2022

Improper validation of session id in PCM routing process can lead to memory corruption in Snapdragon Auto, Snapdragon Co

Improper memory allocation during counter check DLM handling can lead to denial of service in Snapdragon Auto, Snapdrago

Improper serialization of message queue client registration can lead to race condition allowing multiple gunyah message

Improper verification of timeout-based authentication in identity credential can lead to invalid authorization in HLOS i

Processing DCB/AVB algorithm with an invalid queue index from IOCTL request could lead to arbitrary address modification

Possible out of bounds read due to improper typecasting while handling page fault for global memory in Snapdragon Connec

Possible hypervisor memory corruption due to TOC TOU race condition when updating address mappings in Snapdragon Auto, S

Possible null pointer access due to improper validation of system information message to be processed in Snapdragon Indu

Possible buffer over read due to improper validation of SIB type when processing a NR system Information message in Snap

Possible buffer overflow due to lack of buffer length check during management frame Rx handling in Snapdragon Auto, Snap

Possible out of bound read due to lack of length check of data length for a DIAG event in Snapdragon Auto, Snapdragon Co

Possible out of bound read due to improper validation of certificate chain in SSL or Internet key exchange in Snapdragon

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC security mode co

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS

Disabled SMMU from secure side while RPM is assigned a secure stream can lead to information disclosure in Snapdragon In

Improper validation of permissions for third party application accessing Telephony service API can lead to information d

Possible memory leak due to improper validation of certificate chain length while parsing server certificate chain in Sn

Possible null pointer dereference due to improper validation of RRC connection reconfiguration message in Snapdragon Aut

Possible assertion due to improper validation of rank restriction field in Snapdragon Auto, Snapdragon Compute, Snapdrag

Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon

Possible buffer over read due to lack of size validation while copying data from DBR buffer to RX buffer and can lead to

RPM secure Stream can access any secure resource due to improper SMMU configuration and can lead to information disclosu

Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon C

Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapd

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet h

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdr

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdr

Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapd

Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has bee

Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has bee

Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Comp

Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdrag

Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Sna

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Comput

Possible use after free due to lack of null check of DRM file status after file structure is freed in Snapdragon Auto, S

Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdrag

Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control

Cross-site Scripting (XSS) - Stored in GitHub repository nocodb/nocodb prior to 0.91.7+.

Access of uninitialized pointer vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' ver

Out-of-bounds write vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, whic

Use after free vulnerability exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6

Directory traversal vulnerability in T&D Data Server (Japanese Edition) Ver.2.22 and earlier, T&D Data Server (English E

Out-of-bounds read vulnerability exist in the simulator module contained in the graphic editor 'V-SFT' v6.1.3.0 and earl

Cross-site scripting vulnerability in SHIRASAGI v1.0.0 to v1.14.2, and v1.15.0 allows a remote attacker to inject an arb

'Mobaoku-Auction&Flea Market' App for iOS versions prior to 5.5.16 improperly verifies server certificates, which may al

Incomplete filtering of special elements vulnerability exists in RevoWorks SCVX using 'File Sanitization Library' 1.043

Heap-based buffer overflow exists in the simulator module contained in the graphic editor 'V-SFT' versions prior to v6.1

Apache Flume versions 1.4.0 through 1.9.0 are vulnerable to a remote code execution (RCE) attack when a configuration us

An XML external entity (XXE) injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database info

Tenda AC18 router V15.03.05.19 and V15.03.05.05 was discovered to contain a remote code execution (RCE) vulnerability vi