CVE-2024-38417 Buffer Over-read in Automotive Multimedia

Information disclosure while processing IO control commands...

CVE-2024-38416 Buffer Over-read in Audio

Information disclosure during audio playback...

CVE-2024-38416

CVE-2024-38416 is a buffer over-read vulnerability in audio processing on Qualcomm chipsets that leads to information disclosure during audio playback (local access; no explicit exploit details in the provided sources). The affected component is audio playback; root cause stated as a buffer over-...

CVE-2024-38416 Buffer Over-read in Audio

Information disclosure during audio playback...

CVE-2024-38414 Buffer Over-read in Computer Vision

Information disclosure while processing information on firmware image during core initialization...

CVE-2024-38414 Buffer Over-read in Computer Vision

Information disclosure while processing information on firmware image during core initialization...

CVE-2024-38414

CVE-2024-38414 affects Qualcomm chipsets. The issue is information disclosure that occurs while processing firmware image information during core initialization, indicating a confidentiality impact. CVSS metrics in the entry show a high confidentiality impact (C/H) with local attack vector and lo...

CVE-2024-38404 Buffer Over-read in Multi Mode Call Processor

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem...

CVE-2024-38404

CVE-2024-38404 describes a transient DoS in Qualcomm modem components triggered when a registration-accept OTA contains incorrect ciphering key data. The issue is documented across multiple feeds (NVD/NCSC/Red Hat summaries) with the same description. Connected sources indicate impact on Qualcomm...

CVE-2024-38404 Buffer Over-read in Multi Mode Call Processor

Transient DOS when registration accept OTA is received with incorrect ciphering key data IE in modem...

SUSE-SU-2025:20082-1 Security update for Mesa

This update for Mesa fixes the following issues: - CVE-2023-45913: Fixed NULL pointer dereference via dri2GetGlxDrawableFromXDrawableId bsc1222040. - CVE-2023-45919: Fixed buffer over-read in glXQueryServerString bsc1222041. - CVE-2023-45922: Fixed segmentation violation in glXGetDrawableAttribut...

SUSE-SU-2025:20043-1 Security update for libxml2

This update for libxml2 fixes the following issues: - CVE-2024-34459: Fixed buffer over-read in bsc1224282...

Security update for libxml2

This update for libxml2 fixes the following issues: CVE-2024-34459: Fixed buffer over-read in bsc1224282 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command listed for your...

Security Bulletin: A vulnerability in nginx affects IBM Robotic Process Automatin for Cloud Pak and may result in a denial of service (CVE-2024-7347)

Summary A vulnerability in nginx affects IBM Robotic Process Automatin for Cloud Pak and may result in a denial of service. nginx is used by IBM Robotic Process Automation as part of it's container deployment. This bulletin identifies the security fix to apply to address the vulnerability...

Security Bulletin: Vulnerability in OpenSSL affects IBM Integrated Analytics System [CVE-2024-5535]

Summary Redhat provided OpenSSL is used by IBM Integrated Analytics System. IBM Integrated Analytics System has addressed the applicable CVE CVE-2024-5535 Vulnerability Details CVEID:CVE-2024-5535 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a buffer over-read flaw in the...

BIT-RUBY-MIN-2022-28739

There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including KernelFloat and Stringtof...

openSUSE 15 Security Update : qt6-connectivity (openSUSE-SU-2025:0033-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2025:0033-1 advisory. - CVE-2025-23050: Fixed buffer over-read and division by zero boo1236237 Tenable has extracted the preceding description block directly from the SUSE...

OPENSUSE-SU-2025:0033-1 Security update for qt6-connectivity

This update for qt6-connectivity fixes the following issues: - CVE-2025-23050: Fixed buffer over-read and division by zero boo1236237...

Security update for qt6-connectivity (moderate)

openSUSE Security Update: Security update for qt6-connectivity Announcement ID: openSUSE-SU-2025:0033-1 Rating: moderate References: 1236237 Cross-References: CVE-2025-23050 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes one vulnerability is now available. Description: This...

Security Bulletin: Vulnerabilities in Snappy, OpenSSL and cURL libcurl might affect IBM Storage Copy Data Management.

Summary IBM Storage Copy Data Management can be affected by vulnerabilities in Snappy, OpenSSL and cURL libcurl. An attacker, a local attacker or a remote attacker could exploit these vulnerabilities to cause JVM to crash, to cause a crash or memory contents to be sent to the peer, to bypass...