PT-2021-16607

Name of the Vulnerable Software and Affected Versions: RKP versions prior to SMR JUN-2021 Release 1 Description: An improper address validation in RKP allows local attackers to create executable kernel pages outside the code area, assuming EL1 is compromised. Recommendations: For versions prior t...

PT-2021-16602

Name of the Vulnerable Software and Affected Versions: RKP api versions prior to SMR JUN-2021 Release 1 Description: The issue is related to improper address validation in the RKP api, allowing root privileged local attackers to write to read-only kernel memory. This can be exploited by local...

CVE-2021-25415: Improper Control of Generation of Code

Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to remap EL2 memory as writable...

CVE-2021-25411: Improper Control of Generation of Code

Improper address validation vulnerability in RKP api prior to SMR JUN-2021 Release 1 allows root privileged local attackers to write read-only kernel memory...

PT-2021-16606

Name of the Vulnerable Software and Affected Versions: RKP prior to SMR JUN-2021 Release 1 Description: An improper address validation in RKP allows local attackers to remap EL2 memory as writable, assuming EL1 is compromised. This issue enables attackers to potentially escalate privileges or...

CVE-2021-22191

Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file...

CVE-2021-25339

Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to corrupt EL2 memory...

CVE-2021-25339

The CVE-2021-25339 entry relates to Samsung mobile devices with an improper address validation in HArx. Root cause stated: incorrect address validation can allow memory corruption in EL2 when the kernel is compromised. Affected scope is Samsung mobile devices prior to SMR Mar-2021 Release 1; expl...

CVE-2021-25339

Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to corrupt EL2 memory...

PT-2021-16532

Name of the Vulnerable Software and Affected Versions: Samsung mobile devices versions prior to SMR Mar-2021 Release 1 Description: The issue is related to improper address validation in HArx, which allows an attacker, given a compromised kernel, to corrupt EL2 memory. Recommendations: For Samsun...

CVE-2021-25339: Improper Input Validation

Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to corrupt EL2 memory...

Cellopoint Cellos Remote Command Execution Vulnerability

Cellos is a Linux-based operating system optimized for mail security and mail scanning performance by Cellopoint. A remote command execution vulnerability exists in Cellopoint Cellos 4.1.10 Build 20190922. The vulnerability stems from the product's failure to properly validate incoming URLs, whic...

CVE-2018-20026

Improper Communication Address Filtering exists in CODESYS V3 products versions prior V3.5.14.0...

PT-2019-9970 · 3S Smart Software Solutions · Codesys V3

Name of the Vulnerable Software and Affected Versions: CODESYS V3 products versions prior to V3.5.14.0 Description: The issue is related to improper communication address filtering. Recommendations: For versions prior to V3.5.14.0, update to version V3.5.14.0 or later to resolve the issue...

Microsoft Windows EngLockSurface Time-Of-Check Time-Of-Use Race Condition Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Integer overflow

In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation...

CVE-2014-9932: Integer Overflow or Wraparound

In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation...

CVE-2014-9932

In TrustZone, an integer overflow vulnerability can potentially occur in all Android releases from CAF using the Linux kernel due to an improper address range computation...