Lucene search
+L

57 matches found

Positive Technologies
Positive Technologies
added 2024/09/13 12:00 a.m.17 views

PT-2024-30946 · Google · Android

Name of the Vulnerable Software and Affected Versions: Google Android affected versions not specified Description: The issue is caused by a logic error in the code, specifically in the ppmp protect mfcfw buf function of the code/drm fw.c file. This error can lead to memory corruption, resulting i...

7.8CVSS6.6AI score0.00076EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2024/09/02 10:22 a.m.31 views

CVE-2024-23364 Buffer Over-read in WLAN Firmware

Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element IE of a beacon frame that is received from over-the-air OTA...

7.5CVSS0.00297EPSS
SaveExploits0References1
OSV
OSV
added 2024/08/17 9:15 a.m.9 views

UBUNTU-CVE-2024-42313

In the Linux kernel, the following vulnerability has been resolved: media: venus: fix use after free in vdecclose There appears to be a possible use after free with vdecclose. The firmware will add buffer release work to the work queue through HFI callbacks as a normal part of decoding. Randomly...

7.8CVSS6.3AI score0.0023EPSS
SaveExploits0References27
CVE
CVE
added 2024/07/29 2:31 p.m.194 views

CVE-2024-41039

CVE-2024-41039 (Linux kernel) : The vulnerability is resolved by fixing overflow checks when parsing wmfw headers in firmware handling. The patch splits the length check into three separate verifications for wmfw_header, wmfw_adsp?_sizes, and wmfw_footer, addressing cases where ADSP2 and Halo Cor...

7.8CVSS7.2AI score0.00288EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2024/07/29 2:31 p.m.212 views

CVE-2024-41038

CVE-2024-41038 affects the Linux kernel firmware path for cs_dsp handling of V2 WMFW headers. The issue stems from variable-length strings in the V2 algorithm header, which can shift field positions and header length, creating a risk that some fields may overflow the available firmware data buffe...

7.8CVSS6.7AI score0.0031EPSS
SaveExploits0References5Affected Software1
RedHat Linux
RedHat Linux
added 2024/02/28 5:32 a.m.48 views

Important: Red Hat Security Advisory: edk2 security update

An update for edk2 is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as havi...

8.8CVSS7.1AI score0.01223EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/10 12:00 a.m.14 views

Intel NUC Security Vulnerability

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in the Intel NUC that stems from incorrect buffer limits in the BIOS firmware. It could allow a privileged user to potentially enable privileged escalation via local access...

7.8CVSS6.7AI score0.00149EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2023/11/07 9:03 a.m.15 views

kernel: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmfcpreinitdcmds This patch fixes a stack-out-of-bounds read in brcmfmac that occurs when 'buf' that is not null-terminated is passed as an argument of strsep in...

7.8CVSS6.8AI score0.00164EPSS
SaveExploits0References5
NVD
NVD
added 2023/08/14 4:15 a.m.32 views

CVE-2023-3261

The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful exploitation could cause denial of service or unexpected behavior with respect to all interactions relying on the targeted vulnerable binary...

7.5CVSS7.7AI score0.00784EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/05/10 1:17 p.m.13 views

CVE-2023-22661

Buffer overflow in some IntelR Server Board BMC firmware before version 2.90 may allow a privileged user to enable escalation of privilege via local access...

8.2CVSS8.3AI score0.00205EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/04/24 12:00 a.m.14 views

CVE-2023-22915

A buffer overflow vulnerability in the “fbwififorward.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, USG FLEX 50W firmware versions 4.30 through 5.35, USG20W-VPN firmware versions 4.30 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could...

7.5CVSS7.8AI score0.01054EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/12/28 12:00 a.m.15 views

PT-2022-6525 · Tp Link · Tp-Link Archer Ax21

Name of the Vulnerable Software and Affected Versions: TP-Link Archer AX21 AX1800 affected versions not specified Description: The issue is related to a buffer overflow vulnerability in the TP-Link AX1800 router's firmware, allowing remote attackers to execute arbitrary code on affected...

8.8CVSS8.2AI score0.00712EPSS
SaveExploits0References5
attackerkb
attackerkb
added 2021/02/17 2:15 p.m.5 views

CVE-2020-24498

Buffer overflow in the firmware for IntelR E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged user to potentially enable denial of service via local access...

4.4CVSS5.4AI score0.00298EPSS
SaveExploits0References2
attackerkb
attackerkb
added 2021/02/17 2:15 p.m.5 views

CVE-2020-24482

Improper buffer restrictions in firmware for IntelR 7360 Cell Modem before UDE version 9.4.370 may allow unauthenticated user to potentially enable denial of service via network access...

7.5CVSS7.6AI score0.01117EPSS
SaveExploits0References2
Prion
Prion
added 2020/11/12 6:15 p.m.25 views

Buffer overflow

Improper buffer restrictions in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

4.6CVSS6.8AI score0.00312EPSS
SaveExploits0References3
NVD
NVD
added 2019/11/13 4:15 p.m.27 views

CVE-2019-18931

Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer EIP control via crafted GET/POST parameters...

9CVSS8.7AI score0.02203EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2018/12/31 4:00 p.m.8 views

CVE-2018-18601

The TKsetdeviceModelreqhandle function in the cloud communication component in Guardzilla GZ621W devices with firmware 0.5.1.4 has a Buffer Overflow...

8.1AI score0.01154EPSS
SaveExploits0References1
Rows per page
Query Builder