138 matches found
Qualcomm chip security vulnerabilities
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is often manufactured on the surface of semiconductor wafers. The Qualcomm chip has a security vulnerability that stems from a modem memory...
CVE-2022-39063
When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session Establishment Response. Once UPF receives a request, it gets the fteidlen from incoming message, and then uses it to copy data from incoming message to struct fteid without...
CVE-2022-22106
Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto...
CVE-2022-22106
Memory corruption in multimedia due to improper length check while copying the data in Snapdragon Auto...
Qualcomm Multimedia security vulnerabilities
Qualcomm Multimedia is a camera driver component from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Multimedia that stems from memory corruption in Multimedia due to incorrect length checking when copying data...
CVE-2021-32970
Data can be copied without validation in the built-in web server in Moxa NPort IAW5000A-I/O series firmware version 2.2 or earlier, which may allow a remote attacker to cause denial-of-service conditions...
PT-2022-10168
Name of the Vulnerable Software and Affected Versions Moxa NPort IAW5000A-I/O series firmware versions prior to 2.3 Description The issue allows data to be copied without validation in the built-in web server, potentially enabling a remote attacker to cause denial-of-service conditions...
GHSA-Q85F-69Q7-55H2 Uninitialized variable access in Tensorflow
Impact The implementation of AssignOp can result in copying unitialized data to a new tensor. This later results in undefined behavior. The implementation has a check that the left hand side of the assignment is initialized to minimize number of allocations, but does not check that the right hand...
IBM DB2 Root Privilege Code Execution
The vulnerability of the IBM DB2 database management system is related to the lack of a mechanism for checking the size of copied data. Exploiting this vulnerability could allow an attacker to execute arbitrary code with root privileges...
CVE-2020-11293
Out of bound read can happen in Widevine TA while copying data to buffer from user data due to lack of check of buffer length received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon...
CVE-2020-27250
In SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 Revision 1014, a specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-base...
Multiple Qualcomm Products Input Validation Error Vulnerability
A Qualcomm chip is a chip from Qualcomm Incorporated USA. It is a way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. An input validation error vulnerability exists in multiple Qualcomm...
Buffer Error Vulnerability in Multiple Qualcomm Products
A Qualcomm chip is a chip from Qualcomm Incorporated USA. It is a way of miniaturizing circuits mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. A buffer error vulnerability exists in multiple Qualcomm products, which...
Libslirp TCP-IP Emulator Heap Buffer Overflow DoS
The vulnerability of the tcpsubr.c component in the TCP-IP emulator library Libslirp is related to a lack of mechanisms for checking the size of copied data. Exploiting this vulnerability allows an attacker operating remotely to gain access to confidential data, compromise its integrity, and caus...
Code injection
Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins controller to job workspaces, allowing attackers with Job/Configure permission to read arbitrary files on the Jenkins controller...
CVE-2020-2275
The CVE-2020-2275 entry concerns the Jenkins Copy data to workspace Plugin, versions 1.0 and earlier. The vulnerability arises because the plugin does not restrict which directories can be copied from the Jenkins controller to job workspaces, enabling an attacker with Job/Configure permission to ...
CVE-2019-10556
CVE-2019-10556: The issue is a missing length check when copying data from kernel space to user space in Qualcomm Snapdragon components, leading to a buffer overflow. Affected devices span Snapdragon Auto, Compute, CE Connectivity, IOT, Industrial IOT, Mobile, Voice & Music, Wearables (list inclu...
Elfutils elf_cvt_note() DoS
The vulnerability of the elfcvtnote function in the Elfutils tool for modifying and analyzing binary ELF files is related to an attempt to copy negative data volumes. Exploiting this vulnerability could allow a perpetrator to cause service failures...
PT-2019-16002
Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a buffer overflow in the btif dm data copy function of btif core.cc, which could lead to a possible out of bounds write. This might result in remote code execution without...
Google Android Buffer Overflow Vulnerability (CNVD-2019-10464)
Google Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A buffer overflow vulnerability exists in the 'btifdmdatacopy' function of the btifcore.cc file in Google Android, which can be exploited by remote attackers to execute cod...