3 January 2022

5 results · Clear filters · Feed

• Critical 9.8
  CVE-2021-39990

  The screen lock module has a Stack-based Buffer Overflow vulnerability.Successful exploitation of this vulnerability ma…

  Huawei HarmonyOS Network devices
  Jan 3, 2022
• Critical 9.8
  CVE-2021-30351

  An out of bound memory access can occur due to improper validation of number of frames being passed during music playba…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Jan 3, 2022
• Critical 9.3
  CVE-2021-30276

  Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resour…

  Qualcomm Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
  Jan 3, 2022
• Critical 9.3
  CVE-2021-30275

  Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Sn…

  Qualcomm Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wear
  Jan 3, 2022
• Critical 9.8
  CVE-2021-25981

  Talkyard - Insufficient Session Expiration

  In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient Session Expiration. This may allow an attacker to reuse the admin’s still-valid session token even when logged-out, to g…

  debiki talkyard
  Jan 3, 2022