CVE Vulnerability Catalog

In CPM, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

In bigo_worker_thread of bigo.c, there is a possible escalation of privilege due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

In ReadDataElement of common.c, an incorrect bounds check may lead to information disclosure. Exploitation requires local access and no additional execution privileges or user interaction.

In multiple locations, there is a possible permission bypass due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

In multiple locations, a permission bypass is possible due to side channel information disclosure. This could lead to local privilege escalation without additional execution privileges or user interaction.

In gmc_mb_msg_handler of gmc_mba.c, a memory corruption is possible due to a confused deputy. This could lead to local privilege escalation requiring System execution privileges.

In multiple functions of remap.c, an out-of-bounds write is possible due to an incorrect bounds check. This could lead to local privilege escalation requiring System execution privileges.

In multiple locations, an out-of-bounds write is possible due to improper input validation. This could lead to local privilege escalation requiring System execution privileges.

In printf of printf.c, an out-of-bounds write is possible due to improper input validation. This could lead to local privilege escalation requiring System execution privileges.

In addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

On affected platforms running Arista EOS with password authentication configured, a specially crafted password can create orphan authentication sessions. Repeated exploitation can exhaust authentication resources, preventing legitimate users from logging in.

Fabric.js loadFromJSON Server-Side Request Forgery vulnerability. Lack of proper URI validation before accessing resources may allow remote attackers to disclose sensitive information and access network resources.

In VPU, an information disclosure is possible due to a logic error in the code. This could lead to local information disclosure requiring System execution privileges.

In Bootloader, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

In gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

In ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

In CPM, there is a possible information disclosure due to a confused deputy. Exploitation requires System execution privileges but no user interaction.

In Bootloader, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.