Archive
3 August 2026
Vulnerabilities first published on this day (UTC), newest first.
313 results · Feed
-
Medium 6.0
In geniezone, there is a possible escalation of privilege due to a missing permission check. This could lead to local e…
-
Medium 4.4
In geniezone, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio…
-
High 7.8
In Bluetooth driver, there is a possible permission bypass due to a missing permission check. This could lead to local …
-
Medium 5.5
In wifi, there is a possible out of bounds read due to a missing bounds check. This could lead to local information dis…
-
Medium 4.4
In wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of serv…
-
Medium 5.5
In Audio HAL, there is a possible system becoming unresponsive due to a race condition. This could lead to local denial…
-
Medium 5.5
In med, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local denial of se…
-
Medium 4.4
In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of servi…
-
Medium 4.4
In display, there is a possible information disclosure due to an integer overflow. This could lead to local information…
-
Medium 4.4
In display, there is a possible information disclosure due to a missing bounds check. This could lead to local informat…
-
Medium 6.7
In imgsensor, there is a possible application crash due to incorrect error handling. This could lead to local escalatio…
-
Medium 6.0
In HFRP, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
-
Medium 4.4
In TFA, there is a possible information disclosure due to a missing permission check. This could lead to local informat…
-
Medium 6.2
In Telephony, there is a possible information disclosure due to a missing permission check. This could lead to local in…
-
High 7.7
In Telephony, there is a possible escalation of privilege due to a missing permission check. This could lead to local e…
-
Medium 6.5
In wlan STA FW, there is a possible system becoming unresponsive due to logging. This could lead to remote (proximal/ad…
-
Medium 6.0
In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 6.0
In geniezone, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio…
-
Medium 5.5
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of…
-
High 7.5
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of ser…
-
Medium 5.5
In Audio HAL, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local denial of…
-
Medium 6.0
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Medium 5.5
In ccci, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of servi…
-
Medium 6.0
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Medium 6.0
In display, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of…
-
Medium 6.0
In display, there is a possible memory corruption due to use after free. This could lead to local escalation of privile…
-
Medium 4.4
In TFA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of servi…
-
Medium 4.6
In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of servic…
-
Medium 5.8
In trusted_mem, there is a possible escalation of privilege due to improper input validation. This could lead to local …
-
Medium 6.0
In apusys, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of…
-
Medium 6.0
In apusys, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalati…
-
Medium 6.1
In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escala…
-
High 8.1
In wlan AP driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (pr…
-
Medium 6.5
In hevc decoder, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalati…
-
Medium 5.3
mz-automation libiec61850 Report Sending Path reporting.c Reporting_RCBWriteAccessHandler free of memory not on the heap
A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnerability affects the function Reporting_RCBWriteAccessHandler of the file src/iec61850/server/mms_mapping/reporting.c of the component Report Sending Path Handler. The man…
-
Critical 9.3
JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallback enabled by default despite documented opt-in. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bctls-fips 1.0.24 (1.0.X…
-
High 8.7
CMS verifySignatures returns true for SignedData with zero signers
In Bouncy Castle for Java before 1.85, CMS verifySignatures returns true for SignedData with zero signers. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.…
-
High 8.7
OpenPGP CFB quick-check oracle active on symmetric/session-key paths
In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.…
-
High 8.7
S/MIME validator trusts signer-asserted signingTime for path validation
In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-asserted signingTime for path validation. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcmail-fips and bcjmail-fips 1.0…
-
High 8.7
CMS AuthenticatedData content not bound to MAC when authAttrs present
In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content not bound to MAC when authAttrs present. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series),…