Archive
3 January 2022
Vulnerabilities first published on this day (UTC), newest first.
104 results · Feed
-
Medium 6.7
Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between…
-
High 7.5
Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapd…
-
High 7.8
Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon A…
-
High 7.1
Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consume…
-
High 8.4
Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapd…
-
High 7.8
Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snap…
-
High 7.1
Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto,…
-
Critical 9.3
Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resour…
-
Critical 9.3
Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Sn…
-
High 8.4
Possible integer overflow in access control initialization interface due to lack and size and address validation in Sna…
-
High 7.5
Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdra…
-
High 7.3
Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in…
-
High 7.3
Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdr…
-
High 7.3
Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferenci…
-
High 7.3
Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdrago…
-
High 7.8
Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdrago…
-
High 7.8
Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, S…
-
High 8.4
Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory…
-
Medium 6.5
Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IO…
-
High 7.1
Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, …
-
High 7.3
An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute…
-
High 8.8
Userfrosting - Host-Header Injection Leads to Account Takeover
In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user to click on a link, an unauthenticated attacker can use the “forgot password” functionality to reset the victim’s password and successfully…
-
Critical 9.8
Talkyard - Insufficient Session Expiration
In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerable to Insufficient Session Expiration. This may allow an attacker to reuse the admin’s still-valid session token even when logged-out, to g…
-
Medium 5.3
Generation of Error Message Containing Sensitive Information in star7th/showdoc
showdoc is vulnerable to Generation of Error Message Containing Sensitive Information