CVE-2022-33224 Buffer copy without checking the size of input in Core

Memory corruption in core due to buffer copy without check9ing the size of input while processing ioctl queries...

CVE-2022-33224

CVE-2022-33224 describes memory corruption in a Qualcomm core component caused by a buffer copy that does not check input size when processing ioctl queries. Connected sources identify the vulnerability as affecting a Qualcomm closed-source component and corroborate the issue as core memory corru...

PT-2023-13248 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption caused by a buffer copy without size checking of the input in Core when processing ioctl commands from diag client applications. Recommendations: At t...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets, which arises from a buffer copy without checking the input size in the FM host, a memory corruption in the FM host, and a failure to check the input size in the FM host...

PT-2023-13251 · Fm Host · Fm Host

Name of the Vulnerable Software and Affected Versions: FM Host affected versions not specified Description: The issue is related to memory corruption in FM Host due to a buffer copy operation without checking the size of the input. This can lead to potential security risks. Recommendations: At th...

The vulnerability of the microprogrammed software of Zyxel ATP network devices, such as USG FLEX, USG FLEX50(W), USG20(W)-VPN, VPN, ZyWALL/USG, arises from copying buffers without checking the size of the input data. This allows a malicious actor to execute arbitrary code or cause service failures.

The vulnerability of microprogrammed network devices such as Zyxel ATP, USG FLEX, USG FLEX50W, USG20W-VPN, VPN, ZyWALL/USG lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause service...

The vulnerability of the identifier processing function in Zyxel ATP network devices, such as USG FLEX, USG FLEX50(W), USG20(W)-VPN, VPN, ZyWALL/USG, arises from copying buffers without checking the size of the input data. This allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the identifier processing function in Zyxel ATP, USG FLEX, USG FLEX50W, USG20W-VPN, VPN, ZyWALL/USG network devices lies in the copying of buffers without checking the size of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause...

The vulnerability of the set_sixel function in the graphics_sixel.c component of the XTerm terminal emulator allows a hacker to cause a system failure.

The vulnerability of the setsixel function in the graphicssixel.c component of the XTerm terminal emulator involves copying buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to cause a service failure...

The vulnerability of the jfif_encode() function in the FFJPEG library for encoding and decoding JPEG files allows a attacker to cause a service failure.

The vulnerability of the jfifencode function ffjpeg/src/jfif.c in the library for encoding and decoding JPEG files allows for the copying of buffers without checking the size of the input data. Exploiting this vulnerability could enable a remote attacker to cause service interruptions...

The vulnerability of the lou_setDataPath function in the opileTranslationTable.c file of the Liblouis translator, which allows a hacker to trigger a service failure.

The vulnerability of the lousetDataPath function in ompileTranslationTable.c in the Liblouis translator is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2022-33288

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information...

CVE-2022-33259

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received...

CVE-2022-33288 Buffer copy without checking the size of input in Core

Memory corruption due to buffer copy without checking the size of input in Core while sending SCM command to get write protection information...

CVE-2022-33288

CVE-2022-33288 describes a memory corruption flaw caused by a buffer copy that does not validate input size in Core when issuing an SCM command to retrieve write protection information. The vulnerability is linked to Qualcomm closed‑source components and has high/critical risk ratings across sour...

CVE-2022-33259 Buffer copy without checking the size of input in Modem

Memory corruption due to buffer copy without checking the size of input in modem while decoding raw SMS received...

CVE-2022-25740 Buffer Copy Without Checking Size of Input in MODEM

Memory corruption in modem due to buffer overwrite while building an IPv6 multicast address based on the MAC address of the iface...

CVE-2022-25678 Buffer Copy Without Checking Size of Input in MODEM

Memory correction in modem due to buffer overwrite during coap connection...

CVE-2022-25678 Buffer Copy Without Checking Size of Input in MODEM

Memory correction in modem due to buffer overwrite during coap connection...

PT-2023-13293 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption caused by a buffer copy without size checking of the input in Core when sending an SCM command to retrieve write protection information...

The vulnerability of the ff_hevc_put_hevc_qpel_pixels_8_sse function in the h.265 Libde265 implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ffhevcputhevcqpelpixels8sse function in the H.265 Libde265 video codec implementation is related to copying buffers without checking the size of the input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibili...