Archive
21 January 2021
Vulnerabilities first published on this day (UTC), newest first.
72 results · Feed
-
Unscored —
Buffer over-read while processing NDL attribute if attribute length is larger than expected and then FW is treating it …
-
Unscored —
Out of bound reads might occur in while processing Service descriptor due to improper validation of length of fields in…
-
Unscored —
Buffer over-read while parsing RPS due to lack of check of input validation on values received from user side. in Snapd…
-
Unscored —
Out of bounds reads while parsing NAN beacons attributes and OUIs due to improper length of field check in Snapdragon A…
-
Unscored —
Possible integer overflow can occur when stream info update is called when total number of streams detected are zero wh…
-
Unscored —
Out of bound issue in WLAN driver while processing vdev responses from firmware due to lack of validation of data recei…
-
Unscored —
A process can potentially cause a buffer overflow in the display service allowing privilege escalation by executing cod…
-
Unscored —
Out of bound access issue while handling cvp process control command due to improper validation of buffer pointer recei…
-
Unscored —CVE-2020-11179 Public exploit
Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race conditi…
-
Unscored —
Out of bound access in computer vision control due to improper validation of command length before processing it in Sna…
-
Unscored —
Memory corruption while calculating L2CAP packet length in reassembly logic when remote sends more data than expected i…
-
Unscored —
Race condition in HAL layer while processing callback objects received from HIDL due to lack of synchronization between…
-
Unscored —
Race condition occurs while calling user space ioctl from two different threads can results to use after free issue in …
-
Unscored —
Out of bound access due to usage of an out-of-range pointer offset in the camera driver. in Snapdragon Auto, Snapdragon…
-
Unscored —
Out of bound memory access in camera driver due to improper validation on data coming from UMD which is used for offset…
-
Unscored —
Use after free issue in HIDL while using callback to post event in Rx thread when internal mutex is not acquired and me…
-
Unscored —
Out of bound write while copying data using IOCTL due to lack of check of array index received from user in Snapdragon …
-
Unscored —
Divide by zero issue can happen while updating delta extension header due to improper validation of master SN and exten…
-
Unscored —
Buffer over-read while UE process invalid DL ROHC packet for decompression due to lack of check of size of compresses p…
-
Unscored —
Out of bound memory access during music playback with modified content due to copying data without checking destination…
-
Unscored —
Out of bound memory access during music playback with ALAC modified content due to improper validation in Snapdragon Au…
-
Unscored —
Out of bound memory access while processing frames due to lack of check of invalid frames received in Snapdragon Auto, …
-
Unscored —
Uninitialized pointers accessed during music play back with incorrect bit stream due to an uninitialized heap memory re…
-
Unscored —
Integer multiplication overflow resulting in lower buffer size allocation than expected causes memory access out of bou…
-
Unscored —
Buffer over-read can happen when the buffer length received from response handlers is more than the size of the payload…
-
Unscored —
Buffer Over-read in audio driver while using malloc management function due to not returning NULL for zero sized memory…
-
Unscored —
bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin d…
-
Critical 9.8
OS Command Injection in async-git
The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag.
-
Unscored —
phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports.
-
Unscored —CVE-2021-3164 Public exploit
ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permi…
-
Unscored —
In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtu…
-
Unscored —
IBM InfoSphere Information Server 8.5.0.0 is affected by deserialization of untrusted data which could allow remote una…