Archive
6 January 2023
Vulnerabilities first published on this day (UTC), newest first.
78 results · Feed
-
High 8.2
Buffer over-read in WLAN
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.
-
High 8.2
Buffer over-read in WLAN
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.
-
High 8.4
Buffer copy without checking size of input in Modem
Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.
-
High 8.4
Improper validation of array index in Android Core
Memory corruption in android core due to improper validation of array index while returning feature ids after license authentication.
-
Medium 5.9
Integer overflow to buffer overflow in Audio
Memory corruption in Audio due to integer overflow to buffer overflow while music playback of clips like amr,evrc,qcelp with modified content.
-
High 7.3
Information exposure in Powerline Communication Firmware
Memory corruption due to information exposure in Powerline Communication Firmware while sending different MMEs from a single, unassociated device.
-
High 8.2
Buffer over-read in Bluetooth HOST
Information disclosure due to buffer over-read in Bluetooth HOST while processing GetFolderItems and GetItemAttribute Cmds from peer device.
-
High 7.5
Buffer over-read in WLAN
Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.
-
High 8.2
Buffer over-read in WLAN
Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.
-
Critical 9.3
Integer Overflow to Buffer Overflow in Automotive
Memory corruption in Automotive due to integer overflow to buffer overflow while registering a new listener with shared buffer.
-
High 8.2
Improper Input Validation in Automotive
Memory corruption in Automotive due to improper input validation.
-
High 8.1
Buffer Copy Without Checking Size of Input in Kernel
Memory corruption in kernel due to missing checks when updating the access rights of a memextent mapping.
-
Medium 6.2
Use-after-Free in MODEM
Denial of service in MODEM due to improper pointer handling
-
Medium 6.0
Information Exposure in DSP Services
Information exposure in DSP services due to improper handling of freeing memory
-
Medium 6.7
Incorrect Type Conversion in Video driver
Memory corruption in video driver due to type confusion error during video playback
-
High 7.4
exec-local-bin vulnerable to Command Injection
Versions of the package exec-local-bin before 1.2.0 are vulnerable to Command Injection via the theProcess() functionality due to improper user-input sanitization.
-
Medium 6.7
Use-After-Free Issue in Display
Memory corruption in display due to double free while allocating frame buffer memory
-
Medium 6.7
Time-of-check Time-of-use Race Condition in Multimedia Framework
Memory corruption in Multimedia Framework due to unsafe access to the data members
-
Medium 6.7
Incorrect type casting in Display driver
Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields
-
Critical 9.8
Integer Overflow to Buffer Overflow in Bluetooth HOST
Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
-
Medium 4.6
Buffer Over-read in BOOT
Denial of service while processing fastboot flash command on mmc due to buffer over read
-
Critical 9.8
Ghidra/RuntimeScripts/Linux/support/launch.sh in NSA Ghidra through 10.2.2 passes user-provided input into eval, leadin…
-
Critical 9.8CVE-2022-39073 Public exploit
There is a command injection vulnerability in ZTE MF286R, Due to insufficient validation of the input parameters, an at…
-
Medium 5.4
There is a SQL injection vulnerability in Some ZTE Mobile Internet products. Due to insufficient validation of the inpu…
-
High 7.5
The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this…
-
High 7.5
The memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect …
-
Medium 6.1
An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur via one of attributes in webmail URLs to execu…
-
Medium 6.1
An issue was discovered in Zimbra Collaboration (ZCS) 9.0. XSS can occur on the Classic UI login page by injecting arbi…
-
High 7.5
SQL injection vulnerability in sourcecodester Theme Park Ticketing System 1.0 allows remote attackers to view sensitive…
-
High 7.8
Efs Software Easy Chat Server Version 3.1 was discovered to contain a DLL hijacking vulnerability via the component Tex…
-
Medium 6.1CVE-2022-44870 Public exploit
A reflected cross-site scripting (XSS) vulnerability in maccms10 v2022.1000.3032 allows attackers to execute arbitrary …
-
High 8.8
The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution b…
-
High 8.8CVE-2022-42979 EPSS 25%
Information disclosure due to an insecure hostname validation in the RYDE application 5.8.43 for Android and iOS allows…
-
High 7.5
The DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful…
-
High 7.5
The DUBAI module has a double free vulnerability. Successful exploitation of this vulnerability may affect system avail…
-
Medium 6.5
The Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerabili…
-
High 7.5
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in o…
-
High 7.5
The HW_KEYMASTER module has a problem in releasing memory.Successful exploitation of this vulnerability may result in o…