CVE-2023-51452

A Improper Input Validation issue affecting the v2sdkservice running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missing input size check in the pullfilev2proc function implemented in the libv2sdk.s...

CVE-2023-51456

A Improper Input Validation issue affecting the v2sdkservice running on a set of DJI drone devices on the port 10000 could allow an attacker to trigger an out-of-bound read/write into the process memory through a crafted payload due to a missing input sanity check in the v2packarraytomsg function...

CVE-2023-51456

A Improper Input Validation issue affecting the v2sdkservice running on a set of DJI drone devices on the port 10000 could allow an attacker to trigger an out-of-bound read/write into the process memory through a crafted payload due to a missing input sanity check in the v2packarraytomsg function...

CVE-2023-51453

A Improper Input Validation issue affecting the v2sdkservice running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missing input size check in the processpushfile function implemented in the libv2sdk....

CVE-2023-51453

A Improper Input Validation issue affecting the v2sdkservice running on a set of DJI drone devices on the port 10000 could allow an attacker to cause a crash of the service through a crafted payload triggering a missing input size check in the processpushfile function implemented in the libv2sdk....

CVE-2023-51453

CVE-2023-51453 : The vulnerability is an improper input validation in the v2_sdk_service used by DJI drone devices (ports 10000) that can crash the service via a crafted payload due to a missing input size check in the process_push_file function of the libv2_sdk.so library. Affected models and ve...

CVE-2023-51452

The CVE-2023-51452 issue is an Improper Input Validation in DJI’s v2_sdk_service (listening on port 10000) that can crash the service via a crafted payload due to a missing input size check in the pull_file_v2_proc function within libv2_sdk.so used by dji_vtwo_sdk. Affected DJI devices and firmwa...

CVE-2024-29074

in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through improper input...

CVE-2024-29074

in OpenHarmony v3.2.4 and prior versions allow a local attacker arbitrary code execution in any apps through improper input...

CVE-2024-28226

in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input...

CVE-2024-28226

in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input...

CVE-2024-28226 Fs has an improper input validation vulnerability

in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input...

CVE-2024-29074

OpenHarmony v3.2.4 and earlier are affected by CVE-2024-29074, which allows a local attacker to execute arbitrary code in any app due to improper input validation. This is a local, high-severity issue with potential full control over targeted apps as indicated by CVSS metrics (AV:L, AC:L, PR:L, U...

CVE-2024-20842

Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2024-20842

Improper Input Validation vulnerability in handling apdu of libsec-ril prior to SMR Apr-2024 Release 1 allows local privileged attackers to write out-of-bounds memory...

PT-2024-18751 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Apr-2024 Release 1 Description: The issue is related to improper input validation in handling apdu, allowing local privileged attackers to write out-of-bounds memory. Recommendations: For versions prior to SMR...

PT-2024-18757 · Unknown · Libsdffextractor

Name of the Vulnerable Software and Affected Versions: libsdffextractor versions prior to SMR Apr-2024 Release 1 Description: The issue is related to an Improper Input Validation vulnerability in the text parsing implementation. This allows local attackers to write out-of-bounds memory...

PT-2024-22344 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 4.0.0 Description: The issue allows a remote attacker to cause a Denial of Service DOS through improper input. Recommendations: For versions prior to 4.0.0, update to version 4.0.0 or later to resolve the issue...

PT-2024-14131 · Dji · Dji Vtwo Sdk +9

Name of the Vulnerable Software and Affected Versions: DJI Mavic 3 Pro versions prior to v01.01.0300 DJI Mavic 3 versions prior to v01.00.1200 DJI Mavic 3 Classic versions prior to v01.00.0500 DJI Mavic 3 Enterprise versions prior to v07.01.10.03 DJI Matrice 300 versions prior to v57.00.01.00 DJI...

PT-2024-22700 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 3.2.4 Description: The issue allows a local attacker to execute arbitrary code in any apps through improper input. Recommendations: For versions prior to 3.2.4, update to a version newer than 3.2.4 to resolve the...