Archive
23 October 2018
Vulnerabilities first published on this day (UTC), newest first.
69 results · Feed
-
Unscored —
Several administrative resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from …
-
Unscored —
The XsrfErrorAction resource in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from vers…
-
Unscored —
Many resources in Atlassian Jira before version 7.6.9, from version 7.7.0 before version 7.7.5, from version 7.8.0 befo…
-
Unscored —
A UrlfWTPPagePtr KERedirect Use-After-Free Privilege Escalation vulnerability in Trend Micro Antivirus for Mac (Consume…
-
Unscored —
A ctl_set KERedirect Untrusted Pointer Dereference Privilege Escalation vulnerability in Trend Micro Antivirus for Mac …
-
Unscored —
Under certain mode of operations, HLOS may be able get direct or indirect access through DXE channels to tamper with th…
-
Unscored —
Improper input validation in Bluetooth Controller function can lead to possible memory corruption in Snapdragon Mobile …
-
Unscored —
Secure display content could be accessed by third party trusted application after creating a fault in other trusted app…
-
Unscored —
Access control on applications is not applied while accessing SafeSwitch services can lead to improper access in Snapdr…
-
Unscored —
Lack of Input Validation in SDMX API can lead to NULL pointer access in Snapdragon Automobile, Snapdragon Mobile and Sn…
-
Unscored —
When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop with…
-
Unscored —
Possible memory corruption when Read Val Blob Req is received with invalid parameters in Snapdragon Mobile in version Q…
-
Unscored —
Improper translation table consolidation logic leads to resource exhaustion and QSEE error in Snapdragon Automobile, Sn…
-
Unscored —
Insufficient memory allocation in boot due to incorrect size being passed could result in out of bounds access in Small…
-
Unscored —
While reading file class type from ELF header, a buffer overread may happen if the ELF file size is less than the size …
-
Unscored —
Non-secure SW can cause SDCC to generate secure bus accesses, which may expose RPM access in Snapdragon Mobile, Snapdra…
-
Unscored —
Possible buffer overflow if input is not null terminated in DSP Service module in Snapdragon Automobile, Snapdragon Mob…
-
Unscored —
While accessing SafeSwitch services, third party can manipulate a given device and perform unauthorized operation due t…
-
Unscored —
When a particular GPIO is protected by blocking access to the corresponding GPIO resource registers, the protection can…
-
Unscored —
Double memory free while closing TEE SE API Session management in Snapdragon Mobile in version SD 425, SD 430, SD 450, …
-
Unscored —
In a device, with screen size 1440x2560, the check of contiguous buffer will overflow on certain buffer size resulting …
-
Unscored —
While processing the sensors registry configuration file, if inputs are not validated a buffer overflow will occur in S…
-
Unscored —
Improper input validation for GATT data packet received in Bluetooth Controller function can lead to possible memory co…
-
Unscored —
Secure app running in non secure space can restart TZ by calling Widevine app API repeatedly in Snapdragon Automobile, …
-
Unscored —
XBL sec mem dump system call allows complete control of EL3 by unlocking all XPUs if enable fuse is not blown in Snapdr…
-
Unscored —
BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash.
-
Unscored —
chmextract.c in the chmextract sample program, as distributed with libmspack before 0.8alpha, does not protect against …
-
Unscored —
In mspack/cab.h in libmspack before 0.8alpha and cabextract before 1.8, the CAB block input buffer is one byte too smal…
-
Unscored —
chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has '\0' as its first or second…