Archive
3 June 2025
Vulnerabilities first published on this day (UTC), newest first.
116 results · Feed
-
High 7.8
Untrusted Pointer Dereference in DSP Service
Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.
-
High 7.8
Time-of-check Time-of-use (TOCTOU) Race Condition in DSP Service
Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.
-
High 8.6CVE-2025-21480 Exploited
Incorrect Authorization in Graphics Windows
Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.
KEV Jun 3, 2025 -
High 7.5
Buffer Over-read in WLAN Host Communication
Transient DOS while processing the EHT operation IE in the received beacon frame.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while processing goodbye RTCP packet from network.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while decoding the RTP packet with invalid header extension from network.
-
High 8.2
Buffer Over-read in Data Network Stack & Connectivity
Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.
-
Medium 6.6
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption may occur while processing the OIS packet parser.
-
Medium 6.6
Use of Out-of-range Pointer Offset in Camera Driver
Memory corruption while handling test pattern generator IOCTL command.
-
Medium 6.6
Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Driver
Memory corruption while processing I2C settings in Camera driver.
-
Medium 6.6
Use After Free in Computer Vision
Memory corruption while processing IOCTL command to handle buffers associated with a session.
-
Medium 6.6
Buffer Copy Without Checking Size of Input in Audio
Memory corruption may occur while processing voice call registration with user.
-
High 7.8
Improper Access Control in Core
Memory corruption may occur while attaching VM when the HLOS retains access to VM.
-
Medium 5.1
In cplog service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia…
-
Medium 5.1
In cplog service, there is a possible system crash due to null pointer dereference. This could lead to local denial of …
-
Medium 5.9CVE-2025-31710 Public exploit
In engineermode service, there is a possible command injection due to improper input validation. This could lead to loc…
-
Critical 9.8
Golo <= 1.7.0 - Authentication Bypass to Account Takeover
The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.7.0. This is due to the plugin not properly validating a user's identity prior to setting an au…
-
High 7.2
wpForo + wpForo Advanced Attachments <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting
The wpForo + wpForo Advanced Attachments plugin for WordPress is vulnerable to Stored Cross-Site Scripting via media upload names in all versions up to, and including, 3.1.3 due to insufficient input sanitization and output escaping. This makes it possible fo…
-
Medium 4.3
Broken Link Checker <= 2.4.4 - Missing Autorization to Authenticated (Subscriber+) Plugin Status Dashboard View
The Broken Link Checker plugin for WordPress is vulnerable to unauthorized data access due to a missing capability check on the ajax_full_status and ajax_dashboard_status functions in all versions up to, and including, 2.4.4. This makes it possible for authen…
-
Medium 5.6
Ninja Tables – Easy Data Table Builder <= 5.0.18 - Unauthenticated PHP Object Injection to Limited Remote Code Execution
The Ninja Tables – Easy Data Table Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.0.18 via deserialization of untrusted input from the args[callback] parameter . This makes it possible for unauthenti…
-
Critical 9.8
A buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an unauthenticated user to achieve remo…
-
Critical 9.8
In Audiocodes Mediapack MP-11x through 6.60A.369.002, a crafted POST request request may result in an unauthenticated r…
-
High 8.4
Foxcms v1.25 has a SQL time injection in the $_POST['dbname'] parameter of installdb.php.
-
Critical 10.0CVE-2025-45854 Scanner template
/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams.
-
Medium 5.4
Erupt Unrestricted Upload of File with Dangerous Type vulnerability
An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file.
-
Critical 9.8
Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code vi…
-
High 8.6
An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bo…
-
High 8.8
An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380, 1480 and 2400. A Dou…
-
High 7.8
An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380. A Use-After-Free in …
-
High 7.5
An issue was discovered in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400. The absence of a NULL check le…
-
High 8.6
An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400. The lack of a length check leads to out-of-bo…
-
Critical 9.1
An issue was discovered in Samsung Mobile Processor Exynos 1380. The lack of a length check leads to out-of-bounds writ…
-
Medium 6.5
An issue was discovered in ReportController in Unicom Focal Point 7.6.1. A user who has administrative privilege in Foc…
-
Medium 4.6
An issue was discovered in Unicom Focal Point 7.6.1. The database is encrypted with a hardcoded key, making it easier t…
-
Medium 6.1
Cross Site Scripting vulnerability was discovered in Unicom Focal Point 7.6.1. The val parameter in SettingController (…