CVE Vulnerability Catalog

Codiad versions before 2.8.4 are vulnerable to remote command execution because shell commands can be embedded in parameter values, as demonstrated by search_file_type.

There is a vulnerability in the Venkman script debugger in Mozilla Firefox before version 2.0.0.8 that allows for remote code execution.

A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.

In Qualcomm products with Android releases from CAF, in the function __mdss_fb_copy_destscaler_data(), the variable ds_data[i].scale may point to a user-provided address. In the event of an error, this address may be freed, leading to a use after free condition.

All Qualcomm products with Android releases from CAF using the Linux kernel have an issue with improper validation of arguments in several QTEE syscalls.

All Qualcomm products with Android releases from CAF using the Linux kernel have an integer overflow to buffer overflow vulnerability when loading an image file.

All Qualcomm products with Android releases from CAF using the Linux kernel may have an issue with a driver that can potentially leak kernel memory.

All Qualcomm products with Android releases from CAF using the Linux kernel have an issue with improper length checking in an HCI command.

All Qualcomm products with Android releases from CAF using the Linux kernel may consume excessive amounts of memory when downloading a file.

All Qualcomm products with Android releases from CAF using the Linux kernel have a configuration vulnerability when loading a 3rd-party QTEE application.

All Qualcomm products with Android releases from CAF using the Linux kernel may be vulnerable to an assertion that could be reachable in a handover scenario.

All Qualcomm products with Android releases from CAF using the Linux kernel have an array index out of bounds vulnerability in LPP.

All Qualcomm products with Android releases from CAF using the Linux kernel have a use-after-free vulnerability in IMS RCS.

All Qualcomm products with Android releases from CAF using the Linux kernel may have a reachable assertion in a WLAN driver ioctl.

All Qualcomm products with Android releases from CAF using the Linux kernel have insufficient access control to the I2C bus.

All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to an issue where the UE can send unprotected MeasurementReports revealing UE location.

All Qualcomm products with Android releases from CAF using the Linux kernel are vulnerable to revealing the end user's (UE) location through unprotected MeasurementReports.

All Qualcomm products with Android releases from CAF using the Linux kernel have an issue with improper validation of an argument passed to a hypervisor function.

All Qualcomm products with Android releases from CAF using the Linux kernel have an integer overflow vulnerability in the hypervisor.

All Qualcomm products with Android releases from CAF using the Linux kernel may be vulnerable to the use of an out-of-range pointer offset in LTE.