Input validation

Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Musi...

CVE-2019-14046

CVE-2019-14046 is a Qualcomm/Snapdragon vulnerability described as an out-of-bounds memory allocation during camera parameter validation across Snapdragon Auto, Compute, and related chips (QCS605, SDM439, SDX24). Connected sources (NVD/NVD family, Red Hat advisory, CVE listings, and Android bulle...

CVE-2019-14046

Out of bound access while allocating memory for an array in camera due to improper validation of elements parameters in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Musi...

CVE-2019-14044

CVE-2019-14044 is an out-of-bounds memory access in an array of pointers during normal camera open/close on Qualcomm Snapdragon platforms (e.g., QCS605, SDM439/630/636/660/SDX24/SDM660). Root cause: use of uninitialized memory segment leading to potential privilege impact. Documented impact is Hi...

PT-2020-9473

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to out of bound access while allocating memory for an array in the camera due to improper validation of elements parameters. This affects various...

PT-2020-9471

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon versions affected versions not specified Description: The issue is related to out of bound access due to the access of an uninitialized memory segment in an array of pointers. This occurs during normal camera open and clos...

CVE-2020-3110

A vulnerability in the Cisco Discovery Protocol implementation for the Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to execute code remotely or cause a reload of an affected IP Camera. The vulnerability is due to missing checks when processing...

Pixel Update Bulletin—February 2020Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2020-02-05 or later address all issues in this bulletin and all issues in the February 2020 Android...

P2PWIFICAM2 for iOS 10.4.1 - (Camera ID) Denial of Service Exploit

Exploit Title: P2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service PoC Discovery by: Ivan Marmolejo Vendor Homepage: https://apps.apple.com/mx/app/p2pwificam2/id663665207 Software Link: App Store for iOS devices Tested Version: 10.4.1 Vulnerability Type: Denial of Service DoS Local Tested ...

P2PWIFICAM2 For iOS 10.4.1 Denial Of Service

Exploit Title: P2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service PoC Discovery by: Ivan Marmolejo Discovery Date: 2020-02-02 Vendor Homepage: https://apps.apple.com/mx/app/p2pwificam2/id663665207 Software Link: App Store for iOS devices Tested Version: 10.4.1 Vulnerability Type: Denial o...

P2PWIFICAM2 for iOS 10.4.1 - Camera ID Denial of Service (PoC)

P2PWIFICAM2 for iOS 10.4.1 - Camera ID Denial of Service PoC Exploit Title: P2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service PoC Discovery by: Ivan Marmolejo Discovery Date: 2020-02-02 Vendor Homepage: https://apps.apple.com/mx/app/p2pwificam2/id663665207 Software Link: App Store for iO...

P2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service (PoC)

Exploit Title: P2PWIFICAM2 for iOS 10.4.1 - 'Camera ID' Denial of Service PoC Discovery by: Ivan Marmolejo Discovery Date: 2020-02-02 Vendor Homepage: https://apps.apple.com/mx/app/p2pwificam2/id663665207 Software Link: App Store for iOS devices Tested Version: 10.4.1 Vulnerability Type: Denial o...

CVE-2013-2574

An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a malicious user obtain sensitive information...

Design/Logic Flaw

An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a malicious user obtain sensitive information...

CVE-2013-2574

An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a malicious user obtain sensitive information...

CVE-2013-2574

The CVE-2013-2574 affects FOSCAM FI8620 IP Cameras, due to improper access restrictions that let remote attackers browse /tmpfs/ and /log/ directories without authentication, potentially exposing configuration and credentials (e.g., plaintext Wi‑Fi config and admin/passwords). Public references d...

CVE-2013-2574: Incorrect Authorization

An Access vulnerability exists in FOSCAM IP Camera FI8620 due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a malicious user obtain sensitive information...

PT-2020-7398

Name of the Vulnerable Software and Affected Versions: FOSCAM IP Camera FI8620 affected versions not specified Description: An issue exists due to insufficient access restrictions in the /tmpfs/ and /log/ directories, which could let a malicious user obtain sensitive information. Recommendations:...

CVE-2013-1603

Summary of CVE-2013-1603 and related D-Link IP Camera vulnerabilities (CVE‑2013‑1599, -1600, -1601, -1602, -1603): Core Security’s CORE-2013-0303 advisory documents OS command injection, several authentication issues, information leakage, and hard-coded credentials affecting D‑Link IP cameras (mo...

A week in security (January 20 – 26)

Last week on Malwarebytes Labs, we reported on a Ryuk ransomware attack on The Tampa Bay Times, a newspaper in Florida; unmasked an elaborate browser locking scheme behind the more advanced tech support operations that are currently active; and looked at the latest laws on regulating deepfakes...