PT-2026-107386

Name of the Vulnerable Software and Affected Versions wolfSSH affected versions not specified Description wolfSSH fails to validate that the ECDSA curve identifier in a KEXDH REPLY host key blob matches the algorithm negotiated during key exchange. In the ParseECCPubKey function, the blob's...

EUVD-2024-19174

Malicious code in bioql PyPI...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: KEYS: Trusted: dcp: Fix improper use of sg with CONFIGVMAPSTACK=y When CONFIGVMAPSTACK=y is enabled, DCP-trusted keys may crash during the encoding and decryption of the blob encryption key via the DCP crypto driver. This issue...

CVE-2018-13907

While deserializing any key blob during key operations, buffer overflow could occur, exposing partial key information if any key operations are invoked in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdrago...

CVE-2024-21465

Memory corruption while processing key blob passed by the user...

CVE-2024-50281: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: dcp: fix NULL dereference in AEAD crypto operation When sealing or unsealing a key blob we currently do not wait for the AEAD cipher operation to finish and simply return after submitting the request. If there is...

CVE-2024-21465

Memory corruption while processing key blob passed by the user...

CVE-2024-21465 Buffer Over-read in Trusted Execution Environment

Memory corruption while processing key blob passed by the user...

CVE-2024-21465 Buffer Over-read in Trusted Execution Environment

Memory corruption while processing key blob passed by the user...

CVE-2024-21465

CVE-2024-21465 : Memory corruption while processing a key blob passed by the user. Documents indicate this affects Qualcomm closed‑source components and is rated High impact (C:H, I:H, A:H) with LOCAL attacker access and LOW privileges required, no user interaction. The CVSS metrics imply local e...

PT-2024-5348 · Qualcomm · Qualcomm Microprogram +1

Name of the Vulnerable Software and Affected Versions: Qualcomm embedded platform software affected versions not specified Description: The issue is related to memory corruption that occurs while processing a key blob passed by the user. This can potentially allow an attacker to execute arbitrary...

CVE-2018-13907

The CVE-2018-13907 entry describes a vulnerability in Qualcomm/Snapdragon components where deserializing a key blob during key operations can trigger a buffer overflow, potentially exposing partial key information across a wide range of Snapdragon devices (IPQ4019, IPQ8074, MDM9... and many SD/So...