16126 matches found
Amazon Linux 2 : python3 (ALAS-2025-2743)
The version of python3 installed on the remote host is prior to 3.7.16-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2743 advisory. CPython 3.9 and earlier doesn't disallow configuring an empty list for SSLContext.setnpnprotocols which is an invalid value for th...
Medium: python3
Issue Overview: CPython 3.9 and earlier doesn't disallow configuring an empty list for SSLContext.setnpnprotocols which is an invalid value for the underlying OpenSSL API. This results in a buffer over-read when NPN is used see CVE-2024-5535 for OpenSSL. This vulnerability is of low severity due ...
Amazon Linux 2 : python (ALAS-2025-2744)
The version of python installed on the remote host is prior to 2.7.18-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2744 advisory. CPython 3.9 and earlier doesn't disallow configuring an empty list for SSLContext.setnpnprotocols which is an invalid value for the...
CVE-2024-56946
Denial of service in DNS-over-QUIC in Technitium DNS Server = v13.2.2 allows remote attackers to permanently stop the server from accepting new DNS-over-QUIC connections by triggering unhandled exceptions in listener threads...
CVE-2024-49839
CVE-2024-49839 - Summary (mode C) Root cause: Memory corruption during management frame processing caused by a mismatch in the T2LM information element, affecting Qualcomm WLAN/capability elements. What is affected: Qualcomm chipsets with WLAN functionality that process management frames incorpor...
CVE-2024-49839 Buffer Over-read in WLAN Host Cmn
Memory corruption during management frame processing due to mismatch in T2LM info element...
CVE-2024-49839 Buffer Over-read in WLAN Host Cmn
Memory corruption during management frame processing due to mismatch in T2LM info element...
CVE-2024-49838 Buffer Over-read in WLAN HOST
Information disclosure while parsing the OCI IE with invalid length...
CVE-2024-49838 Buffer Over-read in WLAN HOST
Information disclosure while parsing the OCI IE with invalid length...
CVE-2024-49838
CVE-2024-49838 is an information disclosure vulnerability in Qualcomm WLAN components (Qualcomm closed- and open-source areas) caused by parsing an OCI IE with invalid length. Connected sources indicate this CVE is tracked in Qualcomm security advisories and appears in the Android March 2025 bull...
CVE-2024-38417 Buffer Over-read in Automotive Multimedia
Information disclosure while processing IO control commands...
CVE-2024-38417 Buffer Over-read in Automotive Multimedia
Information disclosure while processing IO control commands...
CVE-2024-38417
CVE-2024-38417 concerns information disclosure during IOCTL processing in Qualcomm embedded platform microcode used in Qualcomm chipsets (notably automotive multimedia). The root cause is a memory issue (buffer over-read) when handling IO control commands, enabling potential leakage of protected ...
CVE-2024-38416 Buffer Over-read in Audio
Information disclosure during audio playback...
CVE-2024-38416 Buffer Over-read in Audio
Information disclosure during audio playback...
CVE-2024-38416
CVE-2024-38416 is a buffer over-read vulnerability in audio processing on Qualcomm chipsets that leads to information disclosure during audio playback (local access; no explicit exploit details in the provided sources). The affected component is audio playback; root cause stated as a buffer over-...
CVE-2024-38414 Buffer Over-read in Computer Vision
Information disclosure while processing information on firmware image during core initialization...
CVE-2024-38414 Buffer Over-read in Computer Vision
Information disclosure while processing information on firmware image during core initialization...
CVE-2024-38414
CVE-2024-38414 affects Qualcomm chipsets. The issue is information disclosure that occurs while processing firmware image information during core initialization, indicating a confidentiality impact. CVSS metrics in the entry show a high confidentiality impact (C/H) with local attack vector and lo...