CVE-2019-10571

Snapshot of IB can lead to invalid address access due to missing check for size in the related function in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

CVE-2019-10571

CVE-2019-10571 targets Qualcomm Snapdragon family GPUs/graphics drivers (listed APQ/MSM/SDM devices) with a memory-access flaw: a missing size check in a function can lead to invalid address access. Public references show vendor advisories (Qualcomm November 2019 bulletin) and cross-links in Red ...

CVE-2019-10530

CVE-2019-10530 involves a kernel-level buffer overflow caused by a missing check for data truncation in Qualcomm Snapdragon kernel components. Affected are numerous Snapdragon families (Auto, Consumer IoT, Industrial IoT, Mobile, Voice & Music, Wearables) across many SDM and Snapdragon Snapdragon...

CVE-2019-10545

CVE-2019-10545 is a Qualcomm/ Snapdragon GPU-related vulnerability: a null pointer dereference in the kernel due to a missing LLC support check in the GPU. Affected are Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Mobile, and Snapdragon Voice ...

PT-2019-11939

Name of the Vulnerable Software and Affected Versions QDCM API versions affected versions not specified Description The issue is related to a possible integer overflow while multiplying two integers of 32 bit in the QDCM API of get display modes. This occurs because there is no check on the maxim...

Xmas Light Security Improves… a bit

We've looked at smart Xmas lights before; whilst they were vulnerable, there was no consequence to the hack other than making them flash in a different order! In 2018 we looked at the all-new Twinkly smart festive lights. We found a number of security issues, reported them to the vendor and to a...

Trend Micro Security 2020 Resource Management Error Vulnerability

Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. A resource management error vulnerability exists in Trend Micro Security Consumer 2020 version 16.x. The vulnerability arises from a networked system or product that improperly manages system resources...

CVE-2019-18190

Trend Micro Security Consumer 2020 v16.x is affected by a vulnerability in where null pointer dereference errors result in the crash of application, which could potentially lead to possible unsigned code execution under certain circumstances...

CVE-2019-18190

Trend Micro Security Consumer 2020 v16.x is affected by a vulnerability in where null pointer dereference errors result in the crash of application, which could potentially lead to possible unsigned code execution under certain circumstances...

Null pointer dereference

Trend Micro Security Consumer 2020 v16.x is affected by a vulnerability in where null pointer dereference errors result in the crash of application, which could potentially lead to possible unsigned code execution under certain circumstances...

CVE-2019-18190

Trend Micro Security (Consumer) 2020 (v16.x) is affected by a null pointer dereference vulnerability that can crash the application and potentially allow unsigned code execution under certain circumstances. The connected documents describe the issue as a null pointer dereference without detailing...

PT-2019-15263

Name of the Vulnerable Software and Affected Versions Trend Micro Security Consumer version 16.x Description The issue is related to null pointer dereference errors, which can cause the application to crash. This could potentially lead to unsigned code execution under certain circumstances...

CVE-2019-18190: NULL Pointer Dereference

Trend Micro Security Consumer 2020 v16.x is affected by a vulnerability in where null pointer dereference errors result in the crash of application, which could potentially lead to possible unsigned code execution under certain circumstances...

Facebook Alleges Company Infiltrated Thousands for Ad Fraud

Facebook has sued a Chinese company that it alleges used malware to compromise hundreds of thousands of user accounts – and then used them to run “deceptive ads” promoting counterfeit goods. The company in question is Hong Kong-based ILikeAd Media International Company Ltd., which was incorporate...

Top 5 Cybersecurity and Cybercrime Predictions for 2020

We distilled 30 independent reports dedicated to cybersecurity and cybercrime predictions for 2020 and compiled the top 5 most interesting findings and projections in this post. Compliance fatigue will spread among security professionals Being a source of ongoing controversy and debate, the...

CVE-2019-15628

Trend Micro Security Consumer 2020 v16.0.1221 and below is affected by a DLL hijacking vulnerability that could allow an attacker to use a specific service as an execution and/or persistence mechanism which could execute a malicious program each time the service is started...

CVE-2019-15628

CVE-2019-15628 affects Trend Micro Security (Consumer) 2020 (v16.0.1221 and below). The issue is a DLL hijacking vulnerability that could let an attacker leverage a specific service as an execution and/or persistence mechanism, causing a malicious program to run each time the service starts. Conn...

CVE-2019-15628

Trend Micro Security Consumer 2020 v16.0.1221 and below is affected by a DLL hijacking vulnerability that could allow an attacker to use a specific service as an execution and/or persistence mechanism which could execute a malicious program each time the service is started...

CVE-2019-15628: Untrusted Search Path

Trend Micro Security Consumer 2020 v16.0.1221 and below is affected by a DLL hijacking vulnerability that could allow an attacker to use a specific service as an execution and/or persistence mechanism which could execute a malicious program each time the service is started...

PT-2019-14306

Name of the Vulnerable Software and Affected Versions Trend Micro Security Consumer 2020 versions 16.0.1221 and below Description The issue allows an attacker to use a specific service as an execution and/or persistence mechanism, potentially executing a malicious program each time the service is...