Archive
21 January 2020
Vulnerabilities first published on this day (UTC), newest first.
76 results · Feed
-
Unscored —
A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code…
-
Unscored —
Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in …
-
Unscored —
Possible buffer overflow issue in error processing due to improper validation of array index value in Snapdragon Auto, …
-
Unscored —
Use after free while processing eeprom query as there is a chance to not unlock mutex after error occurs in Snapdragon …
-
Unscored —
Possible stack-use-after-scope issue in NFC usecase for card emulation in Snapdragon Auto, Snapdragon Industrial IOT, S…
-
Unscored —
Heap buffer overflow can occur while parsing invalid MKV clip which is not standard and have invalid vorbis codec data …
-
Unscored —
String format issue will occur while processing HLOS data as there is no user input validation to ensure inputs are pro…
-
Unscored —
While parsing invalid super index table, elements within super index table may exceed total chunk size and invalid data…
-
Unscored —
Possible buffer overflow when byte array receives incorrect input from reading source as array is not null terminated i…
-
Unscored —
Integer overflow occurs while playing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, Snapdragon …
-
Unscored —
The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd…
-
Unscored —
Possible null pointer dereference issue in location assistance data processing due to missing null check on resources b…
-
Unscored —
Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon A…
-
Unscored —
Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto…
-
Unscored —
Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Co…
-
Unscored —
Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment informa…
-
Unscored —
Buffer overflow can occur while processing clip due to lack of check of object size before parsing in Snapdragon Auto, …
-
Unscored —
Out-of-bound access will occur in USB driver due to lack of check to validate the frame size passed by user in Snapdrag…
-
Unscored —
Potential use-after-free heap error during Validate/Present calls on display HW composer in Snapdragon Auto, Snapdragon…
-
Unscored —
Possible integer overflow happens when mmap find function will increment refcount every time when it invokes and can le…
-
Unscored —
Use after free issue occurs when camera access sensors data through direct report mode in Snapdragon Auto, Snapdragon C…
-
Unscored —
Use after free issue due to using of invalidated iterator to delete an object in sensors HAL in Snapdragon Auto, Snapdr…
-
Unscored —
NULL is assigned to local instance of audio device pointer after free instead of global static pointer and can lead to …
-
Unscored —
Null pointer dereference can occur while parsing the clip which is nonstandard in Snapdragon Auto, Snapdragon Compute, …
-
Unscored —
Buffer over-read can occur while playing the video clip which is not standard in Snapdragon Auto, Snapdragon Compute, S…
-
Unscored —
While transferring data from APPS to DSP, Out of bound in FastRPC HLOS Driver due to the data buffer which can be contr…
-
Unscored —
Improper initialization of local variables which are parameters to sfs api may cause invalid pointer dereference and le…
-
Unscored —
Null-pointer dereference issue can occur while calculating string length when source string length is zero in Snapdrago…
-
Unscored —
While trying to obtain datad ipc handle during DPL initialization, Heap use-after-free issue can occur if modem SSR occ…
-
Medium 5.1
An issue was discovered in button_open in login/logind-button.c in systemd before 243. When executing the udevadm trigg…
-
Unscored —
The conversation-watson plugin before 0.8.21 for WordPress has a DOM-based XSS vulnerability that is executed when a ch…
-
Unscored —
The CSV upload feature in /supervisor/procesa_carga.php on Logaritmo Aware CallManager 2012 devices allows upload of .p…
-
Unscored —
SMC D3G0804W 3.5.2.5-LAT_GA devices allow XSS via the SSID field on the WiFi Network Configuration page (after a succes…
-
Medium 6.5
There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and…
-
Medium 5.4
There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.…
-
Medium 6.5
All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set…