Skip to main content

Buffer Overflow

39266 CVEs technique

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2022-42510 Dec 16, 16:15 MEDIUM This Month

In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validation. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Information Disclosure Google Android
NVD VulDB
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-42509 Dec 16, 16:15 MEDIUM This Month

In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD VulDB
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-42508 Dec 16, 16:15 MEDIUM This Month

In ProtocolCallBuilder::BuildSendUssd of protocolcallbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD VulDB
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-42507 Dec 16, 16:15 MEDIUM This Month

In ProtocolSimBuilder::BuildSimUpdatePb3gEntry of protocolsimbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD VulDB
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-42506 Dec 16, 16:15 MEDIUM This Month

In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD VulDB
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-42505 Dec 16, 16:15 MEDIUM This Month

In ProtocolMiscBuilder::BuildSetSignalReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to an incorrect bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD VulDB
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-42504 Dec 16, 16:15 MEDIUM This Month

In CallDialReqData::encodeCallNumber of callreqdata.cpp, there is a possible out of bounds write due to an incorrect bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD VulDB
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-42503 Dec 16, 16:15 MEDIUM This Month

In ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD VulDB
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-42502 Dec 16, 16:15 MEDIUM This Month

In FacilityLock::Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD VulDB
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-42501 Dec 16, 16:15 MEDIUM This Month

In HexString2Value of util.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD VulDB
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-20610 Dec 16, 16:15 HIGH This Week

In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
8.8
EPSS
0.7%
CVE-2022-20609 Dec 16, 16:15 MEDIUM This Month

In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2022-20608 Dec 16, 16:15 MEDIUM This Month

In Pixel cellular firmware, there is a possible out of bounds read due to an incorrect bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2022-20607 Dec 16, 16:15 HIGH This Week

In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
8.8
EPSS
0.9%
CVE-2022-20606 Dec 16, 16:15 MEDIUM This Month

In SAEMM_MiningCodecTableWithMsgIE of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
4.9
EPSS
0.8%
CVE-2022-20605 Dec 16, 16:15 HIGH This Week

In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
7.5
EPSS
0.8%
CVE-2022-20604 Dec 16, 16:15 MEDIUM This Month

In SAECOMM_SetDcnIdForPlmn of SAECOMM_DbManagement.c, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
5.5
EPSS
0.3%
CVE-2022-20603 Dec 16, 16:15 HIGH This Week

In SetDecompContextDb of RohcDeCompContextOfRbId.cpp, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
7.2
EPSS
0.9%
CVE-2022-20602 Dec 16, 16:15 HIGH This Week

Product: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/A. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Google Android
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2022-20601 Dec 16, 16:15 HIGH This Week

Product: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/A. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Google Android
NVD
CVSS 3.1
7.5
EPSS
0.5%
CVE-2022-20600 Dec 16, 16:15 HIGH This Week

In TBD of TBD, there is a possible out of bounds write due to memory corruption. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-20599 Dec 16, 16:15 MEDIUM This Month

In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-20596 Dec 16, 16:15 MEDIUM This Month

In sendChunk of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-20595 Dec 16, 16:15 MEDIUM This Month

In getWpcAuthChallengeResponse of WirelessCharger.cpp, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
4.4
EPSS
0.2%
CVE-2022-20594 Dec 16, 16:15 MEDIUM This Month

In updateStart of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-20593 Dec 16, 16:15 MEDIUM This Month

In pop_descriptor_string of BufferDescriptor.h, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
4.4
EPSS
0.2%
CVE-2022-20583 Dec 16, 16:15 MEDIUM This Month

In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-20582 Dec 16, 16:15 HIGH This Week

In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2022-20580 Dec 16, 16:15 MEDIUM This Month

In ufdt_do_one_fixup of ufdt_overlay.c, there is a possible out of bounds write due to an incorrect bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-20579 Dec 16, 16:15 MEDIUM This Month

In RadioImpl::setCdmaBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-20578 Dec 16, 16:15 MEDIUM This Month

In RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-20577 Dec 16, 16:15 MEDIUM This Month

In OemSimAuthRequest::encode of wlandata.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-20576 Dec 16, 16:15 MEDIUM This Month

In externalOnRequest of rilapplication.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-20575 Dec 16, 16:15 MEDIUM This Month

In read_ppmpu_info of drm_fw.c, there is a possible out of bounds read due to an incorrect bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2022-20574 Dec 16, 16:15 MEDIUM This Month

In sec_sysmmu_info of drm_fw.c, there is a possible out of bounds read due to improper input validation. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2022-20570 Dec 16, 16:15 MEDIUM This Month

Product: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/A. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Google Android
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2022-20569 Dec 16, 16:15 MEDIUM This Month

In thermal_cooling_device_stats_update of thermal_sysfs.c, there is a possible out of bounds write due to improper input validation. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-20564 Dec 16, 16:15 MEDIUM PATCH This Month

In _ufdt_output_strtab_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-20563 Dec 16, 16:15 MEDIUM PATCH This Month

In TBD of ufdt_convert, there is a possible out of bounds read due to memory corruption. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Privilege Escalation Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-20561 Dec 16, 16:15 HIGH This Week

In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Denial Of Service Google Use After Free +2
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2022-20560 Dec 16, 16:15 HIGH PATCH This Week

Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

Buffer Overflow Google Android
NVD
CVSS 3.1
7.5
EPSS
0.3%
CVE-2022-20557 Dec 16, 16:15 MEDIUM PATCH This Month

In MessageQueueBase of MessageQueueBase.h, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Privilege Escalation Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-20555 Dec 16, 16:15 MEDIUM PATCH This Month

In ufdt_get_node_by_path_len of ufdt_convert.c, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
4.4
EPSS
0.2%
CVE-2022-20552 Dec 16, 16:15 MEDIUM PATCH This Month

In btif_a2dp_sink_command_ready of btif_a2dp_sink.cc, there is a possible out of bounds read due to a use after free. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Buffer Overflow Denial Of Service Information Disclosure Google Use After Free +2
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2022-20549 Dec 16, 16:15 MEDIUM PATCH This Month

In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-20548 Dec 16, 16:15 HIGH PATCH This Week

In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
7.8
EPSS
0.1%
CVE-2022-20546 Dec 16, 16:15 MEDIUM PATCH This Month

In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-20541 Dec 16, 16:15 MEDIUM PATCH This Month

In phNxpNciHal_ioctl of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.2), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
4.2
EPSS
0.2%
CVE-2022-20539 Dec 16, 16:15 MEDIUM PATCH This Month

In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.1%
CVE-2022-20528 Dec 16, 16:15 LOW PATCH Monitor

In findParam of HevcUtils.cpp there is a possible out of bounds read due to a missing bounds check. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Privilege Escalation Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
3.3
EPSS
0.1%
CVE-2022-20527 Dec 16, 16:15 MEDIUM This Month

In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
5.5
EPSS
0.1%
CVE-2022-20526 Dec 16, 16:15 LOW PATCH Monitor

In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check. Rated low severity (CVSS 3.3), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
3.3
EPSS
0.1%
CVE-2022-20523 Dec 16, 16:15 MEDIUM PATCH This Month

In IncFs_GetFilledRangesStartingFrom of incfs.cpp, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2022-20516 Dec 16, 16:15 HIGH PATCH This Week

In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Information Disclosure Google Integer Overflow Android
NVD
CVSS 3.1
7.5
EPSS
0.8%
CVE-2022-20514 Dec 16, 16:15 MEDIUM PATCH This Month

In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.cpp, there is a possible out of bounds write due to a use after free. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity.

Privilege Escalation Buffer Overflow Denial Of Service Google Use After Free +2
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-20513 Dec 16, 16:15 MEDIUM POC This Month

In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Information Disclosure Google Android
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2022-20509 Dec 16, 16:15 MEDIUM PATCH This Month

In mapGrantorDescr of MessageQueueBase.h, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Google Memory Corruption Android
NVD
CVSS 3.1
6.7
EPSS
0.2%
CVE-2022-46393 Dec 15, 23:15 CRITICAL Act Now

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Fedora Mbed Tls Arm +2
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.9%
CVE-2022-46700 Dec 15, 19:15 HIGH This Week

A memory corruption issue was addressed with improved input validation. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS +5
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2022-46699 Dec 15, 19:15 HIGH This Week

A memory corruption issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS +5
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2022-46697 Dec 15, 19:15 HIGH This Week

An out-of-bounds access issue was addressed with improved bounds checking. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-46696 Dec 15, 19:15 HIGH This Week

A memory corruption issue was addressed with improved input validation. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS +5
NVD
CVSS 3.1
8.8
EPSS
1.2%
CVE-2022-46694 Dec 15, 19:15 HIGH This Week

An out-of-bounds write issue was addressed with improved input validation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple Ipados +3
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-46693 Dec 15, 19:15 HIGH This Week

An out-of-bounds write issue was addressed with improved input validation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS +6
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-46691 Dec 15, 19:15 HIGH This Week

A memory consumption issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS +5
NVD
CVSS 3.1
8.8
EPSS
1.5%
CVE-2022-46690 Dec 15, 19:15 HIGH This Week

An out-of-bounds write issue was addressed with improved input validation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS +4
NVD
CVSS 3.1
7.8
EPSS
0.5%
CVE-2022-42863 Dec 15, 19:15 HIGH This Week

A memory corruption issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS +5
NVD VulDB
CVSS 3.1
8.8
EPSS
1.1%
CVE-2022-42851 Dec 15, 19:15 MEDIUM This Month

The issue was addressed with improved memory handling. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Apple Ipados Iphone Os +1
NVD VulDB
CVSS 3.1
5.5
EPSS
0.3%
CVE-2022-42850 Dec 15, 19:15 HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple Ipados +1
NVD VulDB
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-42847 Dec 15, 19:15 HIGH This Week

An out-of-bounds write issue was addressed with improved input validation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS
NVD VulDB
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-42846 Dec 15, 19:15 MEDIUM This Month

The issue was addressed with improved memory handling. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Apple Ipados Iphone Os
NVD VulDB
CVSS 3.1
5.5
EPSS
0.3%
CVE-2022-42845 Dec 15, 19:15 HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS +4
NVD
CVSS 3.1
7.2
EPSS
1.6%
CVE-2022-42844 Dec 15, 19:15 HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 8.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Apple Ipados Iphone Os
NVD VulDB
CVSS 3.1
8.6
EPSS
0.4%
CVE-2022-42842 Dec 15, 19:15 CRITICAL Act Now

The issue was addressed with improved memory handling. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS +4
NVD
CVSS 3.1
9.8
EPSS
2.2%
CVE-2022-42840 Dec 15, 19:15 HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS +2
NVD VulDB
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-32948 Dec 15, 19:15 HIGH This Week

An out-of-bounds read was addressed with improved bounds checking. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Apple macOS +2
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2022-32943 Dec 15, 19:15 MEDIUM This Month

The issue was addressed with improved bounds checks. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Apple macOS Ipados +1
NVD
CVSS 3.1
5.3
EPSS
0.7%
CVE-2022-32942 Dec 15, 19:15 HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Apple macOS
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-32916 Dec 15, 19:15 MEDIUM This Month

An out-of-bounds read issue existed that led to the disclosure of kernel memory. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Apple Iphone Os
NVD
CVSS 3.1
5.5
EPSS
0.2%
CVE-2022-32860 Dec 15, 19:15 HIGH This Week

An out-of-bounds write was addressed with improved input validation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Apple macOS +2
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-22063 Dec 15, 19:15 HIGH This Week

Memory corruption in Core due to improper configuration in boot remapper. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Qualcomm Mdm9640 Firmware Qca6174a Firmware +6
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-46344 Dec 14, 21:15 HIGH This Week

A vulnerability was found in X.Org. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure Debian Debian Linux +4
NVD
CVSS 3.1
8.8
EPSS
2.7%
CVE-2022-46341 Dec 14, 21:15 HIGH This Week

A vulnerability was found in X.Org. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Debian Debian Linux +4
NVD
CVSS 3.1
8.8
EPSS
2.5%
CVE-2022-46340 Dec 14, 21:15 HIGH This Week

A vulnerability was found in X.Org. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption Debian Debian Linux +4
NVD
CVSS 3.1
8.8
EPSS
2.5%
CVE-2022-2601 Dec 14, 21:15 HIGH This Week

A buffer overflow was found in grub_font_construct_glyph(). Rated high severity (CVSS 8.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Heap Overflow Red Hat Enterprise Linux Eus Enterprise Linux For Power Little Endian Eus +8
NVD VulDB
CVSS 3.1
8.6
EPSS
0.1%
CVE-2022-31705 Dec 14, 19:15 HIGH This Week

VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption VMware ESXi +2
NVD
CVSS 3.1
8.2
EPSS
1.5%
CVE-2022-44910 Dec 14, 18:15 HIGH POC This Week

Binbloom 2.0 was discovered to contain a heap buffer overflow via the read_pointer function at /binbloom-master/src/helpers.c. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Binbloom
NVD GitHub
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-44898 Dec 14, 15:15 HIGH POC This Week

The MsIo64.sys component in Asus Aura Sync through v1.07.79 does not properly validate input to IOCTL 0x80102040, 0x80102044, 0x80102050, and 0x80102054, allowing attackers to trigger a memory. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption Aura Sync Asus
NVD
CVSS 3.1
7.8
EPSS
0.4%
CVE-2022-44874 Dec 13, 23:15 MEDIUM POC This Month

wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component op_CallIndirect at /m3_exec.h. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Wasm3 Wasm3 Project
NVD GitHub
CVSS 3.1
5.5
EPSS
0.3%
CVE-2022-2951 Dec 13, 21:15 HIGH PATCH This Week

Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of array index vulnerability during processing of H3D files. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Buffer Overflow Altair Hyperview Player
NVD
CVSS 3.1
7.8
EPSS
0.3%
CVE-2022-42510
EPSS 0% CVSS 6.7
MEDIUM This Month

In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validation. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Information Disclosure +2
NVD VulDB
CVE-2022-42509
EPSS 0% CVSS 6.7
MEDIUM This Month

In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD VulDB
CVE-2022-42508
EPSS 0% CVSS 6.7
MEDIUM This Month

In ProtocolCallBuilder::BuildSendUssd of protocolcallbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD VulDB
CVE-2022-42507
EPSS 0% CVSS 6.7
MEDIUM This Month

In ProtocolSimBuilder::BuildSimUpdatePb3gEntry of protocolsimbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD VulDB
CVE-2022-42506
EPSS 0% CVSS 6.7
MEDIUM This Month

In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD VulDB
CVE-2022-42505
EPSS 0% CVSS 6.7
MEDIUM This Month

In ProtocolMiscBuilder::BuildSetSignalReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to an incorrect bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD VulDB
CVE-2022-42504
EPSS 0% CVSS 6.7
MEDIUM This Month

In CallDialReqData::encodeCallNumber of callreqdata.cpp, there is a possible out of bounds write due to an incorrect bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD VulDB
CVE-2022-42503
EPSS 0% CVSS 6.7
MEDIUM This Month

In ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD VulDB
CVE-2022-42502
EPSS 0% CVSS 6.7
MEDIUM This Month

In FacilityLock::Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD VulDB
CVE-2022-42501
EPSS 0% CVSS 6.7
MEDIUM This Month

In HexString2Value of util.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD VulDB
CVE-2022-20610
EPSS 1% CVSS 8.8
HIGH This Week

In cellular modem firmware, there is a possible out of bounds read due to a missing bounds check. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +2
NVD
CVE-2022-20609
EPSS 0% CVSS 5.5
MEDIUM This Month

In Pixel cellular firmware, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-20608
EPSS 0% CVSS 5.5
MEDIUM This Month

In Pixel cellular firmware, there is a possible out of bounds read due to an incorrect bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-20607
EPSS 1% CVSS 8.8
HIGH This Week

In the Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Google +2
NVD
CVE-2022-20606
EPSS 1% CVSS 4.9
MEDIUM This Month

In SAEMM_MiningCodecTableWithMsgIE of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-20605
EPSS 1% CVSS 7.5
HIGH This Week

In SAECOMM_CopyBufferBytes of SAECOMM_Utility.c, there is a possible out of bounds read due to an incorrect bounds check. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-20604
EPSS 0% CVSS 5.5
MEDIUM This Month

In SAECOMM_SetDcnIdForPlmn of SAECOMM_DbManagement.c, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-20603
EPSS 1% CVSS 7.2
HIGH This Week

In SetDecompContextDb of RohcDeCompContextOfRbId.cpp, there is a possible out of bounds write due to a missing bounds check. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Google +2
NVD
CVE-2022-20602
EPSS 0% CVSS 7.5
HIGH This Week

Product: AndroidVersions: Android kernelAndroid ID: A-211081867References: N/A. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Google Android
NVD
CVE-2022-20601
EPSS 0% CVSS 7.5
HIGH This Week

Product: AndroidVersions: Android kernelAndroid ID: A-204541506References: N/A. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Google Android
NVD
CVE-2022-20600
EPSS 0% CVSS 7.8
HIGH This Week

In TBD of TBD, there is a possible out of bounds write due to memory corruption. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20599
EPSS 0% CVSS 6.7
MEDIUM This Month

In Pixel firmware, there is a possible exposure of sensitive memory due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +1
NVD
CVE-2022-20596
EPSS 0% CVSS 6.7
MEDIUM This Month

In sendChunk of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20595
EPSS 0% CVSS 4.4
MEDIUM This Month

In getWpcAuthChallengeResponse of WirelessCharger.cpp, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-20594
EPSS 0% CVSS 6.7
MEDIUM This Month

In updateStart of WirelessCharger.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20593
EPSS 0% CVSS 4.4
MEDIUM This Month

In pop_descriptor_string of BufferDescriptor.h, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-20583
EPSS 0% CVSS 6.7
MEDIUM This Month

In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20582
EPSS 0% CVSS 7.8
HIGH This Week

In ppmp_unprotect_mfcfw_buf of drm_fw.c, there is a possible out of bounds write due to improper input validation. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20580
EPSS 0% CVSS 6.7
MEDIUM This Month

In ufdt_do_one_fixup of ufdt_overlay.c, there is a possible out of bounds write due to an incorrect bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20579
EPSS 0% CVSS 6.7
MEDIUM This Month

In RadioImpl::setCdmaBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20578
EPSS 0% CVSS 6.7
MEDIUM This Month

In RadioImpl::setGsmBroadcastConfig of ril_service_legacy.cpp, there is a possible stack clash leading to memory corruption. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20577
EPSS 0% CVSS 6.7
MEDIUM This Month

In OemSimAuthRequest::encode of wlandata.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20576
EPSS 0% CVSS 6.7
MEDIUM This Month

In externalOnRequest of rilapplication.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20575
EPSS 0% CVSS 5.5
MEDIUM This Month

In read_ppmpu_info of drm_fw.c, there is a possible out of bounds read due to an incorrect bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-20574
EPSS 0% CVSS 5.5
MEDIUM This Month

In sec_sysmmu_info of drm_fw.c, there is a possible out of bounds read due to improper input validation. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-20570
EPSS 0% CVSS 5.5
MEDIUM This Month

Product: AndroidVersions: Android kernelAndroid ID: A-230660904References: N/A. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Google Android
NVD
CVE-2022-20569
EPSS 0% CVSS 6.7
MEDIUM This Month

In thermal_cooling_device_stats_update of thermal_sysfs.c, there is a possible out of bounds write due to improper input validation. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20564
EPSS 0% CVSS 6.7
MEDIUM PATCH This Month

In _ufdt_output_strtab_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20563
EPSS 0% CVSS 6.7
MEDIUM PATCH This Month

In TBD of ufdt_convert, there is a possible out of bounds read due to memory corruption. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Privilege Escalation Buffer Overflow Information Disclosure +2
NVD
CVE-2022-20561
EPSS 0% CVSS 7.8
HIGH This Week

In TBD of aud_hal_tunnel.c, there is a possible memory corruption due to a use after free. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Buffer Overflow Denial Of Service +4
NVD
CVE-2022-20560
EPSS 0% CVSS 7.5
HIGH PATCH This Week

Product: AndroidVersions: Android kernelAndroid ID: A-212623833References: N/A. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Overflow vulnerability could allow attackers to corrupt memory to execute arbitrary code or crash the application.

Buffer Overflow Google Android
NVD
CVE-2022-20557
EPSS 0% CVSS 6.7
MEDIUM PATCH This Month

In MessageQueueBase of MessageQueueBase.h, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Privilege Escalation Buffer Overflow Information Disclosure +2
NVD
CVE-2022-20555
EPSS 0% CVSS 4.4
MEDIUM PATCH This Month

In ufdt_get_node_by_path_len of ufdt_convert.c, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-20552
EPSS 0% CVSS 5.5
MEDIUM PATCH This Month

In btif_a2dp_sink_command_ready of btif_a2dp_sink.cc, there is a possible out of bounds read due to a use after free. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Buffer Overflow Denial Of Service Information Disclosure +4
NVD
CVE-2022-20549
EPSS 0% CVSS 6.7
MEDIUM PATCH This Month

In authToken2AidlVec of KeyMintUtils.cpp, there is a possible out of bounds write due to an incorrect bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20548
EPSS 0% CVSS 7.8
HIGH PATCH This Week

In setParameter of EqualizerEffect.cpp, there is a possible out of bounds write due to improper input validation. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20546
EPSS 0% CVSS 6.7
MEDIUM PATCH This Month

In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20541
EPSS 0% CVSS 4.2
MEDIUM PATCH This Month

In phNxpNciHal_ioctl of phNxpNciHal.cc, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 4.2), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-20539
EPSS 0% CVSS 6.7
MEDIUM PATCH This Month

In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20528
EPSS 0% CVSS 3.3
LOW PATCH Monitor

In findParam of HevcUtils.cpp there is a possible out of bounds read due to a missing bounds check. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Privilege Escalation Buffer Overflow Information Disclosure +2
NVD
CVE-2022-20527
EPSS 0% CVSS 5.5
MEDIUM This Month

In HalCoreCallback of halcore.cc, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-20526
EPSS 0% CVSS 3.3
LOW PATCH Monitor

In CanvasContext::draw of CanvasContext.cpp, there is a possible out of bounds write due to a missing bounds check. Rated low severity (CVSS 3.3), this vulnerability is no authentication required, low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-20523
EPSS 0% CVSS 5.5
MEDIUM PATCH This Month

In IncFs_GetFilledRangesStartingFrom of incfs.cpp, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. This Out-of-bounds Read vulnerability could allow attackers to read data from memory outside the intended buffer boundaries.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-20516
EPSS 1% CVSS 7.5
HIGH PATCH This Week

In rw_t3t_act_handle_check_ndef_rsp of rw_t3t.cc, there is a possible out of bounds read due to an integer overflow. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Information Disclosure Google +2
NVD
CVE-2022-20514
EPSS 0% CVSS 6.7
MEDIUM PATCH This Month

In acquireFabricatedOverlayIterator, nextFabricatedOverlayInfos, and releaseFabricatedOverlayIterator of Idmap2Service.cpp, there is a possible out of bounds write due to a use after free. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity.

Privilege Escalation Buffer Overflow Denial Of Service +4
NVD
CVE-2022-20513
EPSS 0% CVSS 5.5
MEDIUM POC This Month

In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to a missing bounds check. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Information Disclosure Google +1
NVD
CVE-2022-20509
EPSS 0% CVSS 6.7
MEDIUM PATCH This Month

In mapGrantorDescr of MessageQueueBase.h, there is a possible out of bounds write due to a missing bounds check. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. This Out-of-bounds Write vulnerability could allow attackers to write data beyond allocated buffer boundaries leading to code execution or crashes.

Privilege Escalation Buffer Overflow Google +2
NVD
CVE-2022-46393
EPSS 1% CVSS 9.8
CRITICAL Act Now

An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Fedora +4
NVD GitHub VulDB
CVE-2022-46700
EPSS 1% CVSS 8.8
HIGH This Week

A memory corruption issue was addressed with improved input validation. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +7
NVD
CVE-2022-46699
EPSS 1% CVSS 8.8
HIGH This Week

A memory corruption issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +7
NVD
CVE-2022-46697
EPSS 0% CVSS 7.8
HIGH This Week

An out-of-bounds access issue was addressed with improved bounds checking. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +2
NVD
CVE-2022-46696
EPSS 1% CVSS 8.8
HIGH This Week

A memory corruption issue was addressed with improved input validation. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +7
NVD
CVE-2022-46694
EPSS 0% CVSS 7.8
HIGH This Week

An out-of-bounds write issue was addressed with improved input validation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +5
NVD
CVE-2022-46693
EPSS 0% CVSS 7.8
HIGH This Week

An out-of-bounds write issue was addressed with improved input validation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +8
NVD
CVE-2022-46691
EPSS 2% CVSS 8.8
HIGH This Week

A memory consumption issue was addressed with improved memory handling. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +7
NVD
CVE-2022-46690
EPSS 1% CVSS 7.8
HIGH This Week

An out-of-bounds write issue was addressed with improved input validation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +6
NVD
CVE-2022-42863
EPSS 1% CVSS 8.8
HIGH This Week

A memory corruption issue was addressed with improved state management. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +7
NVD VulDB
CVE-2022-42851
EPSS 0% CVSS 5.5
MEDIUM This Month

The issue was addressed with improved memory handling. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Apple +3
NVD VulDB
CVE-2022-42850
EPSS 0% CVSS 7.8
HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +3
NVD VulDB
CVE-2022-42847
EPSS 0% CVSS 7.8
HIGH This Week

An out-of-bounds write issue was addressed with improved input validation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +2
NVD VulDB
CVE-2022-42846
EPSS 0% CVSS 5.5
MEDIUM This Month

The issue was addressed with improved memory handling. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Apple Ipados +1
NVD VulDB
CVE-2022-42845
EPSS 2% CVSS 7.2
HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +6
NVD
CVE-2022-42844
EPSS 0% CVSS 8.6
HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 8.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Apple Ipados +1
NVD VulDB
CVE-2022-42842
EPSS 2% CVSS 9.8
CRITICAL Act Now

The issue was addressed with improved memory handling. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +6
NVD
CVE-2022-42840
EPSS 0% CVSS 7.8
HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +4
NVD VulDB
CVE-2022-32948
EPSS 0% CVSS 7.8
HIGH This Week

An out-of-bounds read was addressed with improved bounds checking. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +4
NVD
CVE-2022-32943
EPSS 1% CVSS 5.3
MEDIUM This Month

The issue was addressed with improved bounds checks. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Apple +3
NVD
CVE-2022-32942
EPSS 0% CVSS 7.8
HIGH This Week

The issue was addressed with improved memory handling. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +2
NVD
CVE-2022-32916
EPSS 0% CVSS 5.5
MEDIUM This Month

An out-of-bounds read issue existed that led to the disclosure of kernel memory. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Information Disclosure Apple +1
NVD
CVE-2022-32860
EPSS 0% CVSS 7.8
HIGH This Week

An out-of-bounds write was addressed with improved input validation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +4
NVD
CVE-2022-22063
EPSS 0% CVSS 7.8
HIGH This Week

Memory corruption in Core due to improper configuration in boot remapper. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow Memory Corruption Qualcomm +8
NVD
CVE-2022-46344
EPSS 3% CVSS 8.8
HIGH This Week

A vulnerability was found in X.Org. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Information Disclosure +6
NVD
CVE-2022-46341
EPSS 3% CVSS 8.8
HIGH This Week

A vulnerability was found in X.Org. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +6
NVD
CVE-2022-46340
EPSS 2% CVSS 8.8
HIGH This Week

A vulnerability was found in X.Org. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +6
NVD
CVE-2022-2601
EPSS 0% CVSS 8.6
HIGH This Week

A buffer overflow was found in grub_font_construct_glyph(). Rated high severity (CVSS 8.6), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Buffer Overflow Heap Overflow Red Hat +10
NVD VulDB
CVE-2022-31705
EPSS 2% CVSS 8.2
HIGH This Week

VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. No vendor patch available.

RCE Buffer Overflow Memory Corruption +4
NVD
CVE-2022-44910
EPSS 0% CVSS 7.8
HIGH POC This Week

Binbloom 2.0 was discovered to contain a heap buffer overflow via the read_pointer function at /binbloom-master/src/helpers.c. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Binbloom
NVD GitHub
CVE-2022-44898
EPSS 0% CVSS 7.8
HIGH POC This Week

The MsIo64.sys component in Asus Aura Sync through v1.07.79 does not properly validate input to IOCTL 0x80102040, 0x80102044, 0x80102050, and 0x80102054, allowing attackers to trigger a memory. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Denial Of Service Memory Corruption +2
NVD
CVE-2022-44874
EPSS 0% CVSS 5.5
MEDIUM POC This Month

wasm3 commit 7890a2097569fde845881e0b352d813573e371f9 was discovered to contain a segmentation fault via the component op_CallIndirect at /m3_exec.h. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Memory Corruption Wasm3 +1
NVD GitHub
CVE-2022-2951
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Altair HyperView Player versions 2021.1.0.27 and prior are vulnerable to improper validation of array index vulnerability during processing of H3D files. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity.

Buffer Overflow Altair Hyperview Player
NVD
Prev Page 211 of 437 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy