CVE-2024-53031 Improper Input Validation in Automotive OS Platform

Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine...

CVE-2024-53031 Improper Input Validation in Automotive OS Platform

Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine...

CVE-2024-53031

CVE-2024-53031 affects Qualcomm chipsets; memory corruption occurs when reading a type value from a buffer controlled by the Guest Virtual Machine. Root cause is described as improper input handling/validation in several sources. Impact is high (confidentiality, integrity, and availability). Loca...

CVE-2024-53029 Improper Input Validation in Automotive OS Platform

Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine...

CVE-2024-53029 Improper Input Validation in Automotive OS Platform

Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine...

CVE-2024-53029

CVE-2024-53029 affects Qualcomm-based systems running an Automotive OS Platform. The issue is memory corruption caused by reading a value from a buffer controlled by a Guest Virtual Machine (VM). Connected sources corroborate that the vulnerability stems from improper handling of guest-controlled...

CVE-2024-53022 Improper Input Validation in Automotive OS Platform

Memory corruption may occur during communication between primary and guest VM...

CVE-2024-53022

CVE-2024-53022 concerns Qualcomm chipset families. The issue is memory corruption that arises during communication between the primary VM and a guest VM, caused by an underlying fault in the VM communication path. Affected software/hardware: Qualcomm chipsets with virtualization features where pr...

CVE-2024-43056 Buffer Over-read in Hypervisor

Transient DOS during hypervisor virtual I/O operation in a virtual machine...

CVE-2024-43056

CVE-2024-43056 describes a transient denial-of-service during hypervisor virtual I/O operations in Qualcomm chipset environments. The linked CVE listings emphasize that the issue manifests as a DOS in a virtual machine due to a hypervisor I/O path condition (buffer over-read is noted in CVE listi...

Malicious code in self-focused (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fc8d0e4fa0bf898e5e8b1a5e9dbcd0e9cf50b0e5ca606345195e6f0c5a50dffb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that stems from memory corruption when the keyboard virtual device interacts with the guest VM...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when reading values from a buffer controlled by Guest Virtual Machine...

The vulnerability of the Azure Network Watcher VM Extension for Windows operating systems arises from an improper definition of the link before accessing a file. This allows attackers to escalate their privileges.

The vulnerability of the Azure Network Watcher VM Extension for Windows operating systems stems from an incorrect definition of the link before accessing the file. Exploiting this vulnerability can allow attackers to increase their privileges...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a transient denial of service during hypervisor virtual I/O operations in a virtual machine...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets, which stems from a memory corruption when reading a type value from a buffer controlled by Guest Virtual Machine...

Advisory ROSA-SA-2025-2753

Software: openssl 1.1.1k OS: ROSA Virtualization 2.1 packageevrstring: openssl-1.1.1.1k-12.0.1.rv3 CVE-ID: CVE-2020-25659 BDU-ID: 2022-05647 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the python-cryptography package of the Python programming language interpreter is related to RSA key management...

Malicious code in issuecheck (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 032fb9205316d8ec957eff52f5df8ac183a90ea9e297a59ffa97c13f85a8d7d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EPSS Decoded: An Examination & Comparison to CVSS

Running short on time but still want to stay in the know? Well, we've got you covered! We've condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Click right here to hear it all! A Paradigm Shift in Vulnerability Management Vulnerability...

RadiAnt DICOM Viewer (CVE-2025-1001)

Medixant RadiAnt DICOM Viewer is vulnerable due to failure of the update mechanism to verify the update server's certificate which could allow an attacker to alter network traffic and carry out a machine-in-the-middle attack MITM. An attacker could modify the server's response and deliver a...