CVEs published in October 2022
2,275 vulnerabilities, 287 critical, 9 exploited.
KernelLinuxspi: bitbang: Fix lsb-first RxNo scoreKernelLinuxnvmet: fix a use-after-freeNo scoreKernelLinuxregmap: spi: Reserve space for register address/paddingNo scoreKernelLinuxscsi: mpt3sas: Fix use-after-free warningNo scoreKernelLinuxRDMA/irdma: Fix drain SQ hang with no completionNo scoreKernelLinuxtee: fix compiler warning in tee_shm_register()No scoreKernelLinuxsoc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugsNo scoreKernelLinuxsch_sfb: Don't assume the skb is still around after enqueueing to childNo scoreKernelLinuxRDMA/srp: Set scmnd->result only when scmnd is not NULLNo scoreKernelLinuxnetfilter: nf_tables: clean up hook list when offload flags check failsNo scoreKernelLinuxice: Fix DMA mappings leakNo scoreKernelLinuxtcp: TX zerocopy should not sense pfmemalloc statusNo scoreKernelLinuxi40e: Fix kernel crash during module removalNo scoreKernelLinuxipv6: sr: fix out-of-bounds read when setting HMAC data.No scoreKernelLinuxnvme-tcp: fix UAF when detecting digest errorsNo scoreKernelLinuxIB/core: Fix a nested dead lock as part of ODP flowNo scoreKernelLinuxerofs: fix pcluster use-after-free on UP platformsNo scoreKernelLinuxRDMA/irdma: Report the correct max cqes from query deviceNo scoreKernelLinuxnet/smc: Fix possible access to freed memory in link clearNo scoreKernelLinuxswiotlb: avoid potential left shift overflowNo scoreKernelLinuxs390/boot: fix absolute zero lowcore corruption on bootNo scoreKernelLinuxof: fdt: fix off-by-one error in unflatten_dt_nodes()No scoreKernelLinuxcgroup: Add missing cpus_read_lock() to cgroup_attach_task_all()No scoreKernelLinuxpeci: cpu: Fix use-after-free in adev_release()No scoreKernelLinuxieee802154: cc2520: add rc code in cc2520_tx()No score- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +1 more +3 moreUncontrolled Resource Consumption in FasterXML jackson-databind7.5 High
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +1 more +3 moreUncontrolled Resource Consumption in Jackson-databind7.5 High
- google chromeOut of bounds write in V8 in Google Chrome prior to 106.0.5249.91 allowed a remote attacker to...8.8 High
- google chromeUse after free in Custom Elements in Google Chrome prior to 106.0.5249.91 allowed a remote...8.8 High
- llhttp, nodejs node, debian linux +2 more +4 moreThe llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that...6.5 Medium
parity-wasmcrates.ioCrate `parity-wasm` deprecated by the authorNo scorehunspellOSS-FuzzHeap-buffer-overflow in AffixMgr::cpdcase_checkNo score- qualcomm, inc. snapdragon mobile, qualcomm sd 8 gen1 5g firmware, wcd9380 firmware +6 more +8 moreMemory corruption in Qualcomm IPC due to buffer copy without checking the size of input while...7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, qam8295p firmware +100 more +102 moreMemory corruption in display due to time-of-check time-of-use of metadata reserved size in...8.4 High
- google android, mediatek, inc. mt6739, mt6761, mt6762, mt6763, mt6765, mt6768, mt6769, mt6771, mt6779, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6875, mt6877, mt6879, mt6883, mt6885, mt6889, mt6891, mt6893, mt6895, mt6983, mt8321, mt8385, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn ims, there is a possible escalation of privilege due to a parcel format mismatch. This could...7.8 High
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6765, mt6768, mt6781, mt6785, mt6789, mt6833, mt6853, mt6853t, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6889, mt6893, mt6895, mt6983, mt8321, mt8385, mt8666, mt8675, mt8765, mt8766, mt8768, mt8786, mt8788, mt8789, mt8791, mt8797 +1 moreIn telephony, there is a possible escalation of privilege due to a parcel format mismatch. This...7.8 High
- qualcomm, inc. snapdragon mobile, qualcomm sd 8 gen1 5g firmware, wcd9380 firmware +6 more +8 moreMemory corruption in multimedia due to use after free during callback registration failure in...8.4 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, snapdragon wearables, qualcomm apq8009 firmware, apq8009w firmware +183 more +185 moreMemory corruption in WLAN due to out of bound array access during connect/roaming in Snapdragon...9.8 Critical
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking, qualcomm apq8096au firmware, aqt1000 firmware +146 more +148 moreMemory corruption due to use after free in service while trying to access maps by different...6.7 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm apq8009 firmware, apq8052 firmware +108 more +110 moreInformation disclosure due to exposure of information while GPU reads the data in Snapdragon Auto...6.2 Medium
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon wearables, qualcomm aqt1000 firmware, ar8035 firmware +65 more +67 moreDenial of service in BOOT when partition size for a particular partition is requested due to...4.6 Medium
- qualcomm, inc. snapdragon mobile, qualcomm sd 8 gen1 5g firmware, wcd9380 firmware +6 more +8 moreMemory corruption in graphics due to use-after-free in graphics dispatcher logic in Snapdragon...8.4 High
- google androidIn various functions of ap_input_processor.c, there is a possible way to record audio during a...5.5 Medium
- google androidIn Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product:...5.5 Medium
- google androidIn Messaging, There has unauthorized provider, this could cause Local Deny of Service.Product:...5.5 Medium
- google androidIn Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product:...5.5 Medium
- google androidIn Messaging, There has unauthorized broadcast, this could cause Local Deny of Service.Product:...5.5 Medium
- google androidThere is an unauthorized service in the system service. Since the component does not have...7.8 High
- google androidThere is a Unauthorized service in the system service, may cause the system reboot. Since the...7.8 High
- google androidThere is an missing authorization issue in the system service. Since the component does not have...7.8 High
- Show moreLoading…