2022

Possible memory corruption in BT controller when it receives an oversized LMP packet over 2-DH1 link and leads to denial

An out of bound memory access can occur due to improper validation of number of frames being passed during music playbac

Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Comp

Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in

Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdrag

Possible assertion in QOS request due to improper validation when multiple add or update request are received simultaneo

Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, S

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between

Possible assertion due to lack of input validation in PUSCH configuration in Snapdragon Auto, Snapdragon Compute, Snapdr

Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Au

Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer

Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdr

Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapd

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto,

Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resourc

Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Sna

Possible integer overflow in access control initialization interface due to lack and size and address validation in Snap

Possible assertion due to improper handling of IPV6 packet with invalid length in destination options header in Snapdrag

Possible null pointer dereference in thread cache operation handler due to lack of validation of user provided input in

Possible null pointer dereference in trap handler due to lack of thread ID validation before dereferencing it in Snapdra

Possible null pointer dereference in thread profile trap handler due to lack of thread ID validation before dereferencin

Possible null pointer dereference due to lack of TLB validation for user provided address in Snapdragon Auto, Snapdragon

Possible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ Capture command in Snapdragon

Possible integer overflow to buffer overflow due to improper input validation in FTM ARA commands in Snapdragon Auto, Sn

Improper validation of a socket state when socket events are being sent to clients can lead to invalid access of memory

Improper handling of resource allocation in virtual machines can lead to information exposure in Snapdragon Consumer IOT

Improper access control in TrustZone due to improper error handling while handling the signing key in Snapdragon Auto, S

An integer overflow due to improper check performed after the address and size passed are aligned in Snapdragon Compute,

In Userfrosting, versions v0.3.1 to v4.6.2 are vulnerable to Host Header Injection. By luring a victim application user

In Talkyard, regular versions v0.2021.20 through v0.2021.33 and dev versions v0.2021.20 through v0.2021.34, are vulnerab

showdoc is vulnerable to Generation of Error Message Containing Sensitive Information

ENC DataVault 7.2.3 and before, and OEM versions, use an encryption algorithm that is vulnerable to data manipulation (w

mruby is vulnerable to Heap-based Buffer Overflow

admin/limits.php in Dolibarr 7.0.2 allows HTML injection, as demonstrated by the MAIN_MAX_DECIMALS_TOT parameter.

DMP Roadmap before 3.0.4 allows XSS.

The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file de

In Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts function in xmlparse.c can le

An issue was discovered in BS_RCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity process can open the dr

The Datalogic DXU service on (for example) DL-Axist devices does not require authentication for configuration changes or

CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem thro

Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network c

net/http in Go before 1.16.12 and 1.17.x before 1.17.5 allows uncontrolled memory consumption in the header canonicaliza

Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string.