component exposes Vulnerabilities in NI Vision Software

Vision related software from NI used a third-party library for image processing that exposes several vulnerabilities. These vulnerabilities may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted file...

PT-2025-1943 · National Instruments · Ni Vision Builder Ai +1

Name of the Vulnerable Software and Affected Versions: NI Vision Builder AI affected versions not specified NI Vision Development Module affected versions not specified Description: The issue is related to the use of a third-party library for image processing in NI's vision software, which expose...