11810 matches found
CVE-2024-33067
CVE-2024-33067 describes an information disclosure in Qualcomm chipsets where invoking the callback function of the sound model driver from the ADSP for each valid opcode can disclose data. The CVE affects the sound model driver component (on affected Qualcomm ADSP-enabled systems). Underlying ca...
CVE-2024-33067 Buffer Over-read in Audio
Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver...
CVE-2024-33061 Buffer Over-read in DSP Service
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...
CVE-2024-33061
CVE-2024-33061 describes an information disclosure affecting Qualcomm chipsets, caused by processing an IOCTL call used to release a trusted VM process or to open a channel without initializing the process. The vulnerability is disclosed as a local issue with high confidentiality impact and low a...
CVE-2024-33061 Buffer Over-read in DSP Service
Information disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process...
CVE-2024-23366 Buffer Over-read in Automotive Autonomy
Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size...
CVE-2024-23366
CVE-2024-23366 affects Qualcomm chipset mailbox handling. The issue is an information disclosure in the mailbox write API when a message from a user exceeds the mailbox size, potentially exposing data due to improper handling of oversized input. Ironically, the vulnerability is scoped to local ac...
CVE-2024-23366 Buffer Over-read in Automotive Autonomy
Information Disclosure while invoking the mailbox write API when message received from user is larger than mailbox size...
Amazon Linux 2 : libxml2 (ALAS-2024-2717)
The version of libxml2 installed on the remote host is prior to 2.9.1-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2717 advisory. An issue was discovered in xmllint from libxml2 before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint...
Security Bulletin: Multiple Vulnerabilities in IBM API Connect
Summary Multiple vulnerabilities were addressed in IBM API Connect v10.0.9.0 Vulnerability Details CVEID:CVE-2024-5535 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a buffer over-read flaw in the SSLselectnextproto API function when calling with an empty supported client...
Medium: libxml2
Issue Overview: An issue was discovered in xmllint from libxml2 before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c. CVE-2024-34459 Affected Packages: libxml2 Note: This advisory is...
CBL Mariner 2.0 Security Update: mariadb (CVE-2023-6936)
The version of mariadb installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6936 advisory. - In wolfSSL prior to 5.6.6, if callback functions are enabled via the WOLFSSLCALLBACKS flag, then a malicious...
CBL Mariner 2.0 Security Update: file (CVE-2022-48554)
The version of file installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48554 advisory. - File before 5.43 has an stack-based buffer over-read in filecopystr in funcs.c. NOTE: File is the name of an...
Medium: libxml2
Issue Overview: An issue was discovered in xmllint from libxml2 before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in xmllint.c. CVE-2024-34459 Affected Packages: libxml2 Issue Correction: Run dnf...
Amazon Linux 2023 : libxml2, libxml2-devel, libxml2-static (ALAS2023-2024-783)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-783 advisory. An issue was discovered in xmllint from libxml2 before 2.11.8 and 2.12.x before 2.12.7. Formatting error messages with xmllint --htmlout can result in a buffer over-read in xmlHTMLPrintFileContext in...
Amazon Linux 2022 : libsepol, libsepol-devel, libsepol-static (ALAS2022-2022-030)
It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2022-2022-030 advisory. The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper. CVE-2021-36084 The CIL compiler in SELinux 3.2 has a...
Heap-buffer over-read with WOLFSSL_CALLBACKS
...
CVE-2024-33056 Buffer Over-read in MProc
Memory corruption when allocating and accessing an entry in an SMEM partition continuously...