274 matches found
MAL-2025-4404 Malicious code in sps (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b57efa39f87821ab7b20f816cc7f9581c2e826b864eb91162d8098419b5e4a39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-29515
Missing release of memory after effective lifetime in firmware for IntelR SPS before versions SPSE306.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2021-0051
Improper input validation in the IntelR SPS versions before SPSE504.04.04.023.0, SPSE504.04.03.228.0 or SPSSoC-A05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2020-8744
Improper initialization in subsystem for IntelR CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, IntelR TXE versions before 4.0.30 IntelR SPS versions before E305.01.04.200 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2020-8755
Race condition in subsystem for IntelR CSME versions before 12.0.70 and 14.0.45, IntelR SPS versions before E504.01.04.400 and E305.01.04.200 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2020-0586
Improper initialization in subsystem for IntelR SPS versions before SPSE304.01.04.109.0 and SPSE304.08.04.070.0 may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access...
CVE-2019-11109
Logic issue in the subsystem for IntelR SPS before versions SPSE504.01.04.275.0, SPSSoC-X04.00.04.100.0 and SPSSoC-A04.00.04.191.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2019-0099
Insufficient access control vulnerability in subsystem in IntelR SPS before version SPSE305.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2019-0089
Improper data sanitization vulnerability in subsystem in IntelR SPS before versions SPSE504.00.04.381.0, SPSE304.01.04.054.0, SPSSoC-A04.00.04.181.0, and SPSSoC-X04.00.04.086.0 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-49835 Out-of-bounds Write in SPS Applications
Memory corruption while reading secure file...
CVE-2024-49835 Out-of-bounds Write in SPS Applications
Memory corruption while reading secure file...
The vulnerability of the gf_hevc_read_sps_bs_internal function in the av_parsers.c file of the MP4Box packaging tool for the GPAC multimedia platform allows a hacker to cause a service failure.
The vulnerability of the gfhevcreadspsbsinternal function in the avparsers.c file of the MP4Box package of the GPAC multimedia platform is related to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure during...
CVE-2024-25571
Improper input validation in some IntelR SPS firmware before SPSE506.01.04.059.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2024-25571
CVE-2024-25571 affects Intel® Server Platform Services (SPS) firmware. Reported as an improper input validation in SPS firmware before SPS_E5_06.01.04.059.0, potentially allowing a privileged local attacker to cause a denial of service. Documents list the vulnerability details and the available m...
Intel® SPS Firmware Advisory
Summary: A potential security vulnerability in some Intel® Server Platform Services Intel® SPS firmware may allow denial of service. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-25571 Description: Improper input validation in...
CVE-2022-29466
Improper input validation in firmware for IntelR SPS before version SPSE304.01.04.700.0 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2024-47921
Smadar SPS – CWE-327: Use of a Broken or Risky Cryptographic Algorithm...
CVE-2024-47921
CVE-2024-47921 concerns Smadar SPS with CWE-327: Use of a Broken or Risky Cryptographic Algorithm. Affected product: Smadar SPS; reports reference cryptographic weaknesses in the software (CNNVD 202412-3229) and details vary by source (e.g., version 4.0.44.0.64 cited by CNNVD). CVSS 3.1 metrics i...