CVE-2022-40518

CVE-2022-40518 is a buffer over-read in Core leading to information disclosure. Multiple connected sources tie this to Qualcomm chipsets and relate Lenovo ThinkPad X13 BIOS fixes (e.g., BIOS 1.47) and Qualcomm January 2023 patches addressing this family (CVE-2022-40516–40520). The Pixel security ...

PT-2023-13807 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to information disclosure due to a buffer overread in Core. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2023-13291 · Qualcomm · Snapdragon +254

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in WLAN when processing 802.11 management frames. This occurs whi...

PT-2023-13289 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in WLAN while parsing BTM action frame. Recommendations: At the moment, there is no information about a newer version...

PT-2023-12680 · Qualcomm · Snapdragon +38

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a denial of service that occurs while processing the fastboot flash command on mmc due to a buffer over read. Recommendations: A...

PT-2023-13808 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to information disclosure due to a buffer overread. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerabilit...

CVE-2022-40519: Out-of-bounds Read

Information disclosure due to buffer overread in Core...

PT-2023-13288 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in WLAN while parsing WLAN frames. This occurs because of a missing frame length check, leading to potential data...

PT-2023-13290 · Qualcomm · Snapdragon +251

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a transient DOS due to a buffer over-read in WLAN while parsing WLAN CSA action frames. Recommendations: At the moment, there is no information about a newer...

PT-2023-13266 · Unknown · Bluetooth Host

Name of the Vulnerable Software and Affected Versions: Bluetooth HOST affected versions not specified Description: The issue is related to information disclosure due to a buffer over-read in the Bluetooth HOST. This occurs while processing GetFolderItems and GetItemAttribute commands from a peer...

PT-2023-13264 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in WLAN when parsing corrupted NAN frames. Recommendations: At the moment, there is no information about ...

CVE-2022-4434

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4433

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

CVE-2022-4432

A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause information disclosure...

Lenovo ThinkPad buffer error vulnerability

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. A security vulnerability exists in the Lenovo ThinkPad, which stems from a vulnerability in its PersistenceConfigDxe driver that could allow a local attacker with elevated privileges to cause an information disclosure via a...

UAX200 DLL Corel Presentations Unauthorized Access

The vulnerability of the UAX200.dll library in Corel Presentations’ presentation preparation and viewing software is related to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information through a specially...

Corel Presentations IPPP82.FLT Unauthorized Access

The vulnerability of the IPPP82.FLT module in the Corel Presentations preparation and presentation software relates to reading data beyond the buffer boundaries. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information using a specially crafted PPT fi...

Adobe Illustrator Heap Buffer Overflow Info Disclosure

The vulnerability of Adobe Illustrator graphic editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose protected information using a specially created CDR file...

ksmbd SMB2 Write Disclosure DoS

The vulnerability of the smb2write function fs/ksmbd/smb2pdu.c in the ksmbd module of the Linux operating system relates to the ability to read data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service...

ksmbd SMB2 Write Disclosure DoS

The vulnerability of the smb2write function fs/ksmbd/smb2pdu.c in the ksmbd module of the Linux operating system relates to the ability to read data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service...