Lucene search
+L

14805 matches found

CNVD
CNVD
added 2022/02/13 12:00 a.m.56 views

Huawei Emui Out-of-Bounds Access Vulnerability

Huawei Emui is an Android-based mobile operating system developed by Huawei, a Chinese company. An out-of-bounds access vulnerability exists in Huawei EMUI version 12.0.0, which stems from the system's lax input parameter validation in the audio component. An attacker can exploit the vulnerabilit...

9.8CVSS9.4AI score0.00796EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/11 6:15 p.m.9 views

CVE-2022-23429

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...

5.3CVSS5.8AI score0.001EPSS
SaveExploits0References2
NVD
NVD
added 2022/02/11 6:15 p.m.31 views

CVE-2022-23429

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...

5.3CVSS0.001EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/11 6:15 p.m.9 views

CVE-2022-23429

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...

4.4CVSS5.8AI score0.001EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/11 6:15 p.m.20 views

Input validation

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...

3.6CVSS4.7AI score0.001EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/02/11 5:40 p.m.112 views

CVE-2022-23429

CVE-2022-23429 describes an improper boundary check in the Android audio HAL service prior to SMR Feb-2022 Release 1, allowing local attackers to read invalid memory and cause an application crash. In the provided connected records, the vulnerability is documented across multiple sources (NVD, Re...

5.3CVSS4.6AI score0.001EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/02/11 5:40 p.m.36 views

CVE-2022-23429

An improper boundary check in audio hal service prior to SMR Feb-2022 Release 1 allows attackers to read invalid memory and it leads to application crash...

5.3CVSS5.5AI score0.001EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/02/10 12:00 a.m.88 views

(Pwn2Own) Sonos One Speaker ALAC Frame Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos One Speaker. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ALAC audio codec. The issue results from the lack of proper validation of the leng...

9.8CVSS5.8AI score0.07212EPSS
SaveExploits0
NVD
NVD
added 2022/02/09 11:15 p.m.25 views

CVE-2021-39997

There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may cause out-of-bounds access...

9.8CVSS0.00796EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/09 11:15 p.m.8 views

CVE-2021-39997

There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may cause out-of-bounds access...

9.8CVSS7.3AI score0.00796EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/02/09 10:03 p.m.34 views

CVE-2021-39997

There is a vulnerability of unstrict input parameter verification in the audio assembly.Successful exploitation of this vulnerability may cause out-of-bounds access...

9.6AI score0.00796EPSS
SaveExploits0References1
CVE
CVE
added 2022/02/09 10:03 p.m.105 views

CVE-2021-39997

CVE-2021-39997 affects Huawei EMUI 12.0.0. The root cause is lax/input parameter verification in the audio component (audio assembly), leading to out-of-bounds access. Exploitation is described as enabling out-of-bounds access, with CVSS metrics indicating high to critical impact (network attack ...

9.8CVSS9.3AI score0.00796EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/02/09 12:00 a.m.8 views

PT-2022-11122 · Huawei · Emui

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a vulnerability of unstrict input parameter verification in the audio assembly. Successful exploitation of this vulnerability may cau...

9.8CVSS9.4AI score0.00796EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/02/09 12:00 a.m.9 views

Huawei Emui 缓冲区错误漏洞

Huawei Emui is an Android-based mobile operating system developed by Huawei, a Chinese company. An out-of-bounds access vulnerability exists in Huawei EMUI version 12.0.0, which stems from the system's lax input parameter validation in the audio component. An attacker can exploit the vulnerabilit...

9.8CVSS5.7AI score0.00796EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/02/09 12:00 a.m.32 views

AlmaLinux 8 : libsndfile (ALSA-2020:1636)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2020:1636 advisory. - A stack-based buffer overflow in psfmemset in common.c in libsndfile 1.0.28 allows remote attackers to cause a denial of service application crash or...

8.8CVSS7.3AI score0.03574EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/02/01 12:00 a.m.13 views

The vulnerability of the Audio subsystem in operating systems such as iPadOS, watchOS, iOS, tvOS, and Mac OS allows a perpetrator to execute arbitrary code on the target system.

The vulnerability of the Audio subsystem in operating systems such as iPadOS, watchOS, iOS, tvOS, and Mac OS is caused by buffer overflows. Exploiting this vulnerability allows an attacker to execute arbitrary code in the target system using a specially created malware file...

7.8CVSS7.5AI score0.01861EPSS
SaveExploits0References6Affected Software5
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.19 views

Mageia: Security Advisory (MGASA-2021-0236)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.6AI score0.01368EPSS
SaveExploits0References13
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.46 views

Mageia: Security Advisory (MGASA-2021-0418)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS7.2AI score0.0072EPSS
SaveExploits4References6
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.32 views

Mageia: Security Advisory (MGASA-2022-0019)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.9AI score0.0134EPSS
SaveExploits6References6
OpenVAS
OpenVAS
added 2022/01/28 12:00 a.m.28 views

Mageia: Security Advisory (MGASA-2019-0127)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.4AI score0.03299EPSS
SaveExploits11References4
Rows per page
Query Builder