405,857 results · Feed
-
High 7.5
In the baseband, memory corruption during NAS packet processing can cause a denial of service.
-
Medium 5.5
Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition.
-
High 8.8
Out of bound access in PPC due to race condition in global variable access
-
Critical 9.1
Improper handling of messages before AS security activation can cause unexpected behavior
-
Medium 6.3
A double free vulnerability in NPU driver due to improper pointer management (940)
-
High 7.3
A double free vulnerability in NPU driver due to improper pointer management (941)
-
Critical 9.1
Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inap…
-
High 8.1
In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corru…
-
High 7.3
Integer overflow in NPU driver parameter processing due to insufficient bounds checking.
-
High 7.5
In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds w…
-
Critical 9.1
Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.
-
Critical 9.1
Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory.
-
High 7.5
In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, wh…
-
High 7.8
In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption,…
-
Critical 9.8
In the Samsung Exynos ENN NeuralNetworks HAL, improper input validation during request processing can cause memory corr…
-
High 7.5
Incorrect authorization in Samsung framework services due to missing permission checks
-
High 8.4
Memory corruption in GPU driver due to improper validation of VMID reservation.
-
Critical 9.8
Out-of-bounds memory access in a device driver due to improper resource state tracking.
-
Critical 9.1
In the Samsung Exynos GPU driver, improper synchronization during buffer object creation and closing can lead to memory…
-
High 8.4
In the Samsung GPU driver, improper reference count handling during command submission can lead to memory corruption.
-
High 7.5
Incorrect handling of unauthenticated downlink RRC Setup messages can cause the baseband to crash
-
Medium 5.3
An attacker may send a malicious IMS message to the target device, potentially leading to information exposure through …
-
High 7.5
Improper handling of NAS DLTransport messages may lead to a baseband crash.
-
High 7.5
Incorrect handling of SDP payload leads to a Denial of Service
-
High 7.5
Processing a malformed RRC Reconfiguration message leads to an out-of-bounds (OOB) access, resulting in a denial-of-ser…
-
Critical 9.8
In the LTE RRC component, improper handling of messages before authentication triggers a data abort, which leads to a d…
-
High 7.5
In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, lead…
-
Critical 9.8
In the Exynos modem's IMS stack, Out of Bound access occurs due to improper validation.
-
High 7.5
In the Exynos modem's IMS stack, improper handling of SDP payload leads to a Denial of Service
-
High 7.5
A memory corruption vulnerability caused by improper validation of messages
-
Medium 6.5
In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability
-
Critical 9.2
In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underf…
-
Medium 6.3
myshell-ai AIlice HuggingFace Model Wrapper AModelCausalLM.py LoadModel_PEFT inclusion of functionality from untrusted control sphere
A security vulnerability has been detected in myshell-ai AIlice up to 0.4.0. This vulnerability affects the function LoadModel_PEFT of the file ailice/core/llm/AModelCausalLM.py of the component HuggingFace Model Wrapper. The manipulation of the argument base…
-
High 7.5
Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression
Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows attackers to exhaust memory by supplying highly compressed notary signature layers. Attackers who control registry referrers or signatures ca…
-
High 7.5
Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression
Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote attackers to exhaust memory by supplying highly compressed attestation layers. Attackers controlling registry referrer artifacts can pus…
-
Critical 9.1
Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass
Kyverno 1.18.0 before 1.19.2 contains a signature verification bypass in verifyImages because cached verification results are keyed by the image reference string (such as a tag) rather than bound to the verified digest, so cache hits skip signature and attest…
-
High 7.7
Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone
Kyverno before 1.19.2 contains a missing authorization vulnerability that allows namespaced Policy authors to read resources in other namespaces by templating generate.clone or cloneList namespace values. Attackers can annotate a triggering ConfigMap so the b…
-
High 7.5
Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic
Kyverno before 1.19.2 contains a denial-of-service vulnerability in the In and NotIn operators that allows attackers to crash the policy engine via an unchecked type assertion. Attackers can submit resources whose JMESPath-evaluated values yield arrays of int…
-
High 7.7
Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates
Kyverno before 1.19.2 contains an authentication bypass in matchCertificateData that skips verifyImages subject and subjectRegExp checks when the signing certificate has no Subject Alternative Name. Attackers holding a leaf certificate from a configured priva…
-
High 8.5
Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting
Kyverno from 1.17.0 before 1.19.2 contains a missing authorization vulnerability in the mutate-existing background processor that allows namespaced tenants to modify resources outside their namespace. Attackers can create a NamespacedMutatingPolicy targeting …