All CVEs — page 968 of 971
The complete archive, 25 per page, newest first. 24271 records. Search instead.
A memory corruption vulnerability exists in Qualcomm's fastboot command handler for audio framework configuration when processing untrusted user input, potentially allowing attackers to execute arbitrary code with high privileges.
This flaw involves memory corruption due to invalid length values in Device Capability Extended attributes within NAN Service Discovery Frames, which could lead to remote code execution.
The flaw allows a transient Denial of Service (DoS) by processing an improperly sized wake time response frame, impacting Qualcomm and related firmware products.
The flaw allows attackers to exploit weak UE configuration checks, potentially leading to unauthorized access or data compromise without proper verification of security capabilities.
The flaw involves memory corruption when processing invalid IOCTL device driver requests, which could lead to arbitrary code execution or system crashes.
The flaw involves memory corruption due to improper handling of malformed request parameters in the fingerprint TA, which could lead to arbitrary code execution or system crashes.
The flaw involves a cryptographic issue where malformed or missing authentication parameters can lead to security vulnerabilities, potentially allowing unauthorized access.
The flaw allows information disclosure when IPSec negotiation fails or is not established properly during NG-eCall SIP signaling, potentially exposing sensitive data.
The flaw involves improper handling of length fields during wireless network channel switch processing, leading to potential information disclosure.
The flaw involves memory corruption when processing registry values with incorrect types using a direct query method, potentially leading to arbitrary code execution.
The flaw involves memory corruption when processing packets near the maximum size, potentially leading to arbitrary code execution.
The flaw allows notebook authors to inject a malicious base_url that exfiltrates operator API keys, compromising security.
The flaw allows unauthenticated attackers to read arbitrary files from the server filesystem by manipulating HTTP request paths, potentially exposing sensitive information.
The flaw allows remote attackers to create a denial of service by submitting a crafted expression with an unbounded loop in a TableMakeViewReq message, blocking the server event loop indefinitely.
The flaw in Perspective 5.0.0 allows unauthenticated attackers to crash the server by sending malformed protobuf messages, leading to a denial-of-service condition.
The flaw allows unauthenticated attackers to execute arbitrary commands by submitting crafted expressions to the PolarsVirtualServer backend, leveraging Python's eval() function.
The flaw allows unauthenticated command injection, enabling attackers to execute arbitrary OS commands and achieve root-level code execution, compromising the device.
The flaw allows unauthenticated attackers to access device functions by sending protocol-conforming packets over TCP port 23456, leading to unauthorized access to live video streams and control of device features.