CVE-2024-26132

CVE-2024-26132 (Element Android) affects Element Android versions 0.91.0–1.6.12. A malicious app on the same device can force Element Android to share files from the app’s private data directory to an arbitrary Matrix room. Databases in that directory are encrypted, reducing impact, but the data ...

CVE-2024-26131 Element Android Intent Redirection

Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redirection, allowing a third-party malicious application to start any internal activity by passing some extra parameters. Possible impact includes making Element Android display an...

CVE-2024-26131

Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redirection, allowing a third-party malicious application to start any internal activity by passing some extra parameters. Possible impact includes making Element Android display an...

CVE-2024-26131

CVE-2024-26131 – Element Android Intent Redirection Affected software: Element Android, versions 1.4.3–1.6.10. Root cause: An intent redirection vulnerability that allows a malicious third-party app to start internal activities by passing extra parameters. Impact (as stated): It could cause the a...

CVE-2024-26131 Element Android Intent Redirection

Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redirection, allowing a third-party malicious application to start any internal activity by passing some extra parameters. Possible impact includes making Element Android display an...

CVE-2024-26131 Element Android Intent Redirection

Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redirection, allowing a third-party malicious application to start any internal activity by passing some extra parameters. Possible impact includes making Element Android display an...

Design/Logic Flaw

A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8...

CVE-2024-1548

The Firefox browser and Thunderbird email client are vulnerable to a flaw where a website can use a dropdown select input element to obscure a fullscreen notification . This vulnerability could lead to user confusion and potential spoofing attacks . The affected versions include Firefox < 123 ...

CVE-2024-26581

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: skip end interval element from gc rbtree lazy gc on insert might collect an end interval element that has been just added in this transactions, skip end interval elements that are not yet active...

CVE-2023-52433 netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: skip sync GC for new elements in this transaction New elements in this transaction might expired before such transaction ends. Skip sync GC for such elements otherwise commit path might walk over an alrea...

Use After Free

Overview Affected versions of this package are vulnerable to Use After Free in the parsemetaelementcreate function. An attacker can execute arbitrary code or cause a denial of service condition by causing the vulnerable application to process a malicious DICOM image. Remediation A fix was pushed...

CVE-2024-24794

A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the vulnerable...

CVE-2024-24793

A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the vulnerable...

CVE-2024-24794: Use After Free

A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the vulnerable...

CVE-2024-26131: Improper Restriction of Communication Channel to Intended Endpoints

Element Android is an Android Matrix Client. Element Android version 1.4.3 through 1.6.10 is vulnerable to intent redirection, allowing a third-party malicious application to start any internal activity by passing some extra parameters. Possible impact includes making Element Android display an...

Imaging Data Commons libdicom Resource Management Error Vulnerability

Imaging Data Commons libdicom is the Imaging Data Commons C library for reading DICOM files. A resource management error vulnerability exists in Imaging Data Commons libdicom version 1.0.5, which stems from a post-release reuse vulnerability in the parsing of DICOM elements...

PT-2024-20563 · Libdicom · Libdicom

Name of the Vulnerable Software and Affected Versions: libdicom version 1.0.5 Description: A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom. This issue can be triggered by a specially crafted DICOM file, causing premature freeing o...

PT-2024-21290

Name of the Vulnerable Software and Affected Versions Element Android versions 1.4.3 through 1.6.10 Description The issue allows a third-party malicious application to start any internal activity by passing some extra parameters, potentially making Element Android display an arbitrary web page,...

Imaging Data Commons libdicom Resource Management Error Vulnerability

Imaging Data Commons libdicom is the Imaging Data Commons C library for reading DICOM files. A resource management error vulnerability exists in Imaging Data Commons libdicom version 1.0.5, which stems from a post-release reuse vulnerability in the parsing of DICOM elements...

CVE-2024-24793: Use After Free

A use-after-free vulnerability exists in the DICOM Element Parsing as implemented in Imaging Data Commons libdicom 1.0.5. A specially crafted DICOM file can cause premature freeing of memory that is used later. To trigger this vulnerability, an attacker would need to induce the vulnerable...