20139 matches found
CVE-2026-21382
CVE-2026-21382 describes a memory corruption issue in a Power Management IC when handling power management requests due to improperly sized input/output buffers. CVSS 3.1 base score 7.8 (HIGH), with LOCAL attack vector, LOW attack complexity, LOW privileges required, and HIGH impact to confidenti...
CVE-2026-21378
The CVE-2026-21378 entry describes a memory corruption vulnerability in a camera sensor driver triggered when IOCTLs access an output buffer without validating its size. Affected component is the camera sensor driver’s IOCTL handling (output buffer). Root cause: insufficient validation of the des...
CVE-2026-21378 Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver...
CVE-2026-21378 Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver...
CVE-2026-21376
CVE-2026-21376 : Memory corruption occurs when an output buffer is accessed during IOCTL processing in a camera sensor driver without validating its size. Root cause is missing validation of the output buffer size. Documented impact includes high confidentiality, integrity, and availability conce...
CVE-2026-21376 Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver...
CVE-2026-21376 Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing in a camera sensor driver...
CVE-2026-21375 Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing...
CVE-2026-21375
CVE-2026-21375 describes memory corruption when an output buffer is accessed without validating its size during IOCTL processing. The issue is reported in Qualcomm context, with CVSS 3.1 base score 7.8 (HIGH) and local, low exploit complexity, no user interaction required. Descriptions across NVD...
CVE-2026-21375 Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing...
CVE-2026-21373
CVE-2026-21373 describes memory corruption in the camera subsystem occurring when an IOCTL path accesses an output buffer without validating its size. This leads to a potential buffer over-read/overflow, as indicated by the NVD entry. The CVSS v3.1 vector shows a HIGH impact with local attack vec...
CVE-2026-21373 Buffer Over-read in Camera
Memory Corruption when accessing an output buffer without validating its size during IOCTL processing...
CVE-2026-21372
CVE-2026-21372 describes memory corruption/heap-based overflow in a Power Management IC when handling IOCTLs with invalid buffer sizes during memcpy. The vulnerability is detailed across sources as a memory corruption issue triggered by malformed IOCTL buffer lengths, with impact on confidentiali...
CVE-2026-21372 Heap-Based Buffer Overflow in Power Management IC
Memory Corruption when sending IOCTL requests with invalid buffer sizes during memcpy operations...
CVE-2026-21371 Buffer Over-read in WinBlast Driver
Memory Corruption when retrieving output buffer with insufficient size validation...
CVE-2026-21371
CVE-2026-21371 is described as memory corruption due to insufficient size validation when retrieving an output buffer. The CVELIST entry identifies the affected component as the WinBlast Driver and labels the issue as a buffer over-read. The NVD entry repeats the same description. The provided me...
CVE-2026-34380 OpenEXR has a signed integer overflow (undefined behavior) in undo_pxr24_impl may allow bounds-check bypass in PXR24 decompression
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. From 3.2.0 to before 3.2.7, 3.3.9, and 3.4.9, a signed integer overflow exists in undopxr24impl in src/lib/OpenEXRCore/internalpxr24.c at line 377. The...
CVE-2026-33404
Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level ad and internet tracker blocking application. From 6.0 to before 6.5, client hostnames and IP addresses from the FTL database are rendered into the DOM without escaping in network.js Network page and charts.js/index....
Qualcomm Chipsets 安全漏洞
Qualcomm Chipsets are a series of chipset developed by Qualcomm Incorporation. There is a security vulnerability in Qualcomm Chipsets, which stems from memory corruption that occurs during the preprocessing of IOCTL requests in JPEG drivers...
