Search vulnerabilities

Results 16,509

CVE-2024-20073

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00367704; Issue ID: MSV-1411.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2024-20074

In dmc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08668110; Issue ID: MSV-1333.

CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android Mt6580 Mt6739 and 28 more
CVE-2024-20090

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1703.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android Mt6761 Mt6765 and 14 more
CVE-2024-20092

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313; Issue ID: MSV-1700.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Products
Android Mt6761 Mt6765 and 14 more
CVE-2024-20098

In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996886; Issue ID: MSV-1626.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Products
Android Yocto Mt6768 and 17 more
CVE-2024-20099

In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08997492; Issue ID: MSV-1625.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Products
Android Yocto Mt6768 and 5 more
CVE-2024-20100

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998449; Issue ID: MSV-1603.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Products
Android Iot Yocto Mt3605 and 16 more
CVE-2020-29367

blosc: heap-based buffer overflow when there is a lack of space to write compressed data

blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when there is a lack of space to write compressed data.

CVSS 3.1 · 7.8 High EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2023-32837

In video, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08250357.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Products
Android Mt6883 Mt6885 and 4 more
CVE-2023-32836

In display, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08126725; Issue ID: ALPS08126725.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android Mt6893 Mt6895 and 4 more
CVE-2023-32832

In video, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08235273; Issue ID: ALPS08235273.

CVSS 3.1 · 7 High EPSS < 1% KEV · Not listed
Vendors
Products
Android Mt6883 Mt6885 and 7 more
CVE-2022-45202

GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC_box_read at isomedia/box_code_3gpp.c.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2022-45640

Tenda Tenda AC6V1.0 V15.03.05.19 is affected by buffer overflow. Causes a denial of service (local).

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Products
CVE-2022-45337

Tenda TX9 Pro v22.03.02.10 was discovered to contain a stack overflow via the list parameter at /goform/SetIpMacBind.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
CVE-2022-45332

LibreDWG v0.12.4.4643 was discovered to contain a heap buffer overflow via the function decode_preR13_section_hdr at decode_r11.c.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Gnu
Products
CVE-2022-44367

Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setUplinkInfo.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Products
CVE-2022-44362

Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/AddSysLogRule.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Products
CVE-2022-44366

Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setDiagnoseInfo.

CVSS 3.1 · 9.8 Critical EPSS 9.9% KEV · Not listed
Vendors
Products
CVE-2022-44365

Tenda i21 V1.0.0.14(4656) has a stack overflow vulnerability via /goform/setSysPwd.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Products
CVE-2022-44363

Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setSnmpInfo.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Products