Search Results (13521 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-33279 1 Qualcomm 148 Ar9380, Ar9380 Firmware, Csr8811 and 145 more 2024-11-21 9.8 Critical
Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.
CVE-2022-33267 1 Qualcomm 112 Aqt1000, Aqt1000 Firmware, Fastconnect 6200 Firmware and 109 more 2024-11-21 6.7 Medium
Memory corruption in Linux while sending DRM request.
CVE-2022-33264 1 Qualcomm 515 315 5g Iot Modem, 315 5g Iot Modem Firmware, 8953pro and 512 more 2024-11-21 7.9 High
Memory corruption in modem due to stack based buffer overflow while parsing OTASP Key Generation Request Message.
CVE-2022-33260 1 Qualcomm 92 Aqt1000, Aqt1000 Firmware, Qam8295p and 89 more 2024-11-21 5.9 Medium
Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.
CVE-2022-33233 1 Qualcomm 402 Apq8009, Apq8009 Firmware, Apq8009w and 399 more 2024-11-21 7.8 High
Memory corruption due to configuration weakness in modem wile sending command to write protected files.
CVE-2022-33108 1 Xpdfreader 1 Xpdf 2024-11-21 7.8 High
XPDF v4.04 was discovered to contain a stack overflow vulnerability via the Object::Copy class of object.cc files.
CVE-2022-33099 3 Fedoraproject, Lua, Redhat 3 Fedora, Lua, Enterprise Linux 2024-11-21 7.5 High
An issue in the component luaG_runerror of Lua v5.4.4 and below leads to a heap-buffer overflow when a recursive error occurs.
CVE-2022-33087 1 Tp-link 4 Archer A5, Archer A5 Firmware, Archer C50 and 1 more 2024-11-21 7.5 High
A stack overflow in the function DM_ In fillobjbystr() of TP-Link Archer C50&A5(US)_V5_200407 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVE-2022-33047 1 Otfcc Project 1 Otfcc 2024-11-21 9.8 Critical
OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c.
CVE-2022-33034 1 Gnu 1 Libredwg 2024-11-21 7.8 High
LibreDWG v0.12.4.4608 was discovered to contain a stack overflow via the function copy_bytes at decode_r2007.c.
CVE-2022-33032 1 Gnu 1 Libredwg 2024-11-21 7.8 High
LibreDWG v0.12.4.4608 was discovered to contain a heap-buffer-overflow via the function decode_preR13_section_hdr at decode_r11.c.
CVE-2022-33028 1 Gnu 1 Libredwg 2024-11-21 7.8 High
LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function dwg_add_object at decode.c.
CVE-2022-33026 1 Gnu 1 Libredwg 2024-11-21 7.8 High
LibreDWG v0.12.4.4608 was discovered to contain a heap buffer overflow via the function bit_calc_CRC at bits.c.
CVE-2022-33007 1 Trendnet 4 Tew-751dr, Tew-751dr Firmware, Tew-752dru and 1 more 2024-11-21 8.8 High
TRENDnet Wi-Fi routers TEW751DR v1.03 and TEW-752DRU v1.03 were discovered to contain a stack overflow via the function genacgi_main.
CVE-2022-32961 1 Hinet 1 Hicos Natural Person Credential Component Client 2024-11-21 6.8 Medium
HICOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for token information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service.
CVE-2022-32960 1 Hinet 1 Hicos Natural Person Credential Component Client 2024-11-21 6.8 Medium
HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for card number. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service.
CVE-2022-32959 1 Hinet 1 Hicos Natural Person Credential Component Client 2024-11-21 6.8 Medium
HiCOS’ client-side citizen digital certificate component has a stack-based buffer overflow vulnerability when reading IC card due to insufficient parameter length validation for OS information. An unauthenticated physical attacker can exploit this vulnerability to execute arbitrary code, manipulate system data or terminate service.
CVE-2022-32897 1 Apple 1 Macos 2024-11-21 7.8 High
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted tiff file may lead to arbitrary code execution.
CVE-2022-32863 1 Apple 2 Macos, Safari 2024-11-21 9.8 Critical
A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 15.6, macOS Monterey 12.5. Processing maliciously crafted web content may lead to arbitrary code execution.
CVE-2022-32593 2 Google, Mediatek 2 Android, Mt6983 2024-11-21 6.7 Medium
In vowe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07138493; Issue ID: ALPS07138493.