st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.
Linux
Buffer Overflow
Linux Kernel
Fedora
H300s Firmware
+8
NVD
GitHub
CVSS 3.1
7.8
EPSS
0.4%
A DNS rebinding issue in ReadyMedia (formerly MiniDLNA) before 1.3.1 allows a remote web server to exfiltrate media files. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Authentication Bypass
Readymedia
Debian Linux
NVD
CVSS 3.1
7.4
EPSS
1.6%