CVE-2024-56455

CVE-2024-56455 affects the Huawei HarmonyOS 3D engine module, where the glTF model loader does not verify input parameters. This underlies a potential availability impact (per CVSS: LOCAL, LOW/LOW, NONE/NONE/A_HIGH). The exploitation status and specific vulnerable versions are not provided in the...

CVE-2024-56454

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56454

CVE-2024-56454 affects Huawei HarmonyOS, specifically the glTF model loader in the 3D engine module. The root cause is a failure to properly verify input parameters during glTF model loading, which can lead to an availability impact if exploited. The CVSS v3.1 vector indicates a local attack with...

CVE-2024-56453

Vulnerability of input parameters not being verified during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56452

The CVE-2024-56452 issue concerns the 3D engine module’s glTF model loading where input parameters are not verified. The vulnerability affects the loading path of glTF models via the 3D engine module and is described as impacting availability. The PT-2025-3296 entry confirms the affected componen...

CVE-2024-56451

Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56451

Integer overflow vulnerability during glTF model loading in the 3D engine module Impact: Successful exploitation of this vulnerability may affect availability...

CVE-2024-56451

CVE-2024-56451 describes an integer overflow during glTF model loading in the 3D engine module, with impact stated as availability. Multiple connected records corroborate the same issue across vendors/environments (Huawei/Red Hat/CNNVD/CIRCL/CVE feeds), identifying the affected component as the 3...

PT-2025-3295 · Unknown · 3D Engine Module

Name of the Vulnerable Software and Affected Versions: 3D engine module affected versions not specified Description: The issue is related to an integer overflow vulnerability that occurs during the loading of glTF models in the 3D engine module. Successful exploitation of this vulnerability may...

vivo MinigameCenter 访问控制错误漏洞

Vivo MinigameCenter is a command line interface for rapid development of Vivo mini-games from the Chinese company Vivo. A security vulnerability exists in vivo MinigameCenter versions prior to 2.3.5.0, which stems from an insufficient restriction on loading URLs and could lead to partial...

PT-2025-2044 · Unknown · Minigamecenter

Name of the Vulnerable Software and Affected Versions: MinigameCenter affected versions not specified Description: The MinigameCenter module has insufficient restrictions on loading URLs, which may lead to some information leakage. Recommendations: At the moment, there is no information about a...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from an integer overflow vulnerability in the 3D engine module loading gltf model. Successfu...

PT-2025-3299 · Unknown · 3D Engine Module

Name of the Vulnerable Software and Affected Versions: 3D engine module affected versions not specified Description: The issue concerns the lack of verification of input parameters during the loading of glTF models in the 3D engine module. Successful exploitation of this issue may impact...

PT-2025-2036 · Unknown · Health Module

Name of the Vulnerable Software and Affected Versions: Health module affected versions not specified Description: The health module has insufficient restrictions on loading URLs, which may lead to some information leakage. Recommendations: At the moment, there is no information about a newer...

PT-2025-3297 · Unknown · 3D Engine Module

Name of the Vulnerable Software and Affected Versions: 3D engine module affected versions not specified Description: The issue concerns the lack of verification of input parameters during the loading of glTF models in the 3D engine module. Successful exploitation of this issue may impact...

Vivo MinigameCenter 访问控制错误漏洞

Vivo MinigameCenter is a command line interface for rapid development of Vivo mini-games from the Chinese company Vivo. A security vulnerability exists in Vivo MinigameCenter versions prior to 2.2.4.0, which stems from an insufficient restriction on loading URLs and could lead to partial...

PT-2025-30825

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw where an attempt to ping a device that failed to load firmware can cause a null-pointer dereference. This occurs because the device does not successfully...

PT-2025-32526 · Keras +1 · Keras +1

Name of the Vulnerable Software and Affected Versions: Keras versions 3.0.0 through 3.10.0 Description: A safe mode bypass vulnerability exists in the Model.load model method. This allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted .keras model...

CVE-2024-53162

In the Linux kernel, the following vulnerability has been resolved: crypto: qat/qat4xxx - fix off by one in uofgetname The fwobjs array has "numobjs" elements so the needs to be = to prevent an out of bounds read. Mitigation To mitigate this issue, prevent module qat4xxx from being loaded. Please...

The vulnerability of software for monitoring, managing, and configuring VigorAP access points and VigorSwitches in the DrayTek VigorConnect local network lies in the inter-site requests that are forged. This allows a perpetrator to carry out a CSRF attack.

The vulnerability of software for monitoring, managing, and configuring VigorAP access points and VigorSwitches in the DrayTek VigorConnect local network is related to the unlimited loading of dangerous files. Exploiting this vulnerability can allow a remote attacker to…...