PT-2023-8943 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev566-g50c2ab06f-master Description: The issue is related to a stack overflow in the hevc parse vps extension function, located in the media tools/av parsers.c file. This is caused by incorrect use of dynamic memory duri...

PT-2023-9173

Name of the Vulnerable Software and Affected Versions TP-Link Omada ER605 affected versions not specified Description This issue allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. The flaw exists within the handling of DNS names d...

SanDisk Security Installer Security Vulnerability

Western Digital SanDisk Security Installer is a security installer from Western Digital. A security vulnerability exists in SanDisk Security Installer that stems from the presence of multiple DLL search order hijacking vulnerabilities that could allow an attacker with local access rights to execu...

PT-2023-9172

Name of the Vulnerable Software and Affected Versions TP-Link Omada ER605 affected versions not specified Description The issue is related to the use of weak protection mechanisms in the cmxddnsd executable of the TP-Link Omada ER605 router's firmware. This allows a remote attacker to execute...

CVE-2023-29504

Uncontrolled search path element in some IntelR RealSenseTM Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29504

Uncontrolled search path element in some IntelR RealSenseTM Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path element in some IntelR RealSenseTM Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29504

Uncontrolled search path element in some IntelR RealSenseTM Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29504

Uncontrolled search path element in some IntelR RealSenseTM Dynamic Calibration software before version 2.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29504

CVE-2023-29504 concerns Intel® RealSense™ Dynamic Calibration software earlier than 2.13.1.0, where an Uncontrolled search path element could allow an authenticated local user to escalate privileges. The vulnerability affects the Intel RealSense Dynamic Calibration component and is triggered via ...

2023-11 Dynamic Cumulative Update for Windows 11 for ARM64-based Systems (KB5032192)

ComponentUpdate: A security issue has been identified in a Microsoft software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft...

kernel: ASoC: soc-compress: Reposition and add pcm_mutex

A locking issue was found in the ASoC ALSA SoC compressed audio subsystem in the Linux kernel. When DPCM Dynamic PCM compressed streams are started, several functions access resources without properly holding the card-pcmmutex lock. This triggers lock assertion warnings and can cause kernel panic...

kernel: drm/amd/display: Do not set DRR on pipe Commit

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Do not set DRR on pipe Commit WHY Writing to DRR registers such as OTGVTOTALMIN on the same frame as a pipe commit can cause underflow...

CVE-2023-42325

Cross Site Scripting XSS vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted url to the statuslogsfilterdynamic.php page...

CVE-2023-42325

Cross Site Scripting XSS vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted url to the statuslogsfilterdynamic.php page...

Weston Embedded uC-HTTP HTTP Server out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2023-1725 Weston Embedded uC-HTTP HTTP Server out-of-bounds write vulnerability November 14, 2023 CVE Number CVE-2023-24585 SUMMARY An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafte...

PT-2023-17453 · Suse · Suse

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to insufficient DRAM address validation in the System Management Unit SMU, which may allow an attacker to read or write from an...

Intel® RealSense™ Dynamic Calibration Software Advisory

Summary: A potential security vulnerability in some Intel® RealSense™ Dynamic Calibration software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-29504 Description: Uncontrolled search path...

ALSA-2023:7151 Moderate: python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

Intel RealSense Dynamic Calibration Security Vulnerability

Intel RealSense Dynamic Calibration is part of Intel RealSense technology from Intel Corporation USA and is used to calibrate cameras and depth sensors in real time. A security vulnerability exists in Intel RealSense Dynamic Calibration. An attacker exploiting this vulnerability could cause an...