CVEs published in July 2022
2,897 vulnerabilities, 285 critical, 6 exploited.
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux...7.8 High
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in mkv demuxing using HEADERSTRIP decompression. Integer overflow...7.8 High
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in mkv demuxing using lzo decompression. Integer overflow in...7.8 High
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in mkv demuxing using bzip decompression. Integer overflow in...7.8 High
- debian linux, gstreamer +1 moreDOS / potential heap overwrite in mkv demuxing using zlib decompression. Integer overflow in...7.8 High
- debian linux, gstreamer +1 moreInteger overflow in avidemux element in gst_avi_demux_invert function which allows a heap...7.8 High
- debian linux, gstreamer +1 moreInteger overflow in matroskademux element in gst_matroska_demux_add_wvpk_header function which...7.8 High
- jetbrains hubIn JetBrains Hub before 2022.2.14799, insufficient access control allowed the hijacking of...3.5 Low
- bfabiszewski bfabiszewski/libmobi, libmobi project libmobi +1 moreNULL Pointer Dereference in bfabiszewski/libmobi6.6 Medium
- microweber, microweber microweber/microweber +1 moreCross-site Scripting (XSS) - Stored in microweber/microweber6.5 Medium
- openssl, netapp h300s firmware, h410c firmware +8 more +10 moreRSA implementation bug in AVX512IFMA instructions9.8 Critical
spirv-toolsOSS-FuzzHeap-buffer-overflow in spvtools::CFA<spvtools::val::BasicBlock>::CalculateDominatorsNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in Ins_JROFNo scoreghostscriptOSS-FuzzSegv on unknown address in chunk_free_objectNo scoreghostscriptOSS-FuzzHeap-buffer-overflow in InterpNo score- jpegoptim project jpegoptim, fedoraproject fedora +1 moreJPEGOPTIM v1.4.7 was discovered to contain a segmentation violation which is caused by a READ...6.5 Medium
- mariadb, debian linux, fedoraproject fedora +2 moreMariaDB v10.7 was discovered to contain an use-after-poison in in __interceptor_memset at ...7.5 High
- mariadb, fedoraproject fedora +1 moreMariaDB v10.5 to v10.7 was discovered to contain a segmentation fault via the component...7.5 High
- mariadb, debian linux, fedoraproject fedora +2 moreMariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component sub_select.7.5 High
- mariadb, fedoraproject fedora +1 moreMariaDB v10.5 to v10.7 was discovered to contain an assertion failure at table->get_ref_count() =...7.5 High
- mariadb, fedoraproject fedora +1 moreMariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in...7.5 High
- vim, vim vim/vim, fedoraproject fedora +2 moreHeap-based Buffer Overflow in vim/vim7.8 High
- qualcomm, inc. snapdragon connectivity, snapdragon mobile, qualcomm aqt1000 firmware, qca6390 firmware +55 more +57 moreMemory corruption in Bluetooth HOST due to stack-based buffer overflow when when extracting data...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +77 more +79 moreMemory corruption due to use after free issue in kernel while processing ION handles in...8.4 High
- google android, mediatek, inc. mt8167s, mt8175, mt8183, mt8362a, mt8365, mt8385 +1 moreIn Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could...8.8 High
- google android, mediatek, inc. mt8167, mt8175, mt8183, mt8362a, mt8365, mt8385 +1 moreIn Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could...8.8 High
- google android, mediatek, inc. mt6739, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt6895, mt6983, mt6985, mt8321, mt8666, mt8667, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn telecom service, there is a possible information disclosure due to a missing permission check....5.5 Medium
- google android, mediatek, inc. mt6739, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6795, mt6797, mt6799, mt6833, mt6853, mt6853t, mt6873, mt6875, mt6877, mt6879, mt6880, mt6883, mt6885, mt6889, mt6890, mt6891, mt6893, mt6895, mt6983, mt6985, mt8321, mt8666, mt8667, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn telecom service, there is a possible information disclosure due to a missing permission check....5.5 Medium
- mediatek lr11, lr12, lr12a +5 more +7 moreIn Modem 2G RR, there is a possible out of bounds write due to a missing bounds check. This could...9.8 Critical
- google android'remap_pfn_range' here may map out of size kernel memory (for example, may map the kernel area),...9.8 Critical
- google androidA drm driver have oob problem, could cause the system crash or EOPProduct: AndroidVersions:...7.5 High
- google androidIn choosePrivateKeyAlias of KeyChain.java, there is a possible access to the user's certificate...5.5 Medium
- google androidIn bta_hf_client_handle_cind_list_item of bta_hf_client_at.cc, there is a possible out of bounds...9.8 Critical
- google androidIn various functions of C2DmaBufAllocator.cpp, there is a possible memory corruption due to a use...6.5 Medium
- google androidIn USB driver, there is a possible out of bounds read due to a heap buffer overflow. This could...5.5 Medium
- google androidIn finishDrawingWindow of WindowManagerService.java, there is a possible tapjacking due to...3.9 Low
- google androidIn getSubscriptionProperty of SubscriptionController.java, there is a possible read of a...5.5 Medium
- google androidIn AT_SKIP_REST of bta_hf_client_at.cc, there is a possible out of bounds read due to an...7.5 High
- google androidIn assertSafeToStartCustomActivity of AppRestrictionsFragment.java, there is a possible way to...7.8 High
- google androidIn read_attr_value of gatt_db.cc, there is a possible out of bounds write due to a missing bounds...9.8 Critical
- google androidIn avrc_ctrl_pars_vendor_cmd of avrc_pars_ct.cc, there is a possible out of bounds read due to...6.5 Medium
- google androidIn openFile of CallLogProvider.java, there is a possible permission bypass due to a path...7.8 High
- google androidIn multiple functions of StorageManagerService.java and UserManagerService.java, there is a...5.5 Medium
- google androidThere is a unauthorized broadcast in the SprdContactsProvider. A third-party app could use this...6.5 Medium
- google androidandroid exported is used to set third-party app access permissions, and the default value of...9.8 Critical
- mediatek lr11, lr12, lr12a +5 more +7 moreIn Modem 2G/3G CC, there is a possible out of bounds write due to a missing bounds check. This...9.8 Critical
- qualcomm, inc. snapdragon connectivity, snapdragon industrial iot, snapdragon mobile, qualcomm ar8035 firmware, qca6174a firmware +34 more +36 moreUse after free in the synx driver issue while performing other functions during multiple...6.7 Medium