| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| In the Samsung Exynos H-Arx DRM plugin, improper input validation during buffer operations can cause memory corruption, potentially leading to denial of service or privilege escalation. |
| In the Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service |
| Insufficient length validation in the GNSS firmware loader may lead to corruption of kernel memory. |
| Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption. |
| In the Samsung Exynos NPU driver, improper validation of user input in the ioctl handler can lead to an out-of-bounds write, which causes a denial of service. |
| Integer overflow in NPU driver parameter processing due to insufficient bounds checking. |
| In the Samsung Exynos NPU kernel driver, an integer overflow allows an unprivileged application to trigger memory corruption. |
| Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions |
| A double free vulnerability in NPU driver due to improper pointer management (941) |
| A double free vulnerability in NPU driver due to improper pointer management (940) |
| Improper handling of messages before AS security activation can cause unexpected behavior |
| Out of bound access in PPC due to race condition in global variable access |
| Processing a malformed RRC message leads to an out-of-bounds read, resulting in a denial-of-service condition. |
| In the baseband, memory corruption during NAS packet processing can cause a denial of service. |
| In the NR RRC component, improper handling of messages before authentication triggers a data abort, which leads to a denial‑of‑service condition. |
| In the NAS message handler, improper validation of the length field in NAS message causes memory corruption |
| @twilio-labs/netlify-okta-auth through 1.0.2 relies on an unverified iss claim. This affects an outbound HTTP request to retrieve a public signing key. There may be other impacts in a misconfiguration where oktaUrl isn't set. |
| Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Malicious Software Update.
This issue affects EasyIO Neo IOManager and Tools Installer: 1.1.0.0. |
| A reflected cross-site scripting (XSS) vulnerability in the login/SSO error page of INFINITT ULite 5.0.2.1_BN48_20260528 and earlier allows an unauthenticated remote attacker to execute arbitrary JavaScript in the browser of a victim who opens a crafted link. An unsanitized request parameter is reflected without output encoding. Fixed in ULite 5.0.2.1 BN50. |
| INFINITT ULite 5.0.2.1_BN48_20260528 and earlier protects image-share links with a low-entropy password and does not restrict repeated password attempts, allowing an unauthenticated remote attacker to brute-force the password within the link validity window and gain unauthorized access to shared medical images. Fixed in ULite 5.0.2.1 BN50. |
