Important: Red Hat Security Advisory: Control plane Operators for RHOSO 18.0.3 (Feature Release 1) security update

Control plane Operators for RHOSO 18.0.3 Feature Release 1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link...

CVE-2024-49402

Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles...

CVE-2024-34680

Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information...

CVE-2024-34678

Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption...

CVE-2024-34674

Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...

CVE-2024-49402

Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow physical attackers to access data across multiple user profiles...

CVE-2024-34680

Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information...

CVE-2024-34679

CVE-2024-34679 affects Crane; versions prior to SMR Nov-2024 Release 1 are vulnerable due to incorrect default permissions, permitting local attackers to access files with the phone privilege. The issue is documented across multiple feeds (Red Hat, NVD, CNVD, etc.) and is addressed by updating Cr...

CVE-2024-34678

Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption...

CVE-2024-34678

CVE-2024-34678: An out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 enables local attackers to cause memory corruption. Affected software is Samsung Mobile devices (libsapeextractor.so component). Impact per sources is memory corruption with local access required; no use...

CVE-2024-34678

Out-of-bounds write in libsapeextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption...

CVE-2024-34676

CVE-2024-34676 involves an out-of-bounds write in the subtitle file parser (libsubextractor.so) on Samsung Mobile devices, enabling local memory corruption with user interaction required. Affected component: libsubextractor.so subtitle parsing; trigger: malformed subtitle input; root cause: out-o...

CVE-2024-34676

Out-of-bounds write in parsing subtitle file in libsubextractor.so prior to SMR Nov-2024 Release 1 allows local attackers to cause memory corruption. User interaction is required for triggering this vulnerability...

CVE-2024-34674

Improper access control in Contacts prior to SMR Nov-2024 Release 1 allows physical attackers to access data across multiple user profiles...

CVE-2024-34673

CVE-2024-34673 concerns the Modem’s IpcProtocol with improper input validation, affecting versions prior to SMR Nov-2024 Release 1. The vulnerability enables a local attacker to trigger a Denial-of-Service. The PT-2024-26094 entry confirms the affected software family as Modem and specifies the v...

CVE-2024-34673

Improper Input Validation in IpcProtocol in Modem prior to SMR Nov-2024 Release 1 allows local attackers to cause Denial-of-Service...

CVE-2024-34669

The CVE-2024-34669 issue is an out-of-bounds write in parsing the h.263+ format inside librtppayload.so, affecting Samsung Mobile devices prior to SMR Oct-2024 Release 1. Exploitation could allow remote code execution with system privileges, and the attack requires user interaction. Public detail...

CVE-2024-34668

Out-of-bounds write in parsing h.263 format in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability...

CVE-2024-34667

CVE-2024-34667 is an out-of-bounds write in parsing the h.265 format in librtppayload.so, affecting versions prior to SMR Oct-2024 Release 1. It allows remote code execution with system privileges and requires user interaction to trigger. Remediation: update to SMR Oct-2024 Release 1 or later; as...

CVE-2024-34666

Out-of-bounds write in parsing h.264 format in a specific mode in librtppayload.so prior to SMR Oct-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability...