CVEs published in July 2021
1,759 vulnerabilities, 199 critical, 18 exploited.
- htslibHTSlib 1.10 through 1.10.2 allows out-of-bounds write access in vcf_parse_format (called from...8.8 High
- soliditylang soliditySolidity 0.7.5 has a stack-use-after-return issue in smtutil::CHCSmtLib2Interface::querySolver....7.8 High
- mrubymruby 2.1.2 has a double free in mrb_default_allocf (called from mrb_free and obj_free).7.8 High
- zeromq libzmqZeroMQ libzmq 4.3.3 has a heap-based buffer overflow in zmq::tcp_read, a different vulnerability...9.8 Critical
- zope grokGrok 7.6.6 through 9.2.0 has a heap-based buffer overflow in grk::FileFormatDecompress:...7.8 High
- treasuredata fluent bitFluent Bit (aka fluent-bit) 1.7.0 through 1.7,4 has a double free in flb_free (called from...9.8 Critical
- selinux project selinux, fedoraproject fedora, siemens ruggedcom rox mx5000 +13 more +15 moreThe CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called...3.3 Low
- debian linux, selinux project selinux, fedoraproject fedora +19 more +21 moreThe CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from...3.3 Low
- selinux project selinux, fedoraproject fedora, siemens ruggedcom rox mx5000 +13 more +15 moreThe CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...3.3 Low
- selinux project selinux, fedoraproject fedora, siemens ruggedcom rox mx5000 +13 more +15 moreThe CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...3.3 Low
- kde kimageformatsKDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow in XCFImageFormat:...5.5 Medium
- ntop ndpintop nDPI 3.4 has a stack-based buffer overflow in processClientServerHello.8.8 High
- tesseract-ocr tesseract ocrTesseract OCR 5.0.0-alpha-20201231 has a one_ell_conflict use-after-free during a strpbrk call.7.8 High
- gnu libredwgGNU LibreDWG 0.12.3.4163 through 0.12.3.4191 has a double-free in bit_chain_free (called from...8.8 High
- qnap qts, quts hero +1 moreCommand Injection Vulnerabilities in QTS and QuTS hero9.8 Critical
- qnap systems inc. q'center, qnap q\'center +1 moreStored XSS Vulnerability in Q'center5.4 Medium
- qnap qts, quts hero +1 moreCommand Injection Vulnerabilities in QTS and QuTS hero9.8 Critical
- qnap qulog centerStored XSS Vulnerability in QuLog Center6.1 Medium
- qnap qts, quts hero +1 moreXSS Vulnerability in QTS and QuTS heroCommand Injection Vulnerabilities in QTS and QuTS hero6.1 Medium
harfbuzzOSS-FuzzHeap-buffer-overflow in OT::CPALV1Tail::serializeNo scoresleuthkitOSS-FuzzHeap-use-after-free in tsk_fs_attr_set_runNo scoreh2oOSS-FuzzHeap-buffer-overflow in decode_header_value_literalNo score- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, aqt1000 firmware +116 more +118 morePossible out of bound read due to lack of length check of FT sub-elements in Snapdragon Auto,...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm aqt1000 firmware, ar9380 firmware +124 more +126 morePossible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +186 more +188 morePossible buffer over read due to improper validation of IE size while parsing beacon from peer...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +176 more +178 moreDenial of service in SAP case due to improper handling of connections when association is...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +148 more +150 morePossible buffer over read due to improper validation of data pointer while parsing FILS...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, apq8064au firmware +204 more +206 morePossible out of bound read due to lack of length check of Bandwidth-NSS IE in Snapdragon Auto,...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm apq8053 firmware, aqt1000 firmware +175 more +177 morePossible buffer out of bound read can occur due to improper validation of TBTT count and length...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm aqt1000 firmware, ar8031 firmware +65 more +67 moreUse after free can occur due to improper handling of response from firmware in Snapdragon Auto,...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm aqt1000 firmware, ar8031 firmware +119 more +121 morePossible buffer overflow due to improper validation of buffer length while processing fast boot...6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm apq8053 firmware, csrb31024 firmware +82 more +84 morePossible buffer overflow due to lack of length check in BA request in Snapdragon Auto, Snapdragon...7.5 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +40 more +42 morePossible buffer over-read due to lack of length check while flashing meta images in Snapdragon...4.6 Medium
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009w firmware, aqt1000 firmware +39 more +41 morePossible buffer over read due to lack of length check while flashing meta images in Snapdragon...4.6 Medium
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8053 firmware +40 more +42 morePossible buffer over-read due to incorrect overflow check when loading splash image in Snapdragon...4.6 Medium
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +42 more +44 morePossible Buffer Over-read due to lack of validation of boundary checks when loading splash image...4.6 Medium
- google androidIn isRealSnapshot of TaskThumbnailView.java, there is possible data exposure due to a missing...5.5 Medium
- google androidIn generateFileInfo of BluetoothOppSendFileInfo.java, there is a possible way to share private...5.5 Medium
- google androidIn onCreate of ContactSelectionActivity.java, there is a possible way to get access to contacts...7.8 High
- google androidIn onCreateOptionsMenu of WifiNetworkDetailsFragment.java, there is a possible way for guest...7.8 High
- google androidIn encodeFrames of avc_enc_fuzzer.cpp, there is a possible out of bounds write due to a double...5.5 Medium
- google androidIn onCreate of DeviceAdminAdd.java, there is a possible way to mislead a user to activate a...7.8 High
- google androidIn scheduleTimeoutLocked of NotificationRecord.java, there is a possible disclosure of a...5.5 Medium
- google androidIn notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to...5.5 Medium
- google androidIn phNciNfc_RecvMfResp of phNxpExtns_MifareStd.cpp, there is a possible out of bounds read due to...7.5 High
- google androidIn onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to...8.0 High
- google androidIn various functions in WideVine, there are possible out of bounds writes due to improper input...8.8 High
- google androidIn sendNetworkConditionsBroadcast of NetworkMonitor.java, there is a possible way for a...4.4 Medium
- google androidIn BTM_TryAllocateSCN of btm_scn.cc, there is a possible out of bounds write due to an incorrect...7.8 High
- google androidIn processInboundMessage of MceStateMachine.java, there is a possible SMS disclosure due to a...5.5 Medium
- Show moreLoading…