The vulnerability of the jfif_encode() function in the FFJPEG library for encoding and decoding JPEG files allows a attacker to cause a service failure.

The vulnerability of the jfifencode function ffjpeg/src/jfif.c in the library for encoding and decoding JPEG files allows for the copying of buffers without checking the size of the input data. Exploiting this vulnerability could enable a remote attacker to cause service interruptions...

Tenda CP3 安全漏洞

Tenda CP3 is a smart camera from Tenda China. A security vulnerability exists in Tenda CP3 version V11.10.00.2211041355, which stems from the device's lack of support for integrity checking, and can be exploited by an attacker to update the device with a crafted firmware...

CVE-2022-48246

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2022-44433

In phoneEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2022-47494

In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

Out-of-bounds

In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

Out-of-bounds

In soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

UNISOC Chipsets 缓冲区错误漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in the UNISOC Chipsets camera driver module, which stems from a lack of boundary checking, resulting in out-of-bounds writes...

PT-2023-15368 · Unknown · Soter Service

Name of the Vulnerable Software and Affected Versions: soter service affected versions not specified Description: The issue is related to a possible out of bounds write in the soter service due to a missing bounds check. This could lead to a local denial of service and requires System execution...

CVE-2023-1011

The AI ChatBot WordPress plugin before 4.4.5 does not escape most of its settings before outputting them back in the dashboard, and does not have a proper CSRF check, allowing attackers to make a logged in admin set XSS payloads in them...

OpenJDK: missing check for slash characters in URI-to-path conversion (8298667)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploi...

OpenJDK: missing check for slash characters in URI-to-path conversion (8298667)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploi...

OpenJDK: missing check for slash characters in URI-to-path conversion (8298667)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploi...

Thunderbird: Revocation status of S/Mime recipient certificates was not checked

The Mozilla Foundation Security Advisory describes this flaw as: OCSP revocation status of recipient certificates was not checked when sending S/Mime encrypted email, and revoked certificates would be accepted. Thunderbird versions from 68 to 102.9.1 were affected by this bug...

CVE-2022-47465

In vdsp service, there is a missing permission check. This could lead to local denial of service in vdsp service...

PT-2023-15256 · Unisoc (Shanghai) Technologies Co. +1 · Sc9863A/Sc9832E/Sc7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Telecom service affected versions not specified Description: The issue is related to a missing permission check in the telecom service, which could lead to a local denial of service. Recommendations: At the moment, there is no information abo...

UNISOC Chipsets 安全漏洞

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking, which could lead to a local denial of service...

PT-2023-15343 · Unknown · Vdsp Service

Name of the Vulnerable Software and Affected Versions: vdsp service affected versions not specified Description: The issue is related to a missing permission check in the vdsp service, which could lead to a local denial of service in the vdsp service. Recommendations: At the moment, there is no...

Out-of-bounds

In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441821; Issue ID: ALPS07441821...

Out-of-bounds

In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310651; Issue ID: ALPS07292173...