Archive
7 April 2021
Vulnerabilities first published on this day (UTC), newest first.
14 results · Clear filters · Feed
-
High 7.5
Indico Tampering with links (e.g. password reset) in sent emails
CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.
-
High 7.5
Denial of service while processing RTCP packets containing multiple SDES reports due to memory for last SDES packet is …
-
High 8.4
Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compu…
-
High 7.2
Trustzone initialization code will disable xPU`s when memory dumps are enabled and lead to information disclosure in Sn…
-
High 8.2
Out of bound memory read while unpacking data due to lack of offset length check in Snapdragon Auto, Snapdragon Compute…
-
High 8.2
Out-of-bounds read vulnerability while accessing DTMF payload due to lack of check of buffer length before copying in S…
-
High 8.4
A double free condition can occur when the device moves to suspend mode during secure playback in Snapdragon Auto, Snap…
-
High 8.4
Unintended reads and writes by NS EL2 in access control driver due to lack of check of input validation in Snapdragon A…
-
High 7.5
RRC sends a connection establishment success to NAS even though connection setup validation returns failure and leads t…
-
High 8.4
User could gain access to secure memory due to incorrect argument into address range validation api used in SDI to capt…
-
High 8.4
Memory crash when accessing histogram type KPI input received due to lack of check of histogram definition before acces…
-
High 8.4
Memory corruption due to invalid value of total dimension in the non-histogram type KPI could lead to a denial of servi…
-
High 8.4
When sending a socket event message to a user application, invalid information will be passed if socket is freed by oth…
-
High 8.2
Out of bound read occurs while processing crafted SDP due to lack of check of null string in Snapdragon Auto, Snapdrago…