Archive
14 June 2022
Vulnerabilities first published on this day (UTC), newest first.
55 results · Clear filters · Feed
-
High 7.5
SMBv3 FileNormalizedNameInformation NULL Pointer Dereference
Microsoft Windows SMBv3 suffers from a null pointer dereference in versions of Windows prior to the April, 2022 patch set. By sending a malformed FileNormalizedNameInformation SMBv3 request over a named pipe, an attacker can cause a Blue Screen of Death (BSOD…
-
High 7.1
Known or guessable hidden files may be accessed in Jupyter Server
Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter Notebook. Prior to version 1.17.1, if notebook server is started with a value of `root_dir` that contains the starting user's home…
-
High 7.5
Regular expression denial of service in Delight Nashorn Sandbox
An issue was discovered in Delight Nashorn Sandbox 0.2.0. There is an ReDoS vulnerability that can be exploited to launching a denial of service (DoS) attack.
-
High 8.4
Memory corruption in graphics support layer due to use after free condition in Snapdragon Auto, Snapdragon Consumer IOT…
-
High 7.8
Memory corruption in BT controller due to improper length check while processing vendor specific commands in Snapdragon…
-
High 8.4
Memory corruption in DSP service due to improper validation of input parameters in Snapdragon Auto, Snapdragon Compute,…
-
High 8.8
Buffer copy in GATT multi notification due to improper length check for the data coming over-the-air in Snapdragon Conn…
-
High 8.4
A user with user level permission can access graphics protected region due to improper access control in register confi…
-
High 7.5
Possible buffer over read due to improper calculation of string length while parsing Id3 tag in Snapdragon Auto, Snapdr…
-
High 8.4
Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message…
-
High 8.4
Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Conne…
-
High 8.4
Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon …
-
High 8.2
Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snap…
-
High 7.5
Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snap…
-
High 7.5
Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdra…
-
High 7.1
Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Compu…
-
High 8.4
Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, …
-
High 7.5CVE-2021-30327 Public exploit
Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdra…
-
High 8.4
Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control…
-
High 7.8
Buffer overflow can occur due to improper validation of NDP application information length in Snapdragon Auto, Snapdrag…
-
High 8.4CVE-2022-22071 Exploited
Possible use after free when process shell memory is freed using IOCTL munmap call and process initialization is in pro…
KEV Dec 5, 2023 -
High 8.4
kernel event may contain unexpected content which is not generated by NPU software in asynchronous execution mode in Sn…
-
High 7.5
Out of bound read in WLAN HOST due to improper length check can lead to DOS in Snapdragon Auto, Snapdragon Compute, Sna…
-
High 7.5
Possible buffer over read due to lack of size validation while unpacking frame in Snapdragon Auto, Snapdragon Compute, …
-
High 7.7
APK can load a crafted model into the CDSP which can lead to a compromise of CDSP and other APK`s data executing there …
-
High 7.5
Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdrag…
-
High 7.8
Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS …
-
High 7.5
Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Ind…
-
High 7.5
Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Sna…
-
High 7.5
Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in S…
-
High 7.5
Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Au…
-
High 7.5
Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdra…
-
High 7.8
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon…
-
High 7.8
Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto
-
High 8.4
Memory corruption in audio due to use after free while managing buffers from internal cache in Snapdragon Compute, Snap…
-
High 7.3
memory corruption in video due to buffer overflow while parsing mkv clip with no codechecker in Snapdragon Auto, Snapdr…
-
High 7.3
Memory corruption in video due to double free while parsing 3gp clip with invalid meta data atoms in Snapdragon Auto, S…
-
High 8.4
Memory corruption in video due to buffer overflow while reading the dts file in Snapdragon Auto, Snapdragon Compute, Sn…
-
High 8.4
Memory corruption when extracting qcp audio file due to lack of check on data length in Snapdragon Auto, Snapdragon Com…
-
High 7.5
Denial of service due to memory corruption while extracting ape header from clips in Snapdragon Auto, Snapdragon Comput…