CVE-2022-25690

Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

PT-2025-5816

Name of the Vulnerable Software and Affected Versions: FFRT module affected versions not specified Description: The issue is related to an out-of-bounds array read in the FFRT module. Successful exploitation of this issue may cause features to perform abnormally. Recommendations: At the moment,...

CVE-2022-46152

OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The function cleanupshmrefs is called by both entryinvokecommand and entryopensession. The commands...

CVE-2022-22099

Memory corruption in multimedia due to improper validation of array index in Snapdragon Auto...

CVE-2022-40539

Memory corruption in Automotive Android OS due to improper validation of array index...

CVE-2024-52333

An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-21522

All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder.decode or new OpusDecoder.decodeFloat functions it is not checked for negative values. This can lead to a process crash...

CVE-2024-47796

An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...

CVE-2024-24563

Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can be keyed by a signed integer, while they are defined for unsigned integers only. The typechecker doesn't throw when spotting the usage of an int as an index for an array. The typechecker allows the usage of...

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: Fix use after free in lineinfochangednotify CVE-2024-36899 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overloading of MEMUNINIT's meaning CVE-2024-50164 In the Linux...

CVE-2024-49843 Improper Validation of Array Index in Graphics_Linux

Memory corruption while processing IOCTL from user space to handle GPU AHB bus error...

CVE-2024-49837

CVE-2024-49837 affects Qualcomm chipsets; memory corruption occurs when reading CPU state data during guest VM suspend in affected hardware. Root cause described as improper handling during VM suspend that can corrupt memory, with CVSS 3.1 base score 7.8 (High impact, local access, low attack com...

CVE-2024-49837 Improper Validation of Array Index in Automotive OS Platform

Memory corruption while reading CPU state data during guest VM suspend...

CVE-2024-49833

CVE-2024-49833 is a memory corruption vulnerability in the camera triggered by an invalid CID, reported across Qualcomm components and Android security bulletins. Affected area is the camera stack from Qualcomm—details cite memory corruption as the underlying flaw with high impact (C:H, I:H, A:H)...

CVE-2024-49833 Improper Validation of Array Index in Camera

Memory corruption can occur in the camera when an invalid CID is used...

CVE-2024-49833 Improper Validation of Array Index in Camera

Memory corruption can occur in the camera when an invalid CID is used...

CVE-2024-49832 Improper Validation of Array Index in Camera

Memory corruption in Camera due to unusually high number of nodes passed to AXI port...

CVE-2024-49832

CVE-2024-49832 concerns Qualcomm camera hardware. The root cause is memory corruption caused by an unusually high number of nodes passed to the AXI port, enabling memory corruption in the Camera subsystem. The CVSS v3.1 metrics indicate local exploitation with low privileges and no user interacti...

CVE-2024-45582 Improper Validation of Array Index in Camera Driver

Memory corruption while validating number of devices in Camera kernel...

CVE-2024-45582

CVE-2024-45582 affects Qualcomm camera kernel: memory corruption during validation of the number of devices in the camera core. Root cause described as an input/array validation issue leading to memory corruption. CVSS metrics indicate local access, low attack complexity with low privileges, and ...