CVE-2024-45582

Memory corruption while validating number of devices in Camera kernel...

CVE-2021-26611

HejHome GKW-IC052 IP Camera contained a hard-coded credentials vulnerability. This issue allows remote attackers to operate the IP Camera.reboot, factory reset, snapshot etc...

CVE-2021-26614

iusget.cgi in IpTime C200 camera allows remote code execution. A remote attacker may send a crafted parameters to the exposed vulnerable web service interface which invokes the arbitrary shell command...

CVE-2022-23382

Shenzhen Hichip Vision Technology IP Camera Firmware V11.4.8.1.1-20170926 has a denial of service vulnerability through sending a crafted multicast message in a local network...

CVE-2022-32540

Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable for UDP encryption when target system contains cameras wi...

CVE-2022-28743

Time-of-check Time-of-use TOCTOU Race Condition vulerability in Foscam R2C IP camera running System FW = 1.13.1.6, and Application FW = 2.91.2.66, allows an authenticated remote attacker with administrator permissions to execute arbitrary remote code via a malicious firmware patch. The impact of...

CVE-2020-7848

The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploit this vulnerability, an attacker can send a GET request that executes arbitrary OS commands via cookie value...

CVE-2024-12569

Disclosure of sensitive information in a Milestone XProtect Device Pack driver’s log file for third-party cameras, allows an attacker to read camera credentials stored in the Recording Server under specific conditions...

CVE-2024-33065

Memory corruption while taking snapshot when an offset variable is set by camera driver...

The vulnerability of the driver for the camera sensor module (drivers/cam_sensor_module/cam_eeprom/cam_eeprom_core.c) in Qualcomm’s embedded software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the camera sensor driver drivers/camsensormodule/cameeprom/cameepromcore.c in Qualcomm’s embedded software is related to synchronization errors when using shared resources “Race Situation”. Exploiting this vulnerability can allow attackers to compromise the confidentiality,...

CVE-2024-39349

A vulnerability regarding buffer copy without checking size of input 'Classic Buffer Overflow' is found in the libjansson component and it does not affect the upstream library. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camer...

CVE-2024-8957

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntpaddr configuration value which may lead to arbitrary command execution when ntpclient is started. When chained with CVE-2024-8956, a remote and...

CVE-2024-8956

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an insufficient authentication issue. The camera does not properly enforce authentication to /cgi-bin/param.cgi when requests are sent without an HTTP Authorization header. The result is a remote and unauthenticated attacker can...

CVE-2024-49834

Memory corruption while power-up or power-down sequence of the camera sensor...

CVE-2024-49833

Memory corruption can occur in the camera when an invalid CID is used...

CVE-2024-45582

Memory corruption while validating number of devices in Camera kernel...

CVE-2024-49832

Memory corruption in Camera due to unusually high number of nodes passed to AXI port...

CVE-2024-49834 Improper Validation of Array Index in Camera

Memory corruption while power-up or power-down sequence of the camera sensor...

CVE-2024-49834 Improper Validation of Array Index in Camera

Memory corruption while power-up or power-down sequence of the camera sensor...

CVE-2024-49834

CVE-2024-49834 describes memory corruption during the power-up/power-down sequence of the camera sensor in Qualcomm-based devices. The entry indicates a LOCAL attack vector, LOW privileges required, and no user interaction, with HIGH impact on confidentiality, integrity, and availability per the ...