CVE-2024-5931 BT: Unchecked user input in bap_broadcast_assistant

BT: Unchecked user input in bapbroadcastassistant...

CVE-2024-5931

CVE-2024-5931 affects Zephyr RTOS, specifically the bap_broadcast_assistant component, due to unchecked user input. Public sources indicate affected version range includes Zephyr 3.6 and earlier; the underlying issue is improper input validation, with potential availability impact (per NVD CVSS: ...

CVE-2024-5931 BT: Unchecked user input in bap_broadcast_assistant

BT: Unchecked user input in bapbroadcastassistant...

CVE-2024-5931 BT: Unchecked user input in bap_broadcast_assistant

BT: Unchecked user input in bapbroadcastassistant...

PT-2024-24058 · Eaton · Eaton Foreseer

Name of the Vulnerable Software and Affected Versions: Eaton Foreseer affected versions not specified Description: The Eaton Foreseer software has a security issue related to its customizable input fields, which allow users to configure parameters such as alarms and reports. Some of these input...

Zephyr 安全漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr version 3.6 and prior versions, which stems from a lack of checking the length of netbuf when processing data for the RFCOMM protocol, which could lead to a heap-based buffer...

Eaton Foreseer EPMS 安全漏洞

Eaton Foreseer EPMS is a highly customizable web-based software platform from Eaton Corporation. A security vulnerability exists in Eaton Foreseer EPMS prior to version 7.8.600, which arises from an input field that does not check the length and bounds of an input value, which could result in...

Zephyr 安全漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr version 3.6 and earlier versions, which stems from unchecked user input in bapbroadcastassistant...

PT-2024-37247

Name of the Vulnerable Software and Affected Versions: bap broadcast assistant affected versions not specified Description: The issue concerns unchecked user input in the bap broadcast assistant, which poses a risk. There is no information provided about the estimated number of potentially affect...

SAMSUNG Mobile Processor 安全漏洞

SAMSUNG Mobile Processor is a family of mobile processors from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile Processor, which stems from a heap overwrite in the function slsigetscanextraies that does not perform an input validation check on defaulties from userspace. The...

PT-2024-40949 · Anstream · Anstream

Name of the Vulnerable Software and Affected Versions: anstream affected versions not specified Description: The issue arises when the function in anstream's adapter/strip.rs is given a valid UTF8 string containing non-printable bytes, such as "öx1b😀". The function incorrectly segments the UTF8...

CVE-2024-32763

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS...

CVE-2023-51367

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build...

Security Bulletin: Vulnerabilities in snappy-java affect watsonx.data

Summary Snappy-java is vulnerable to a denial of service, caused by either an integer overflow, use of an unchecked chunk length or missing upper bound check on chunk length. These can affect watsonx.data. Vulnerability Details CVEID:CVE-2023-34453 DESCRIPTION: snappy-java is vulnerable to a deni...

SUSE CVE-2024-45618

A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to unexpected work with variables that have...

AZL-48823 CVE-2024-45617 affecting package opensc 0.23.0-5

A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to...

UBUNTU-CVE-2024-45618

A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to unexpected work with variables that have...

UBUNTU-CVE-2024-45617

A vulnerability was found in OpenSC, OpenSC tools, PKCS11 module, minidriver, and CTK. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to...

PT-2024-9400

Name of the Vulnerable Software and Affected Versions OpenSC affected versions not specified OpenSC tools affected versions not specified PKCS11 module affected versions not specified minidriver affected versions not specified CTK affected versions not specified Description An issue exists in the...

CVE-2024-5991

In function MatchDomainName, input param str is treated as a NULL terminated string despite being user provided and unchecked. Specifically, the function X509checkhost takes in a pointer and length to check against, with no requirements that it be NULL terminated. If a caller was attempting to do...