CVE-2022-33229

CVE-2022-33229 describes an information disclosure due to a buffer over-read in the Modem when processing IPv4 packets using a static array. Affected software/hardware: Modem, tied to Qualcomm chipsets. Root cause: buffer over-read in the Modem’s IPv4 packet handling. Impact: confidentiality expo...

CVE-2022-33229 Buffer over-read in Modem

Information disclosure due to buffer over-read in Modem while using static array to process IPv4 packets...

CVE-2022-33221

CVE-2022-33221 describes an information disclosure via a buffer over-read in the Trusted Execution Environment when processing metadata verification requests. Multiple connected sources attribute the issue to Qualcomm closed-source components/T EE; impact is confidentiality loss with potential lo...

CVE-2022-33221 Buffer over-read in Trusted Execution Environment

Information disclosure in Trusted Execution Environment due to buffer over-read while processing metadata verification requests...

CVE-2022-25738 Buffer Over-read in MODEM

Information disclosure in modem due to buffer over-red while performing checksum of packet received...

CVE-2022-25732 Buffer Over-read in MODEM

Information disclosure in modem due to buffer over read in dns client due to missing length check...

CVE-2022-25732 Buffer Over-read in MODEM

Information disclosure in modem due to buffer over read in dns client due to missing length check...

CVE-2022-25728 Buffer Over-read in MODEM

Information disclosure in modem due to buffer over-read while processing response from DNS server...

CVE-2022-25728 Buffer Over-read in MODEM

Information disclosure in modem due to buffer over-read while processing response from DNS server...

CVE-2022-25728

CVE-2022-25728 describes an information disclosure in the modem component caused by a buffer over-read while processing a DNS server response. The issue affects the modem’s handling of DNS responses and is categorized with high impact on confidentiality (per CVSS notes). Exploit details, affected...

PT-2023-13243 · Unknown · Trusted Execution Environment

Name of the Vulnerable Software and Affected Versions: Trusted Execution Environment affected versions not specified Description: The issue is related to information disclosure in the Trusted Execution Environment. It occurs due to a buffer over-read when processing metadata verification requests...

PT-2023-13343 · Wlan Host · Wlan Host

Name of the Vulnerable Software and Affected Versions: WLAN Host affected versions not specified Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in the WLAN Host while parsing frame information. Recommendations: At the moment, there is no...

PT-2023-13309 · Qualcomm · Snapdragon +126

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to a transient DOS due to a buffer over-read in WLAN, occurring when processing an incoming management frame with incorrectly filled Information Elements IEs...

PT-2023-13250 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in the Modem when using a static array to process IPv4 packets. Recommendations: At the moment, there is no informatio...

Amazon Linux AMI : squid, squid-migration-script (ALAS-2023-1677)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2023-1677 advisory. In Squid 3.x through 3.5.28, 4.x through 4.17, and 5.x before 5.6, due to improper buffer management, a Denial of Service can occur when processing long Gopher server responses. CVE-2021-46784 A...

Huawei EulerOS: Security Advisory for ruby (EulerOS-SA-2023-1292)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for vim (EulerOS-SA-2023-1303)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.2.2 : ruby (EulerOS-SA-2023-1292)

According to the versions of the ruby packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In RDoc 3.11 through 6.x before 6.3.1, as distributed with Ruby through 3.0.1, it is possible to execute arbitrary code via | and...

EulerOS Virtualization 3.0.2.2 : vim (EulerOS-SA-2023-1303)

According to the versions of the vim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-3778, CVE-2021-3872, CVE-2021-3927, CVE-2021-3984, CVE-2021-4019,...

Heap-Based Buffer Over-Read

sudo is vulnerable to Heap-Based Buffer Over-Read. The vulnerability exists in crypt password backend, which contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that may result in a heap-based buffer over-read, that can be triggered by arbitrary local users with access to Sudo by...