Lucene search
K

23 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:20 a.m.1 views

CVE-2024-32893

In s5e9865mifsetrate of exynosdvfs.c, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

8.1CVSS5.5AI score0.0012EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:36 a.m.5 views

CVE-2019-2306

Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206,...

7.8CVSS9.4AI score0.00108EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/13 9:1 p.m.16 views

CVE-2024-32893

In s5e9865mifsetrate of exynosdvfs.c, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score0.0012EPSS
Exploits0References1
CVE
CVE
added 2024/06/13 9:1 p.m.74 views

CVE-2024-32893

The CVE-2024-32893 issue affects the Exynos DVFS code path (exynos_dvfs.c) specifically in _s5e9865_mif_set_rate. The flaw is an out-of-bounds read caused by improper casting, leading to local information disclosure without requiring user interaction. Multiple connected sources (including RH/Red ...

8.1CVSS5.9AI score0.0012EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/06/01 12:0 a.m.2 views

PUB-A-322223643

In s5e9865mifsetrate of exynosdvfs.c, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

8.1CVSS6.4AI score0.0012EPSS
Exploits0References1
Veracode
Veracode
added 2023/06/16 10:26 a.m.244 views

Integer Overflow

ImageMagick is vulnerable to Integer Overflow. The vulnerability exists due to improper casting of double to sizet which allows an attacker to cause an application crash...

5.5CVSS6.6AI score0.00084EPSS
Exploits1References10Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/07/06 2:15 p.m.2 views

CVE-2022-21786

In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558822; Issue ID: ALPS06558822...

6.7CVSS6.8AI score0.00016EPSS
Exploits0References2
OSV
OSV
added 2022/07/06 2:15 p.m.0 views

CVE-2022-21786

In audio DSP, there is a possible memory corruption due to improper casting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06558822; Issue ID: ALPS06558822...

6.7CVSS5.9AI score
Exploits0References1
OSV
OSV
added 2021/12/01 12:0 a.m.2 views

PUB-A-193033243

In setTransactionState of SurfaceFlinger, there is possible arbitrary code execution in a privileged process due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS8AI score0.00015EPSS
Exploits0References2
Prion
Prion
added 2020/10/14 1:15 p.m.12 views

Input validation

In SurfaceFlinger::createLayer of SurfaceFlinger.cpp, there is a possible arbitrary code execution due to improper casting. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

4.6CVSS7.9AI score0.00015EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/12/06 10:40 p.m.188 views

CVE-2019-2227

CVE-2019-2227 affects Android devices via a DeepCopy bug in btif_av.cc that can trigger an out-of-bounds read, enabling remote information disclosure over Bluetooth without user interaction. The entry covers Android 9 and 10, with impact described as information disclosure (confidentiality) and a...

6.5CVSS6.1AI score0.00439EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2019/09/27 7:15 p.m.0 views

CVE-2019-9403

In cn-cbor, there is a possible out of bounds read due to improper casting. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113512324...

6.5CVSS7AI score
Exploits0References1
CVE
CVE
added 2019/09/27 6:5 p.m.39 views

CVE-2019-9403

CVE-2019-9403: In cn-cbor, an out-of-bounds read due to improper casting could lead to remote information disclosure on Android 10. Impact is information disclosure with no privileges gained; exploitation requires user interaction. CVSS2 base 4.3 (PARTIAL confidentiality impact) and CVSS3.1 base ...

6.5CVSS6.5AI score0.00244EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2019/07/25 5:15 p.m.16 views

CVE-2019-2306

Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206,...

7.8CVSS8.3AI score0.00108EPSS
Exploits0References1
Cvelist
Cvelist
added 2019/07/25 4:33 p.m.16 views

CVE-2019-2306

Improper casting of structure while handling the buffer leads to out of bound read in display in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in MDM9150, MDM9206,...

8.3AI score0.00108EPSS
Exploits0References1
CVE
CVE
added 2019/07/25 4:33 p.m.47 views

CVE-2019-2306

CVE-2019-2306 is described as: an improper casting of a structure while handling a buffer causes an out-of-bounds read in the display code across Snapdragon platforms (Snapdragon Auto, Connectivity, Consumer IoT, Industrial IoT, IoT, Mobile, Voice & Music, Wearables) on multiple SoCs (e.g., SD se...

7.8CVSS7.7AI score0.00108EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2018/10/29 12:29 p.m.4 views

CVE-2018-18710

An issue was discovered in the Linux kernel through 4.19. An information leak in cdromioctlselectdisc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and...

5.5CVSS5.9AI score
Exploits0References14
Prion
Prion
added 2017/10/27 5:29 a.m.13 views

Memory corruption

An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting...

6.8CVSS8.6AI score0.00512EPSS
Exploits0References5Affected Software4
OSV
OSV
added 2017/10/27 5:29 a.m.0 views

CVE-2017-5052

An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting...

8.8CVSS7.3AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2017/10/27 5:29 a.m.29 views

CVE-2017-5052

An incorrect assumption about block structure in Blink in Google Chrome prior to 57.0.2987.133 for Mac, Windows, and Linux, and 57.0.2987.132 for Android, allowed a remote attacker to potentially exploit memory corruption via a crafted HTML page that triggers improper casting...

8.8CVSS7.2AI score0.00512EPSS
Exploits0References2
Rows per page
Query Builder