CVE-2023-52887

CVE-2023-52887 affects the Linux kernel net: can: j1939 subsystem. The issue arises from enhanced error handling for tightly received RTS (Request to Send) messages in xtp_rx_rts_session_new, replacing WARN_ON_ONCE backtraces with a dedicated error handling path that allows early termination of p...

CVE-2021-1467

CVE-2021-1467 affects Cisco Webex Meetings for Android. The issue stems from improper authorization checks, allowing an authenticated remote actor in the same meeting to modify another user’s avatar by sending a crafted request to the targeted Webex client. Impact is limited to avatar modificatio...

CVE-2023-7235

The OpenVPN GUI installer (versions prior to 2.6.9 ) fails to set proper access control restrictions on the installation directory when a non-standard installation path is utilized. This incorrect default permission (CWE-276) allows an attacker to replace binaries with arbitrary executables. Whil...

CVE-2024-0032

CVE-2024-0032 affects the Android Framework (FileSystemProvider.java, queryChildDocuments) and enables local escalation of privilege due to improper input validation. Impact is described as Elevation of Privilege with HIGH confidentiality/integrity/availability impact; exploit requires user inter...

CVE-2023-40111

The provided documents only repeat the CVE description (MediaSessionRecord.java, possible local privilege escalation via a confused deputy) with no additional technical details, affected versions, or fixes. Public technical details are not available here; monitor for updates.

CVE-2021-47079

CVE-2021-47079: Linux kernel platform/x86 ideapad-laptop NULL pointer dereference in dytc_cql_command (third parameter must not be NULL). The vulnerability was resolved in upstream kernel as described; attack vector LOCAL with LOW complexity and HIGH impact on availability per NVD metrics. Connec...

CVE-2021-47048

CVE-2021-47048 affects the Linux kernel SPI driver spi-zynqmp-gqspi. The vulnerability arises when handling op->addr, where a buffer (tmpbuf) is freed and subsequently used, leading to a use-after-free. The root cause is use-after-free in zynqmp_qspi_exec_op, which can trigger Kasan warnings. ...

CVE-2021-47046

Summary (CVE-2021-47046) : In Linux kernel DRM/AMD display, the hdmi_14_process_transaction() path suffered an off-by-one read overflow due to a missing hdcp_i2c_offsets entry for HDCP_MESSAGE_ID_WRITE_CONTENT_STREAM_TYPE. A fix added the missing entry and copied the 0x0 offset from similar code,...

CVE-2021-47032

CVE-2021-47032 concerns the Linux kernel mt76 mt7915 driver: the fix ensures the first pointer in the txp is unmapped, preventing a leak of DMA mapping entries. The patch addresses a local DMA-mapping leak in the TX path; no remote/exploit details are provided in the sources beyond the fix. CVSS ...

CVE-2024-0035

The CVE 2024-0035 entry concerns Android’s TileLifecycleManager.java, specifically onNullBinding, where a missing null check could allow launching an activity from the background. This creates a local elevation of privilege with no extra execution privileges or user interaction required. Affected...

CVE-2024-27388

CVE-2024-27388 : Linux kernel SUNRPC patch fixes memory leaks in gssx_dec_option_array. The patch frees creds and oa->data in error-handling paths after allocation, addressing a leak in that code path. This memory-leak detail is corroborated by multiple connected advisories (Astra/CIRCL/Red Ha...

CVE-2023-50270

Apache DolphinScheduler versions before 3.2.0 are vulnerable to Session Fixation due to improper session management within LoginController.java. Specifically, the system fails to deactivate existing sessions when a user changes their password. An attacker could exploit this by sending a specially...

CVE-2021-46981

CVE-2021-46981 affects the Linux kernel nbd subsystem where a NULL pointer in flush_workqueue could be dereferenced when opening /dev/nbdX and then disconnecting, leading to a kernel crash. The fix adds a guard in nbd_disconnect_and_put to check nbd->recv_workq before use. Connected advisories...

CVE-2021-47049

CVE-2021-47049 affects the Linux kernel driver hv: vmbus. The vulnerability is a use-after-free in __vmbus_open() caused by freeing open_info without removing it from the vmbus_connection. The fix is to remove open_info from the chn_msg_list before freeing it (explicit in the advisory). Impact is...

CVE-2024-1670

CVE-2024-1670: Use-after-free in Mojo of Google Chrome/Chromium (pre-122.0.6261.57) allows remote attacker to potentially cause heap corruption via a crafted HTML page. Affected: Chromium/Chrome Mojo component; Impact: high (remote code/heap corruption) per CVSS. Mitigation: upgrade to Chromium/C...

CVE-2021-47008

CVE-2021-47008 relates to the Linux kernel KVM/SVM path where GHCB is updated in SIPI handling and MSR operations. The vulnerability arises if SIPIs occur without a corresponding AP Reset Hold, risking a NULL pointer dereference when GHCB is not mapped, and similarly a potential GHCB access issue...

CVE-2023-49109

Apache DolphinScheduler versions prior to 3.2.1 are vulnerable to Remote Code Execution (RCE) . The root cause is the improper validation of user input within the HttpTaskDefinitionParser.java file of the org.apache.dolphinscheduler:dolphinscheduler-task-api component. This flaw allows an attacke...

CVE-2024-0031

CVE-2024-0031 affects Google Android components. The vulnerability is in the function attp_build_read_by_type_value_cmd of att_protocol.cc, where improper input validation can cause an out-of-bounds write, enabling remote code execution with no privileges and no user interaction required. The pro...

CVE-2024-0014

CVE-2024-0014: The UpdateFetcher.java startInstall path contains a logic error that could allow a malicious config update, enabling local privilege escalation with no extra privileges and no user interaction required. This vulnerability is described across multiple sources (NVD/Red Hat/UVD enrich...

CVE-2021-47041

Technical details for CVE-2021-47041 are not publicly available in the provided documents; monitor for updates.

CVE-2023-46842

The Xen hypervisor is vulnerable to a crash due to a flaw in hypercall processing for HVM guests that can switch between 64-bit and other modes. The root cause is that internal sanity checking of translated hypercall arguments incorrectly assumes the high halves of registers are always clear. Whe...

CVE-2021-47025

CVE-2021-47025 affects the Linux kernel's Mediatek IOMMU driver. Root cause: mtK IOMMU runtime suspend incorrectly disables the clock if m4u_dom is null, risking a warning and unnecessary clock disable. The fix enables the clock on runtime resume and reduces clock management during init (mtk_iomm...

CVE-2021-47024

The CVE-2021-47024 issue is in the Linux kernel vsock/virtio path, where a memory leak occurs when closing a socket due to not draining the RX queue after the socket is definitively closed. The advisory notes partial remediation via ac03046ece2b, but the proper fix is to drain the RX queue before...

CVE-2022-48625

The Yealink Config Encrypt Tool versions prior to 1.2 contain a built-in RSA key pair, creating a design flaw where an adversary may be able to decrypt configuration files. Specifically, the tool may allow for the decryption of Autop deployment files due to the use of this default key. To mitigat...

CVE-2024-23114

Apache Camel is vulnerable to a Deserialization of Untrusted Data vulnerability (CWE-502) within the CassandraQL Component AggregationRepository . The root cause is the unsafe deserialization of malicious payloads under specific conditions. This issue affects Apache Camel versions 3.0.0 before 3....

CVE-2024-53996

CVE-2024-53996 is rejected and not used; it does not represent an active vulnerability entry.

CVE-2023-52372

A denial of service vulnerability exists in Huawei HarmonyOS and EMUI due to improper input parameter validation within the motor module . An attacker could exploit this flaw to negatively affect the availability of the affected systems. Exploitation details or specific patch versions are not pro...

CVE-2011-3192

CVE-2011-3192 is a DoS flaw in the Apache HTTP Server related to how Range headers are processed. In affected releases of httpd (1.3.x, 2.0.x up to 2.0.64, and 2.2.x up to 2.2.19), a remote attacker can trigger excessive memory and CPU usage by sending a Range header with multiple overlapping ran...

CVE-2024-0041

CVE-2024-0041 describes a race condition in SystemStatusAnimationSchedulerImpl.kt (removePersistentDot) that could allow local escalation of privilege with no extra privileges and without user interaction. Connected docs corroborate the same description across multiple feeds (NVD, Red Hat, CNVD, ...

CVE-2021-47081

CVE-2021-47081 is rejected/not used; this CVE entry does not represent an active vulnerability.

CVE-2023-52362

A privilege management vulnerability exists in the lock screen module of Huawei HarmonyOS and EMUI . Exploitation of this flaw can compromise the usability and availability of the affected systems. Exploitation details are not provided in the documents.

CVE-2024-25199

The Open Robotics Robotic Operating System 2 (ROS2) and Nav2 humble versions are vulnerable to a use-after-free condition. The root cause is an inappropriate pointer order involving map_sub_ and map_free(map_) within the amcl_node.cpp file. This flaw can lead to memory corruption or instability. ...

CVE-2024-25274

Novel-Plus version v4.3.0-RC1 is susceptible to an arbitrary file upload vulnerability within the /sysFile/upload component. This flaw allows an attacker to upload a specially crafted file, leading to arbitrary code execution . To mitigate this risk, it is recommended to disable the /sysFile/uplo...

CVE-2021-47002

CVE-2021-47002 references a SUNRPC NULL pointer dereference in the Linux kernel. Issue arises when alloc_pages_node() returns null and svc_rqst_free() dereferences a null rq_scratch_page during put_page(); the patch adds a null check in the failure path (svc_rqst_alloc()) to prevent dereferencing...

CVE-2021-47012

CVE-2021-47012 concerns Linux kernel RDMA/siw. The connected Astra Linux advisories describe a use-after-free in siw_alloc_mr where mem is assigned to mr->mem in siw_mr_add_mem and later freed via kfree(mem) if xa_alloc_cyclic() fails, leaving mr->mem pointing to freed memory. The patch tim...

CVE-2021-47051

CVE-2021-47051 affects the Linux kernel SPI driver for the Freescale/NXP fsl-lpspi. The issue is a PM (power management) reference leak in lpspi_prepare_xfer_hardware(): pm_runtime_get_sync increments the PM usage counter even when the operation fails, leading to an unbalanced reference. The fix ...

CVE-2021-47052

CVE-2021-47052 relates to the Linux kernel crypto-sa2ul path (rxd) where two error paths failed to free the rxd buffer, causing a memory leak. The vulnerability was resolved by fixing those paths to ensure rxd is freed on error exits. The provided documents confirm the issue in the crypto: sa2ul ...

CVE-2023-40110

CVE-2023-40110 is tied to a heap buffer overflow in multiple MtpPacket.cpp functions, causing an out-of-bounds write that could enable local privilege escalation with user interaction required. Connected sources (NVD/Red Hat/PRION/CNNVD/Android bulletin) consistently reference MtpPacket.cpp as th...

CVE-2024-26866

CVE-2024-26866 (Linux kernel, spi/lpspi) : The issue arises from a use-after-free in fsl_lpspi_probe() where memory allocated with spi_alloc_host()/spi_alloc_target() is freed in probe, but later referenced by devm_spi_register_controller(), leading to a NULL dereference when the controller is un...

CVE-2023-40107

CVE-2023-40107 concerns a use-after-free in ARTPWriter (ARTPWriter.cpp) related to uninitialized data, enabling local privilege escalation without extra user interaction. The affected component is ARTPWriter (ARTPWriter.cpp); underlying issue is use-after-free, leading to potential arbitrary code...

CVE-2024-27395

The CVE-2024-27395 issue is in the Linux kernel: net/openvswitch: Use-After-Free in ovs_ct_exit due to kfree_rcu being invoked outside the RCU read lock during ovs_ct_limit_exit traversal, creating a window where the freed key may be accessed after the grace period. The published fix changes the ...

CVE-2024-26878

In CVE-2024-26878, the Linux kernel quota NULL pointer dereference is addressed: a race between dquot_free_inode (or related) and quota_off can dereference an inode quota pointer after it is nulled. The fix uses a temporary pointer to prevent the use-after-free: if inode quota pointers are access...

CVE-2024-3596

Summary: CVE-2024-3596 is a forgery vulnerability in RADIUS (RFC 2865) where a local attacker can modify a valid RADIUS response to another response using a chosen-prefix collision against MD5. The vulnerability is associated with FreeRADIUS and is covered in multiple advisories (ALAS/ALSA) confi...

CVE-2024-26895

CVE-2024-26895 — Linux kernel (wifi: wilc1000) use-after-free during vif cleanup . The issue occurs when unregistering net devices while traversing the vif list, because a netdevice’s private vif data is freed (due to needs_free_netdev being set during registration) and the loop subsequently acce...

CVE-2024-26879

CVE-2024-26879: In the Linux kernel, the issue is within the clock framework (meson/axg_clk_regmaps) where some clocks were missing, causing a NULL pointer dereference and kernel panic when reading /sys/kernel/debug/clk/clk_summary. Root cause: missing clocks in axg_clk_regmaps lead to regmap_rea...

CVE-2023-40114

CVE-2023-40114 relates to an out-of-bounds write caused by a use-after-free in MtpFfsHandle.cpp, leading to local elevation of privilege with no additional execution privileges required. Exploitation requires user interaction. The public details identify the affected area (Android-related code pa...

CVE-2024-52798

CVE-2024-52798 concerns the path-to-regexp library. The DoS arises when path-to-regexp outputs regex patterns that backtrack, enabling high CPU/blocked event loop in vulnerable inputs. Public sources reference the 0.1.x line as the origin and recommend upgrading specifically to 0.1.12; later advi...

CVE-2021-47038

CVE-2021-47038: Linux kernel Bluetooth deadlock fix. The vulnerability arose from a new dependency between socket lock and hci_dev->lock introduced by commit adding BT_PHY socket option, causing hci_conn_get_phy() to use hdev->lock while the caller holds other Bluetooth locks (possible circ...

CVE-2018-16845

The CVE-2018-16845 issue affects nginx builds that include the ngx_http_mp4_module and the mp4 directive. Vulnerable are nginx versions earlier than 1.15.6 and 1.14.1 (when built with the module). The vulnerability arises from processing a specially crafted MP4 file, which could cause an infinite...

CVE-2024-40667

CVE-2024-40667 is documented in the Android Automotive OS Update Bulletin as a high-severity local elevation-of-privilege affecting the System component. The issue requires no additional execution privileges and could allow an attacker to gain higher privileges on devices running AAOS. The public...