CVE Vulnerability Catalog

In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 processors, an information leak occurs due to insertion of sensitive information into debugging code.

A security vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. It affects an unknown part of /subject1.php, and manipulation of the subject argument leads to cross site scripting. The attack can be executed remotely and the exploit has been publicly disclosed.

A weakness was identified in FedML-AI FedML up to 0.9.6. It affects the S3Storage.read_model function in fedml/core/distributed/communication/s3/remote_storage.py of the MQTT+S3 Communication Backend component, and manipulation of the s3_key_str argument causes deserialization. Remote exploitation is possible and the project has not responded to the report.

In GPAC up to f1219cde, a vulnerability was found in the function stbl_GetSampleInfos of file isomedia/stbl_read.c in the MP4Box component. The manipulation results in a reachable assertion, the attack requires local access, and the exploit has been publicly released.

In GPAC up to f1219cde, a vulnerability was identified in the function gf_sm_dump_command_list of file scene_manager/scene_dump.c in the MP4Box component. The manipulation leads to a reachable assertion, the attack requires local access, and the exploit is publicly available.

In GPAC up to f1219cde, a vulnerability was determined in the function xmt_parse_element of file scene_manager/loader_xmt.c in the MP4Box component. The manipulation leads to a reachable assertion, the attack is restricted to local execution, and the exploit has been publicly disclosed.

In GPAC up to f1219cde, a vulnerability was found in the function gf_svg_attributes_copy of file scenegraph/svg_attributes.c in the MP4Box component. The manipulation results in a buffer over-read, the attack is only possible with local access, and the exploit has been made public.

An untrusted pointer dereference vulnerability was discovered in the camera component of Samsung Exynos 1580 and 2500 processors. Sending a malformed message to the camera driver causes limited information disclosure or denial of service.

A stack-based buffer overflow was discovered in the camera of Samsung Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680 mobile processors. It occurs when a malformed message is sent to the camera driver, causing a denial of service.

In the Wi-Fi module of Samsung Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930 processors, a malformed Netlink command can trigger an out-of-bounds read, potentially leading to information leakage.

In Samsung Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000 processors, a malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of service (DoS).

A vulnerability was found in the CustOS driver of Samsung Exynos 1580. Requesting oversized shared memory from the custos_iwc device enables out-of-bounds read and write, potentially leading to memory corruption or information leakage.

In the camera driver of Samsung Exynos 1330, 1380, 1480, 2400, 1580, and 2500 processors, sending a malformed message to the test_msg sysfs entry causes an out-of-bounds write, leading to a denial of service.

An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and BioStar X before 1.0.2 allows attackers to obtain Active Directory service account credentials in cleartext by supplying a crafted GET request.

A vulnerability was discovered in Samsung Exynos 1330, 1380, 1480, and 2400 mobile processors. An out-of-bounds memory access in the camera GDC driver may lead to kernel memory corruption under certain conditions.

Incorrect handling of unauthenticated downlink RRC Setup messages was found in the NR RRC component of Samsung Exynos processors and modems (including 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, W1000, Modem 5300, 5400, 5410). This can cause the baseband to crash.

An out-of-bounds write exists in the DPU driver of Samsung Exynos processors (1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, 2600) due to missing input length validation in color mode LUT parsing. This leads to kernel memory corruption and potential privilege escalation.

A double-free vulnerability exists in the Samsung Exynos DPU driver (1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, 2600) due to improper pointer management during DMA buffer reallocation. This leads to kernel memory corruption and a potential use-after-free.

A double-free vulnerability was discovered in the MFC module of Samsung Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 2600, 1680, W920, W930, and W1000 processors. The flaw in the Exynos MFC encoder driver, caused by improper cleanup of dma_buf references during error handling, leads to kernel memory corruption and potential arbitrary code execution.

A heap overflow exists in the Exynos DRM HDR driver of Samsung Exynos processors (1280, 2200, 1380) due to improper buffer size validation. This leads to kernel memory corruption and a system crash.