Google Android Buffer Overflow Vulnerability (CNVD-2022-53367)

Google Android is a Linux-based open source operating system from Google, Inc. A buffer overflow vulnerability exists in Google Android, which stems from the fact that the UE and EMM use NAS messages to communicate with each other. The vulnerability can be exploited to remotely crash the modem...

MAL-2022-2773 Malicious code in epic-ue-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42ac396111cdac73dc3a39c9ae1f531ba8418435a8a6ef8e7c093d9243ca682b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epic-ue-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 42ac396111cdac73dc3a39c9ae1f531ba8418435a8a6ef8e7c093d9243ca682b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in epic-ue-themes-la (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dd6b1635c8fd79c366882517043249a5f5f29688531b8a26db7a8cf43a43671 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2772 Malicious code in epic-ue-themes-la (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4dd6b1635c8fd79c366882517043249a5f5f29688531b8a26db7a8cf43a43671 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-20210

The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an attacker to remotely crash the modem, which could lead to DoS...

CVE-2022-20210

The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an attacker to remotely crash the modem, which could lead to DoS...

Code injection

The UE and the EMM communicate with each other using NAS messages. When a new NAS message arrives from the EMM, the modem parses it and fills in internal objects based on the received data. A bug in the parsing code could be used by an attacker to remotely crash the modem, which could lead to DoS...

Malicious code in epic-ue-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7979dce3b3be977cb7f1e59666ccb211221329338f2d557e5f30c3427a98503 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2770 Malicious code in epic-ue-fonts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d7979dce3b3be977cb7f1e59666ccb211221329338f2d557e5f30c3427a98503 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Input validation

UE assertion is possible due to improper validation of invite message with SDP body in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wearables...

CVE-2021-1933

CVE-2021-1933 is an in-device vulnerability affecting Qualcomm Snapdragon platforms (Snapdragon Auto, Compute, Connectivity, Consumer IOT, Industrial IOT, Wearables). The issue stems from improper validation of invite messages with SDP bodies, enabling a UE assertion under networking conditions. ...

CVE-2020-11268

Potential UE reset while decoding a crafted Sib1 or SIB1 that schedules unsupported SIBs and can lead to denial of service in Snapdragon Auto, Snapdragon Mobile...

CVE-2020-11268

CVE-2020-11268 affects Qualcomm Snapdragon Auto and Snapdragon Mobile components. The vulnerability arises during decoding of a crafted Sib1/SIB1 that schedules unsupported SIBs, which can lead to a denial of service (UE reset). Root cause, as described in multiple sources, is improper handling d...

CVE-2020-11144

Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2020-11144

Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice &...

CVE-2018-13903

u'Error in UE due to race condition in EPCO handling' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, MDM9205, MDM9206, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, SDM450, SM8150...

CVE-2018-13903

u'Error in UE due to race condition in EPCO handling' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in APQ8053, MDM9205, MDM9206, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8953, SDM450, SM8150...

CVE-2018-13903

CVE-2018-13903 describes a race condition in EPCO handling that causes an error in UE. Affected are Snapdragon platforms across multiple families (e.g., Snapdragon Auto, Compute, Consumer IOT, Industrial IOT, Mobile, Wearables) spanning APQ8053, MDM9205/9206, MSM89x, SDM450, SM8150, among others....

ue-varna.bg Cross Site Scripting vulnerability OBB-1219116

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...