PT-2024-22981 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in the tmu set table function of tmu.c, which could lead to a possible out of bounds write. This could...

Google Pixel security vulnerabilities

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from an out-of-bounds write vulnerability that stems from a missing bounds check in the tmusetcontroltempstep module of the tmu.c file, for which no details of the vulnerability are currently available...

PT-2024-22993

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a missing bounds check in the tmu set control temp step function of tmu.c, which could lead to a possible out of bounds write. Thi...

SpaceX Starlink Wi-Fi router security vulnerabilities

The SpaceX Starlink Wi-Fi router is a series of routers from SpaceX in the United States. A security vulnerability exists in SpaceX Starlink Wi-Fi router Gen 2 prior to version 2023.48.0, which originated from allowing cross-site scripting attacks via the ssid and password parameters on the...

PT-2024-22984

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a missing bounds check in the tmu set temp lut function of tmu.c, which could lead to a possible out of bounds write. This could...

Google Pixel security vulnerabilities

Google Pixel is a smartphone from Google, Inc USA. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in the tmusettrthresholds module of the tmu.c file, which may result in out-of-bounds writes...

Google Pixel security vulnerabilities

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing bounds check in the tmusettrnumthresholds module of the tmu.c file, where out-of-bounds writes may occur...

PT-2024-8480

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a while-loop in the ast dp set on off function that could lead to an infinite loop. This is because the register, VGACRI-Dx, checked in this API is a scratch...

DEBIAN-CVE-2024-26809

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: release elements in clone only from destroy path Clone already always provides a current view of the lookup table, use it to destroy the set, otherwise it is possible to destroy elements twice. This fix...

UBUNTU-CVE-2024-26809

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: release elements in clone only from destroy path Clone already always provides a current view of the lookup table, use it to destroy the set, otherwise it is possible to destroy elements twice. This fix...

CVE-2024-26809 netfilter: nft_set_pipapo: release elements in clone only from destroy path

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetpipapo: release elements in clone only from destroy path Clone already always provides a current view of the lookup table, use it to destroy the set, otherwise it is possible to destroy elements twice. This fix...

CVE-2024-26809

The CVE-2024-26809 vulnerability is in the Linux kernel's netfilter nft_set_pipapo code. The clone path previously could destroy elements using a stale view of the lookup table, risking double-destroy of elements; the fix ensures clone uses a current view to perform destruction. A patch sequence ...

set-ag.ch Cross Site Scripting vulnerability OBB-3899234

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2024-6453 · D Link · D-Link Dns-321 +16

Name of the Vulnerable Software and Affected Versions: D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 affected versions not specified...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a security issue in netfilter nftsetpipapo...

DEBIAN-CVE-2024-26775

In the Linux kernel, the following vulnerability has been resolved: aoe: avoid potential deadlock at setcapacity Move setcapacity outside of the section procected by &d-lock. To avoid possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- 1 lock&bdev-bdsizelock; localirqdisable; 2...

CVE-2024-26775 aoe: avoid potential deadlock at set_capacity

In the Linux kernel, the following vulnerability has been resolved: aoe: avoid potential deadlock at setcapacity Move setcapacity outside of the section procected by &d-lock. To avoid possible interrupt unsafe locking scenario: CPU0 CPU1 ---- ---- 1 lock&bdev-bdsizelock; localirqdisable; 2...

CVE-2024-26744 RDMA/srpt: Support specifying the srpt_service_guid parameter

In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Support specifying the srptserviceguid parameter Make loading ibsrpt with this parameter set work. The current behavior is that setting that parameter while loading the ibsrpt kernel module triggers the following kerne...

PT-2024-23852

Name of the Vulnerable Software and Affected Versions oidcc versions prior to 3.0.2 oidcc versions prior to 3.1.2 oidcc versions prior to 3.2.0-beta.3 Description A Denial of Service DoS by Atom exhaustion is possible by calling oidcc provider configuration worker:get provider configuration/1 or...

Libde265 Heap Buffer Overflow DoS

The vulnerability of the picparameterset::dump function in the h.265 Libde265 implementation is related to buffer overflows caused by the parameters numtilecolumns and numtilerow. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information or cause service failures...