Archive
2 December 2024
Vulnerabilities first published on this day (UTC), newest first.
61 results · Clear filters · Feed
-
Medium 5.5
x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client
In the Linux kernel, the following vulnerability has been resolved: x86/CPU/AMD: Clear virtualized VMLOAD/VMSAVE on Zen4 client A number of Zen4 client SoCs advertise the ability to use virtualized VMLOAD/VMSAVE, but using these instructions is reported to be…
-
Medium 5.5
mm: page_alloc: move mlocked flag clearance into free_pages_prepare()
In the Linux kernel, the following vulnerability has been resolved: mm: page_alloc: move mlocked flag clearance into free_pages_prepare() Syzbot reported a bad page state problem caused by a page being freed using free_page() still having a mlocked flag at fr…
-
Medium 6.7
Use After Free in Video
Memory corruption when multiple threads try to unregister the CVP buffer at the same time.
-
Medium 6.7
Use After Free in Camera Driver
Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.
-
Medium 6.7
Untrusted Pointer Dereference in Audio
Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.
-
Medium 6.1
Buffer Over-read in Neural Processing Unit
Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.
-
Medium 6.7
Use of Out-of-range Pointer Offset in Camera Driver
Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.
-
Medium 6.5
In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This co…
-
Medium 4.4
In cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 6.2
In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl…
-
Medium 6.7
In soundtrigger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escala…
-
Medium 6.7
In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p…
-
Medium 6.7
In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escala…
-
Medium 6.7
In Modem, there is a possible out of bonds write due to a mission bounds check. This could lead to local escalation of …
-
Medium 6.7
In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escala…
-
Medium 6.7
In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of…
-
Medium 6.7
In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
-
Medium 6.1
Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) via the /scgi?sid parameter.
-
Medium 4.8CVE-2024-53617 Public exploit
A Cross Site Scripting vulnerability in LibrePhotos before commit 32237 allows attackers to takeover any account via up…
-
Medium 5.4
A SQL injection vulnerability was found in PHPGURUKUL Vehicle Parking Management System v1.13 in /users/view-detail.php…
-
Medium 5.5
An issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allow…