Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: ntb: ntbhwswitchtec: Fixed array-index-out-of-bounds access The number of MW LUTs depends on the NTB configuration and can be set to MAXMWS. This patch prevents invalid index out-of-bounds access to mwsizes. When an invalid acces...

CVE-2024-20896

Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...

CVE-2024-20896

Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...

CVE-2024-20896

CVE-2024-20896 describes a vulnerability in Samsung Mobile devices prior to the SMR Jul-2024 Release 1 where the configuration message uses implicit intents for sensitive communication. The root cause is the handling of implicit intents that can leak sensitive information to local attackers. The ...

CVE-2024-20896

Use of implicit intent for sensitive communication in Configuration message prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information...

CVE-2023-25078

Server or Console Station DoS due to heap overflow occurring during the handling of a specially crafted message for a specific configuration operation. See Honeywell Security Notification for recommendations on upgrading and versioning...

Honeywell Products 缓冲区错误漏洞

Honeywell Products is a family of products from Honeywell USA. A buffer error vulnerability exists in Honeywell Products that originates from a heap overflow during the processing of a specially crafted message for a specific configuration operation, resulting in a server or console station DoS...

CVE-2019-20771

An issue was discovered on LG mobile devices with Android OS 7.0, 7.1, 7.2, 8.0, 8.1, and 9.0 software. WapService allows unconfirmed configuration changes via a modified OMACP message. The LG ID is LVE-SMP-190006 August 2019...

TP-LINK TDDP Buffer Overflow Vulnerability

TP-LINK TDDP is a device commissioning protocol. A buffer overflow vulnerability exists in TP-LINK TDDP. An attacker can exploit the vulnerability to execute arbitrary code by sending a manually constructed "set configuration" message containing v1 packets to the TDDP service...