CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +123 more +125 morePossible out of bound write in RAM partition table due to improper validation on number of...8.4 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca6390 firmware +60 more +62 morePossible access control violation while setting current permission for VMIDs due to improper...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +124 more +126 moreImproper input validation in TrustZone memory transfer interface can lead to information...7.1 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca6390 firmware +56 more +58 moreImproper access control while doing XPU re-configuration dynamically can lead to unauthorized...9.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +125 more +127 morePossible integer overflow in page alignment interface due to lack of address and size validation...9.3 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +124 more +126 morePossible integer overflow in access control initialization interface due to lack and size and...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon wearables, qualcomm apq8009w firmware, apq8096au firmware +72 more +74 morePossible assertion due to improper handling of IPV6 packet with invalid length in destination...7.5 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +194 more +196 morePossible null pointer dereference in thread cache operation handler due to lack of validation of...7.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +164 more +166 morePossible null pointer dereference in trap handler due to lack of thread ID validation before...7.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8009w firmware, apq8017 firmware +153 more +155 morePossible null pointer dereference in thread profile trap handler due to lack of thread ID...7.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +115 more +117 morePossible null pointer dereference due to lack of TLB validation for user provided address in...7.3 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009w firmware, apq8017 firmware +135 more +137 morePossible heap Memory Corruption Issue due to lack of input validation when sending HWTC IQ...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm aqt1000 firmware, ar8035 firmware +86 more +88 morePossible integer overflow to buffer overflow due to improper input validation in FTM ARA commands...7.8 High
- qualcomm, inc. snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, qualcomm qca6391 firmware, qcm6490 firmware +28 more +30 moreImproper handling of resource allocation in virtual machines can lead to information exposure in...6.5 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon voice & music, snapdragon wired infrastructure and networking, qualcomm ar8031 firmware, ar8035 firmware +115 more +117 moreImproper access control in TrustZone due to improper error handling while handling the signing...7.1 High
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wired infrastructure and networking, qualcomm ar8035 firmware, qca6390 firmware +59 more +61 moreAn integer overflow due to improper check performed after the address and size passed are aligned...7.3 High
- userfrostingUserfrosting - Host-Header Injection Leads to Account Takeover8.8 High
- debiki talkyardTalkyard - Insufficient Session Expiration9.8 Critical
- showdoc, star7th star7th/showdoc +1 moreGeneration of Error Message Containing Sensitive Information in star7th/showdoc5.3 Medium
saltDebiansalt - regression updateNo scorewindowscrates.ioDelegate functions are missing `Send` bound9.8 Critical- mruby, mruby mruby/mruby +1 moreHeap-based Buffer Overflow in mruby/mruby8.2 High
grokOSS-FuzzHeap-buffer-overflow in grk::GrkImage::cieLabToRGBNo scorecurlOSS-FuzzHeap-buffer-overflow in Curl_sasl_decode_mechNo score- encsecurity datavaultENC DataVault 7.1.1W uses an inappropriate encryption algorithm, such that an attacker (who does...4.2 Medium
- dolibarr erp\/crmCross site scripting in dolibarr5.4 Medium
- dmproadmap project dmproadmapDMP Roadmap before 3.0.4 allows XSS.6.1 Medium
- giftrans project giftrans, debian linux +1 moreThe giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value...7.1 High
- libexpat project libexpat, debian linux, netapp active iq unified manager +8 more +10 moreIn Expat (aka libexpat) before 2.4.3, a left shift by 29 (or more) places in the storeAtts...8.8 High
rustc-serializecrates.ioStack overflow in rustc_serialize when parsing deeply nested JSONNo score- biostar racing gt evoAn issue was discovered in BS_RCIO64.sys in Biostar RACING GT Evo 2.1.1905.1700. A low-integrity...7.8 High
- datalogic dxuThe Datalogic DXU service on (for example) DL-Axist devices does not require authentication for...6.5 Medium
ghostscriptOSS-FuzzNegative-size-param in general_endcidrange_funcNo scorecurlOSS-FuzzHeap-buffer-overflow in seturlNo score- mediatek l9, lr11, lr12 +3 more +5 moreIn Modem EMM, there is a possible information disclosure due to a missing data encryption. This...7.5 High
- google androidIn target_init of gs101/abl/target/slider/target.c, there is a possible allocation of RWX memory...7.8 High
- google androidIn copy_from_mbox of sss_ice_util.c, there is a possible out of bounds write due to a missing...6.7 Medium
- google androidIn mgm_alloc_page of memory_group_manager.c, there is a possible out of bounds write due to an...7.8 High
- google androidIn delete_protocol of main.c, there is a possible arbitrary code execution due to a use after...7.8 High
- google androidIn sec_SHA256_Transform of sha256_core.c, there is a possible way to read heap data due to...4.4 Medium
- google androidIn init of vendor_graphicbuffer_meta.cpp, there is a possible use after free due to a race...7.0 High
- google androidIn <TBD> of <TBD>, there is a possible bypass of Factory Reset Protection due to <TBD>. This...7.8 High
- google androidIn sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible...5.5 Medium
- google androidIn fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of...7.8 High
- google androidIn gre_handle_offloads of ip_gre.c, there is a possible page fault due to an invalid memory...5.5 Medium
- google androidIn inotify_cb of events.cpp, there is a possible out of bounds write due to an incorrect bounds...7.8 High
- google androidIn executeRequest of OverlayManagerService.java, there is a possible way to control fabricated...7.8 High
- google androidIn phTmlNfc_Init and phTmlNfc_CleanUp of phTmlNfc.cc, there is a possible use after free due to a...7.0 High
- google androidIn StatusBar.java, there is a possible disclosure of notification content on the lockscreen due...3.3 Low
- google androidIn sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions...7.8 High
- Show moreLoading…