** DISPUTED ** The libpff_name_to_id_map_entry_read function in libpff_name_to_id_map.c in libyal libpff through 2018-04-28 allows remote attackers to cause an information disclosure (heap-based buffer over-read) via a crafted pff file. NOTE: the vendor has disputed this as described in libyal/libpff issue 66 on GitHub.


The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.


The buffer_fill64 function in compression.c in Libmobi 0.3 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted mobi file.


An issue was discovered in Perl 5.22 through 5.26. Matching a crafted locale dependent regular expression can cause a heap-based buffer over-read and potentially information disclosure.


u'Buffer over-read Issue in Q6 testbus framework due to diag packet length is not completely validated before accessing the field and leads to Information disclosure.' in Snapdragon Compute Snapdragon Consumer IOT Snapdragon Industrial IOT Snapdragon Mobile in Kamorta Nicobar QCS605 QCS610 Rennell SC7180 SDA660 SDM630 SDM636 SDM660 SDM670 SDM710 SM6150 SM7150 SM8150 SXR1130


An issue was discovered in libexif before 0.6.22. Several buffer over-reads in EXIF MakerNote handling could lead to information disclosure and crashes. This is different from CVE-2020-0093.


Adobe s 15.020.20042 and earlier 15.006.30244 and earlier 11.0.18 and earlier have an exploitable buffer overflow vulnerability in the JPEG2000 parser. Successful exploitation could lead to information disclosure.


Possible

buffer

overflow

at

the

end

of

iterating

loop

while

getting

the

version

info

and

lead

to

information

disclosure.

in

Snapdragon

Auto

Snapdragon

Compute

Snapdragon

Consumer

IOT

Snapdragon

Industrial

IOT

Snapdragon

IoT

Snapdragon

Mobile

Snapdragon

Voice

Music

Snapdragon

Wearables

in

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD

SD


libmspack

is

affected

by:

Buffer

Overflow.

The

impact

is:

Information

Disclosure.

The

component

is:

function

in

libmspack(file

The

attack

vector

is:

the

victim

must

open

a

specially

crafted

chm

file.

The

fixed

version

is:

after

commit


IDRIX Truecrypt Veracrypt Truecrypt Prior to 1.23-Hotfix-1 (Veracrypt) all versions (Truecrypt) is affected by: Buffer Overflow. The impact is: Minor information disclosure of kernel stack. The component is: Veracrypt NT Driver (veracrypt.sys). The attack vector is: Locally executed code IOCTL request to driver. The fixed version is: 1.23-Hotfix-1.


Buffer overflow in Kernel Mode module for Intel(R) Graphics Driver before version 25.20.100.6618 (DCH) or 21.20.x.5077 (aka15.45.5077) may allow a privileged user to potentially enable information disclosure via local access.


A Buffer Overflow and Information Disclosure issue exists in HP OfficeJet Pro Printers before 001.1937C and HP PageWide Managed Printers and HP PageWide Pro Printers before 001.1937D exists; A maliciously crafted print file might cause certain HP Inkjet printers to assert. Under certain circumstances the printer produces a core dump to a local device.


In checkSpsUpdated of AAVCAssembler.cpp there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-204077881


In ih264d_parse_decode_slice of ih264d_parse_slice.c there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-205702093


In HandleTransactionIoEvent of actuator_driver.cc there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-204421047References: N/A


In PVInitVideoEncoder of mp4enc_api.cpp there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-190435883


In flv extractor there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561384; Issue ID: ALPS05561384.


In ape extractor there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561394; Issue ID: ALPS05561394.


In getUpTo17bits of pvmp3_getbits.cpp there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154075955


In flv extractor there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594988; Issue ID: ALPS05594988.


In getNbits of pvmp3_getbits.cpp there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154076193


In asf extractor there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05561381.


In fillMainDataBuf of pvmp3_framedecoder.cpp there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173473906


In ape extractor there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561391; Issue ID: ALPS05561391.


In BITSTREAM_FLUSH of ih264e_bitstream.h there is a possible out of bounds write due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-176533109


In ih264e_fmt_conv_422i_to_420sp of ih264e_fmt_conv.c there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172908358


In asf extractor there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05561388.


In getBlockSum of fastcodemb.cpp there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172716941


In ih264d_mark_err_slice_skip of ih264d_parse_pslice.c there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-182152757


In 'ih264e_find_bskip_params()' of ih264e_me.c there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-193442575


In ape extractor there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561389; Issue ID: ALPS05561389.


In C2SoftMP3::process() of C2SoftMp3Dec.cpp there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-9Android ID: A-193363621


Trusty contains a vulnerability in the NVIDIA OTE protocol that is present in all TAs. An incorrect message stream deserialization allows an attacker to use the malicious CA that is run by the user to cause the buffer overflow which may lead to information disclosure and data modification.


A heap buffer overflow in ExtractImageSection function in tiffcrop.c in libtiff library Version 4.3.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file which could result into application crash potential information disclosure or any other context-dependent impact


In ih264d_parse_ave of ih264d_sei.c there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-152895390


In DecodeFrameCombinedMode of combined_decode.cpp there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-152496149


In ihevc_intra_pred_chroma_mode_3_to_9_av8 of ihevc_intra_pred_chroma_mode_3_to_9.s there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-144595488


In decode_packed_entry_number of codebook.c there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160633884


In FLAC__bitreader_read_rice_signed_block of bitreader.c there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-156076070


In extend_frame_highbd of restoration.c there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-166268541


In hevcd_fmt_conv_420sp_to_420sp_av8 of ihevcd_fmt_conv_420sp_to_420sp.s there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android Versions: Android-10 Android-11 Android ID: A-143464314


In BitstreamFillCache of bitstream.cpp there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154058264


In GLESRenderEngine there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-150303018


IBM QRadar SIEM 7.3.2 could allow a user to bypass authentication exposing certain functionality which could lead to information disclosure or modification of application configuration. IBM X-Force ID: 158986.

information disclosure
bypass authentication


Adobe Experience Manager versions 6.4 6.3 and 6.2 have a cross-site request forgery vulnerability. Successful exploitation could lead to sensitive information disclosure.

information disclosure
cross site request forgery


Adobe Experience Manager version 6.4 and ealier have a Cross-Site Request Forgery vulnerability. Successful exploitation could lead to Sensitive Information disclosure in the context of the current user.


Cross-site request forgery (CSRF) vulnerability in IBM WebSphere Application Server 6.1 before 6.1.0.45 7.0 before 7.0.0.25 8.0 before 8.0.0.5 and 8.5 before 8.5.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that trigger information disclosure.


NVIDIA DGX servers all DGX-1 with BMC firmware versions prior to 3.38.30 contains a Cross-Site Request Forgery (CSRF) vulnerability in the AMI BMC firmware in which the web application does not sufficiently verify whether a well-formed valid consistent request was intentionally provided by the user who submitted the request which can lead to information disclosure or code execution.


Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.

information disclosure
denial of service


Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap metadata which might lead to arbitrary code execution denial of service and information disclosure during secure boot.


Improper directory permissions in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable denial of service and information disclosure via local access.


NVIDIA GPU Display Driver for Windows contains a vulnerability in nvidia-smi where an uncontrolled DLL loading path may lead to arbitrary code execution denial of service information disclosure and data tampering.


NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an out of bounds array access may lead to denial of service or information disclosure.


A vulnerability was found in PowerDNS Authoritative Server before 4.0.7 and before 4.1.7. An insufficient validation of data coming from the user when building a HTTP request from a DNS query in the HTTP Connector of the Remote backend allowing a remote user to cause a denial of service by making the server connect to an invalid endpoint or possibly information disclosure by making the server connect to an internal endpoint and somehow extracting meaningful information about the response


PMD 5.8.1 and earlier processes XML external entities in ruleset files it parses as part of the analysis process allowing attackers tampering it (either by direct modification or MITM attacks when using remote rulesets) to perform information disclosure denial of service or request forgery attacks. (PMD 6.x is unaffected because of a 2017-09-15 change.)


NVIDIA GeForce Experience all versions prior to 3.20.1 contains a vulnerability in the Downloader component in which a user with local system access can craft input that may allow malicious files to be downloaded and saved. This behavior may lead to code execution denial of service or information disclosure.


NVIDIA GeForce Experience versions prior to 3.19 contains a vulnerability in the Web Helper component in which an attacker with local system access can craft input that may not be properly validated. Such an attack may lead to code execution denial of service or information disclosure.


NVIDIA GeForce Experience (prior to 3.20.1) and Windows GPU Display Driver (all versions) contains a vulnerability in the local service provider component in which an attacker with local system and privileged access can incorrectly load Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack) which may lead to denial of service or information disclosure through code execution.


NVIDIA Shield TV Experience prior to v8.0 contains a vulnerability in the custom NVIDIA API used in the mount system service where user data could be overridden which may lead to code execution denial of service or information disclosure.


An exploitable arbitrary memory read vulnerability exists in the KCodes NetUSB.ko kernel module which enables the ReadySHARE Printer functionality of at least two NETGEAR Nighthawk Routers and potentially several other vendors/products. A specially crafted index value can cause an invalid memory read resulting in a denial of service or remote information disclosure. An unauthenticated attacker can send a crafted packet on the local network to trigger this vulnerability.


NVIDIA Windows GPU Display Driver R390 driver version contains a vulnerability in NVIDIA Control Panel in which it incorrectly loads Windows system DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack) which may lead to denial of service or information disclosure through code execution. The attacker requires local system access.


A use-after-free in onig_new_deluxe() in regext.c in Oniguruma 6.9.2 allows attackers to potentially cause information disclosure denial of service or possibly code execution by providing a crafted regular expression. The attacker provides a pair of a regex pattern and a string with a multi-byte encoding that gets handled by onig_new_deluxe(). Oniguruma issues often affect Ruby as well as common optional libraries for PHP and Rust.


VCFTools vcftools prior to version 0.1.15 is affected by: Use-after-free. The impact is: Denial of Service or possibly other impact (eg. code execution or information disclosure). The component is: The header::add_FILTER_descriptor method in header.cpp. The attack vector is: The victim must open a specially crafted VCF file.


HPE

Superdome

Flex

Server

is

vulnerable

to

multiple

remote

vulnerabilities

via

improper

input

validation

of

administrator

commands.

This

vulnerability

could

allow

an

Administrator

to

bypass

security

restrictions

and

access

multiple

remote

vulnerabilities

including

information

disclosure

or

denial

of

service.

HPE

has

provided

firmware

updates

that

address

the

above

vulnerabilities

for

the

HPE

Superdome

Flex

Server

starting

with

firmware

version

(not

available

online)

and

(available

online).

Apply

December

or

a

newer

version

to

resolve

this

issue.

Please

visit

HPE

Support

Center

to

obtain

the

updated

firmware

for

your

product.


Lierda Grill Temperature Monitor V1.00_50006 has a default password of admin for the admin account which allows an attacker to cause a Denial of Service or Information Disclosure via the undocumented access-point configuration page located on the device. This wifi thermometer app requests and requires excessive permissions to operate such as Fine GPS location camera applists Serial number IMEI. In addition to the \backdoor\ login access for \admin\ purposes this accompanying app also establishes connections with several china based URLs to include Alibaba cloud computing. NOTE: this device also ships with ProGrade branding.


HCL AppScan Source before 9.03.13 is susceptible to XML External Entity (XXE) attacks in multiple locations. In particular an attacker can send a specially crafted .ozasmt file to a targeted victim and ask the victim to open it. When the victim imports the .ozasmt file in AppScan Source the content of any file in the local file system (to which the victim as read access) can be exfiltrated to a remote listener under the attacker's control. The product does not disable external XML Entity Processing which can lead to information disclosure and denial of services attacks.


NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) in which an input length is not validated which may lead to information disclosure tampering of data or denial of service. vGPU version 12.x (prior to 12.2) version 11.x (prior to 11.4) and version 8.x (prior to 8.7)


NVIDIA GPU Display Driver for Linux all versions contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation which may lead to denial of service or information disclosure.


NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which an input offset is not validated which may lead to a buffer overread which in turn may cause tampering of data information disclosure or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).


NVIDIA Virtual GPU Manager NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which it allows guests to allocate some resources for which the guest is not authorized which may lead to integrity and confidentiality loss denial of service or information disclosure. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).


NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it improperly validates the length field in a request from a guest. This flaw allows a malicious guest to send a length field that is inconsistent with the actual length of the input which may lead to information disclosure data tampering or denial of service. This affects vGPU version 12.x (prior to 12.3) version 11.x (prior to 11.5) and version 8.x (prior 8.8).


NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin) in which an input length is not validated which may lead to information disclosure tampering of data or denial of service. This affects vGPU version 12.x (prior to 12.2) and version 11.x (prior to 11.4).


NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which it obtains a value from an untrusted source converts this value to a pointer and dereferences the resulting pointer which may lead to information disclosure or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).


The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address (MTVEC) register that may lead to a vulnerability due to the initial state of the register not being defined potentially leading to information disclosure data tampering and denial of service.


NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU manager (vGPU plugin) in which an input length is not validated which may lead to information disclosure tampering of data or denial of service. This affects vGPU version 12.x (prior to 12.2) version 11.x (prior to 11.4) and version 8.x (prior 8.7).


NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a string provided by the guest OS may not be properly null terminated. The guest OS or attacker has no ability to push content to the plugin through this vulnerability which may lead to information disclosure data tampering unauthorized code execution and denial of service.


NVIDIA vGPU driver contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin) in which an input length is not validated which may lead to information disclosure tampering of data or denial of service. This affects vGPU version 12.x (prior to 12.2) and version 11.x (prior to 11.4).


NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it doesn't release some resources during driver unload requests from guests. This flaw allows a malicious guest to perform operations by reusing those resources which may lead to information disclosure data tampering or denial of service. This affects vGPU version 12.x (prior to 12.3) version 11.x (prior to 11.5) and version 8.x (prior 8.8).


NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) in which certain input data is not validated which may lead to information disclosure tampering of data or denial of service. This affects vGPU version 12.x (prior to 12.2) version 11.x (prior to 11.4) and version 8.x (prior 8.7).


NVIDIA GPU and Tegra hardware contain a vulnerability in an internal microcontroller which may allow a user with elevated privileges to generate valid microcode by identifying exploiting and loading vulnerable microcode. Such an attack could lead to information disclosure data corruption or denial of service of the device. The scope may extend to other components.


Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening could cause heap overflows which might lead to information disclosure and denial of service.


Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a resource from a user with local privileges which might lead to limited information disclosure a low risk of modifcations to data and limited denial of service.


Dell iDRAC9 versions 4.40.00.00 and later but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to the affected application.


iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to iDRAC.


Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability leading to a denial of service arbitrary code execution or information disclosure in System Management Mode.


Fleet is an open source osquery manager. In Fleet before version 3.7.0 a malicious actor with a valid node key can send a badly formatted request that causes the Fleet server to exit resulting in denial of service. This is possible only while a live query is currently ongoing. We believe the impact of this vulnerability to be low given the requirement that the actor has a valid node key. There is no information disclosure privilege escalation or code execution. The issue is fixed in Fleet 3.7.0.


radsecproxy is a generic RADIUS proxy that supports both UDP and TLS (RadSec) RADIUS transports. Missing input validation in radsecproxy's `naptr-eduroam.sh` and `radsec-dynsrv.sh` scripts can lead to configuration injection via crafted radsec peer discovery DNS records. Users are subject to Information disclosure Denial of Service Redirection of Radius connection to a non-authenticated server leading to non-authenticated network access. Updated example scripts are available in the master branch and 1.9 release. Note that the scripts are not part of the installation package and are not updated automatically. If you are using the examples you have to update them manually. The dyndisc scripts work independently of the radsecproxy code. The updated scripts can be used with any version of radsecproxy.


Improper input validation for some Intel(R) PROSet/Wireless WiFi in multiple operating systems and Killer(TM) WiFi in Windows 10 and 11 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.


A heap-use-after-free flaw was found in ImageMagick's RelinquishDCMInfo() function of dcm.c file. This vulnerability is triggered when an attacker passes a specially crafted DICOM image file to ImageMagick for conversion potentially leading to information disclosure and a denial of service.


A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem leading to information disclosure or denial of service.


NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where an unprivileged regular user can access administrator- privileged registers which may lead to denial of service information disclosure and data tampering.


Solution Manager (Diagnostics Root Cause Analysis Tools) - version 720 allows an administrator to execute code on all connected Diagnostics Agents and browse files on their systems. An attacker could thereby control the managed systems. It is considered that this is a missing segregation of duty for the SAP Solution Manager administrator. Impacts of unauthorized execution of commands can lead to sensitive information disclosure loss of system integrity and denial of service.


IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of service. IBM X-Force ID: 126247.


When apr_time_exp*() or apr_os_exp_time*() functions are invoked with an invalid month field value in Apache Portable Runtime APR 1.6.2 and prior out of bounds memory may be accessed in converting this value to an apr_time_exp_t value potentially revealing the contents of a different static heap value or resulting in program termination and may represent an information disclosure or denial of service vulnerability to applications which call these APR functions with unvalidated external input.


An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.


A denial of service vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated unprivileged network-based attacker to cause denials of services to underlying database tables leading to potential information disclosure modification of system states and partial to full denial of services relying upon data modified by an attacker.


A vulnerability in Juniper Networks NorthStar Controller Application prior to version 2.1.0 Service Pack 1 may allow an unauthenticated unprivileged network-based attacker to cause various denials of services leading to targeted information disclosure modification of any component of the NorthStar system including managed systems and full denial of services to any systems under management which NorthStar interacts with using read-only or read-write credentials.


A specially crafted email delivered over SMTP and passed on to Dovecot by MTA can trigger an out of bounds read resulting in potential sensitive information disclosure and denial of service. In order to trigger this vulnerability an attacker needs to send a specially crafted email message to the server.


PGP/MIME encrypted messages injected into a Vaultive O365 (before 4.5.21) frontend via IMAP or SMTP have their Content-Type changed from 'Content-Type: multipart/encrypted; protocol=\application/pgp-encrypted\; boundary=\abc123abc123\' to 'Content-Type: text/plain' - this results in the encrypted message being structured in such a way that most PGP/MIME-capable mail user agents are unable to decrypt it cleanly. The outcome is that encrypted mail passing through this device does not work (Denial of Service) and a common real-world consequence is a request to resend the mail in the clear (Information Disclosure).


NVIDIA TrustZone Software contains a vulnerability in the Keymaster implementation where the software reads data past the end or before the beginning of the intended buffer; and may lead to denial of service or information disclosure. This issue is rated as high.


NVIDIA Vibrante Linux version 1.1 2.0 and 2.2 contains a vulnerability in the user space driver in which protection mechanisms are insufficient may lead to denial of service or information disclosure.


An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted XML request can cause an XML external entity to be referenced resulting in information disclosure and potential denial of service. An attacker can issue authenticated HTTP requests to trigger this vulnerability.


xmlsec 1.2.23 and before is vulnerable to XML External Entity Expansion when parsing crafted input documents resulting in possible information disclosure or denial of service


SEMA driver in Intel Driver and Support Assistant before version 3.1.1 allows a local attacker the ability to read and writing to Memory Status registers potentially allowing information disclosure or a denial of service condition.


In FFmpeg 3.2 and 4.0.1 an improper argument (AVCodecParameters) passed to the avpriv_request_sample function in the handle_eac3 function in libavformat/movenc.c may trigger an out-of-array read while converting a crafted AVI file to MPEG4 leading to a denial of service and possibly an information disclosure.


In FFmpeg 4.0.1 due to a missing check for negative values of the mquant variable the vc1_put_blocks_clamped function in libavcodec/vc1_block.c may trigger an out-of-array access while converting a crafted AVI file to MPEG4 leading to an information disclosure or a denial of service.


On MX Series and M120/M320 platforms configured in a Broadband Edge (BBE) environment subscribers logging in with DHCP Option 50 to request a specific IP address will be assigned the requested IP address even if there is a static MAC to IP address binding in the access profile. In the problem scenario with a hardware-address and IP address configured under address-assignment pool if a subscriber logging in with DHCP Option 50 the subscriber will not be assigned an available address from the matched pool but will still get the requested IP address. A malicious DHCP subscriber may be able to utilize this vulnerability to create duplicate IP address assignments leading to a denial of service for valid subscribers or unauthorized information disclosure via IP address assignment spoofing. Affected releases are Juniper Networks Junos OS: 15.1 versions prior to 15.1R7-S2 15.1R8; 16.1 versions prior to 16.1R4-S12 16.1R7-S2 16.1R8; 16.2 versions prior to 16.2R2-S7 16.2R3; 17.1 versions prior to 17.1R2-S9 17.1R3; 17.2 versions prior to 17.2R1-S7 17.2R2-S6 17.2R3; 17.3 versions prior to 17.3R2-S4 17.3R3; 17.4 versions prior to 17.4R2; 18.1 versions prior to 18.1R2-S3 18.1R3.


Incomplete cleanup in some Intel(R) PROSet/Wireless WiFi and Killer (TM) drivers before version 22.0 may allow a privileged user to potentially enable information disclosure and denial of service<b> </b>via adjacent access.


An exploitable out of bounds read vulnerability exists in the way MiniSNMPD version 1.4 parses incoming SNMP packets. A specially crafted SNMP request can trigger an out of bounds memory read which can result in sensitive information disclosure and Denial Of Service. In order to trigger this vulnerability an attacker needs to send a specially crafted packet to the vulnerable server.


NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin and the host driver kernel module in which the potential exists to write to a memory location that is outside the intended boundary of the frame buffer memory allocated to guest operating systems which may lead to denial of service or information disclosure. This affects vGPU version 8.x (prior to 8.5) version 10.x (prior to 10.4) and version 11.0.


NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which allocated memory can be freed twice which may lead to information disclosure or denial of service. This affects vGPU version 8.x (prior to 8.5) version 10.x (prior to 10.4) and version 11.0.


NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the NVIDIA Control Panel component in which an attacker with local system access can plant a malicious DLL file which may lead to code execution denial of service or information disclosure.


NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which it may have the use-after-free vulnerability while freeing some resources which may lead to denial of service code execution and information disclosure. This affects vGPU version 8.x (prior to 8.5) version 10.x (prior to 10.4) and version 11.0.


NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the service host component in which the application resources integrity check may be missed. Such an attack may lead to code execution denial of service or information disclosure.


Improper conditions check in Intel(R) Graphics Drivers before versions 15.33.49.5100 15.36.38.5117 15.40.44.5107 15.45.30.5103 and 26.20.100.7212 may allow an authenticated user to potentially enable information disclosure and denial of service via local


A Blind SQL Injection Vulnerability in Exponent CMS through 2.4.0 with the rerank array parameter can lead to site database information disclosure and denial of service.


perl-Image-Info: When parsing an SVG file external entity expansion (XXE) was not disabled. An attacker could craft an SVG file which when processed by an application using perl-Image-Info could cause denial of service or potentially information disclosure.


All versions of NVIDIA Windows GPU Display Driver contain a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgDdiEscape where a check on a function return value is missing potentially allowing an uninitialized value to be used as the source of a strcpy() call leading to denial of service or information disclosure.


Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticated HTTP request leading to denial of service and information disclosure.


Insecure inherited permissions in some Intel(R) ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable information disclosure and denial of service via adjacent access.


Improper input validation in software for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi in Windows 10 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.


Improper input validation in subsystem for Intel(R) AMT versions before 11.8.77 11.12.77 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.


Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access.


Stack overflow in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure and/or denial of service via network access.


A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve denial of services and information disclosure via TCP/IP packets.


Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via local access.


Insufficient session validation in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access.


NVIDIA Virtual GPU Manager all contains a vulnerability in which it may grant a guest access to memory that it does not own which may lead to information disclosure or denial of service.


The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger \information disclosure double-free and negative reference index array underflow\ results.

information disclosure
denial of service
arbitrary code execution


In GraphicsMagick 1.4 snapshot-20190322 Q8 there is a heap-based buffer over-read in the ReadMNGImage function of coders/png.c which allows attackers to cause a denial of service or information disclosure via an image colormap.

information disclosure
denial of service
buffer overread


In GraphicsMagick 1.4 snapshot-20190322 Q8 there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c which allows attackers to cause a denial of service or information disclosure via an RLE packet.


In ImageMagick 7.0.8-40 Q16 there is a heap-based buffer over-read in the function WritePNMImage of coders/pnm.c which allows an attacker to cause a denial of service or possibly information disclosure via a crafted image file. This is related to SetGrayscaleImage in MagickCore/quantize.c.


In GraphicsMagick 1.4 snapshot-20190322 Q8 there is a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c which allows attackers to cause a denial of service or information disclosure via a crafted image file.


stb_image.h (aka the stb image loader) 2.23 has a heap-based buffer over-read in stbi__tga_load leading to Information Disclosure or Denial of Service.


In the PatternMatch function in fontfile/fontdir.c in libXfont through 1.5.2 and 2.x before 2.0.2 an attacker with access to an X connection can cause a buffer over-read during pattern matching of fonts leading to information disclosure or a crash (denial of service). This occurs because '\\0' characters are incorrectly skipped in situations involving ? characters.


The htmlParseTryOrFinish function in HTMLparser.c in libxml2 2.9.4 allows attackers to cause a denial of service (buffer over-read) or information disclosure.


An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-read in a parse_mqtt getu16 call. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.


An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-read in mg_mqtt_next_subscribe_topic. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.


Espruino before 1.99 allows attackers to cause a denial of service (application crash) and potential Information Disclosure with a user crafted input file via a Buffer Overflow during syntax parsing because strncpy is misused in jslex.c.

information disclosure
denial of service
buffer overflow


A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows physically proximate authenticated attackers to achieve code execution denial of services and information disclosure via serial ports.


NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) that could allow an attacker to cause stack-based buffer overflow and put a customized ROP gadget on the stack. Such an attack may lead to information disclosure data tampering or denial of service. This affects vGPU version 12.x (prior to 12.3) version 11.x (prior to 11.5) and version 8.x (prior 8.8).


Bootloader contains a vulnerability in the NV3P server where any user with physical access through USB can trigger an incorrect bounds check which may lead to buffer overflow resulting in limited information disclosure limited data integrity and denial of service across all components.


A Buffer Overflow in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 Sigma devices before 4.9.4 and MA VP MD devices before 4.9.7 allows remote attackers to achieve code execution denial of services and information disclosure via TCP/IP packets.


Dell PowerEdge R640 R740 R740XD R840 R940 R940xa MX740c MX840c and T640 Server BIOS contain a stack-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability leading to a denial of Service arbitrary code execution or information disclosure in UEFI or BIOS Preboot Environment.


Dell PowerEdge R640 R740 R740XD R840 R940 R940xa MX740c MX840c and Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious user with high privileges may potentially exploit this vulnerability leading to a denial of Service arbitrary code execution or information disclosure in UEFI or BIOS Preboot Environment.


Dell PowerEdge R640 R740 R740XD R840 R940 R940xa MX740c MX840c and T640 Server BIOS contain a heap-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability leading to a denial of Service arbitrary code execution or information disclosure in UEFI or BIOS Preboot Environment.


Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized which might result in stack-based buffer overflow leading to denial of service escalation of privileges and information disclosure.

information disclosure
denial of service
buffer overflow
escalated privilege


NVIDIA Shield TV Experience prior to v8.0.1 NVIDIA Tegra bootloader contains a vulnerability where the software performs an incorrect bounds check which may lead to buffer overflow resulting in escalation of privileges and code execution. escalation of privileges and information disclosure code execution denial of service or escalation of privileges.


Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege denial of service and/or information disclosure via local access.


Buffer overflow in BlockIo service for EDK II may allow an unauthenticated user to potentially enable escalation of privilege information disclosure and/or denial of service via network access.


Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Information Disclosure with user crafted input files via a Buffer Overflow or Out-of-bounds Read during syntax parsing of certain for loops in jsparse.c.

information disclosure
denial of service
buffer overflow
out of bound read


** DISPUTED ** The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection which allows the remote attacker to achieve code execution denial of service or information disclosure by sending a crafted QMP command to the listening server. Note: This has been disputed as a non-issue since QEMU's -qmp interface is meant to be used by trusted users. If one is able to access this interface via a tcp socket open to the internet then it is an insecure configuration issue.

information disclosure
denial of service
command injection


** DISPUTED ** The QMP guest_exec command in QEMU 4.0.0 and earlier is prone to OS command injection which allows the attacker to achieve code execution denial of service or information disclosure by sending a crafted QMP command to the listening server. Note: This has been disputed as a non-issue since QEMU's -qmp interface is meant to be used by trusted users. If one is able to access this interface via a tcp socket open to the internet then it is an insecure configuration issue.


Improper buffer restrictions in subsystem for Intel(R) CSME versions before 12.0.64 13.0.32 14.0.33 and 14.5.12 may allow an authenticated user to potentially enable escalation of privilege information disclosure or denial of service via local access.

information disclosure
denial of service
escalated privilege


NVIDIA Shield TV Experience prior to v8.0.1 NVIDIA Tegra software contains a vulnerability in the bootloader where it does not validate the fields of the boot image which may lead to code execution denial of service escalation of privileges and information disclosure.


NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or write to a buffer but it uses an incorrect length value that causes it to access memory that is outside of the bounds of the buffer which may lead to denial of service escalation of privileges code execution or information disclosure.


NVIDIA Windows GPU Display driver software for Windows (all versions) contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the product does not properly synchronize shared data such as static variables across threads which can lead to undefined behavior and unpredictable data changes which may lead to denial of service escalation of privileges or information disclosure.


NVIDIA NVFlash NVUFlash Tool prior to v5.588.0 and GPUModeSwitch Tool prior to 2019-11 NVIDIA kernel mode driver (nvflash.sys nvflsh32.sys and nvflsh64.sys) contains a vulnerability in which authenticated users with administrative privileges can gain access to device memory and registers of other devices not managed by NVIDIA which may lead to escalation of privileges information disclosure or denial of service.


NVIDIA Shield TV Experience prior to v8.0 NVIDIA Tegra bootloader contains a vulnerability in nvtboot where the Trusted OS image is improperly authenticated which may lead to code execution denial of service escalation of privileges and information disclosure code execution denial of service or escalation of privileges


NVIDIA GeForce Experience all versions prior to 3.20.0.118 contains a vulnerability when GameStream is enabled in which an attacker with local system access can load the Intel graphics driver DLLs without validating the path or signature (also known as a binary planting or DLL preloading attack) which may lead to denial of service information disclosure or escalation of privileges through code execution.


Insufficient access control in a hardware abstraction driver for Intel(R) Processor Identification Utility for Windows before version 6.1.0731 may allow an authenticated user to potentially enable escalation of privilege denial of service or information disclosure via local access.


Logic errors in Intel(R) PROSet/Wireless WiFi Software before version 21.40 may allow an authenticated user to potentially enable escalation of privilege denial of service and information disclosure via local access.


Insufficient access control in hardware abstraction in SEMA driver for Intel(R) Computing Improvement Program before version 2.4.0.04733 may allow an authenticated user to potentially enable escalation of privilege denial of service or information disclosure via local access.


Authentication bypass in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure escalation of privilege and/or denial of service via local access.


Heap corruption in Intel(R) Baseboard Management Controller firmware may allow an unauthenticated user to potentially enable information disclosure escalation of privilege and/or denial of service via network access.


Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege denial of service and/or information disclosure via local access.


Insufficient access control in system firmware for Intel(R) Xeon(R) Scalable Processors 2nd Generation Intel(R) Xeon(R) Scalable Processors and Intel(R) Xeon(R) Processors D Family may allow a privileged user to potentially enable escalation of privilege denial of service and/or information disclosure via local access.


Insufficient initialization in Intel(R) SGX SDK Windows versions 2.4.100.51291 and earlier and Linux versions 2.6.100.51363 and earlier may allow an authenticated user to enable information disclosure escalation of privilege or denial of service via local access.


Improper Authentication in subsystem in Intel(R) CSME versions 12.0 through 12.0.48 (IOT only: 12.0.56) versions 13.0 through 13.0.20 versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege denial of service or information disclosure via local access.


Pointer corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege denial of service and/or information disclosure via local access.


NVIDIA GPU Display Driver for Windows and Linux all versions contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which user-mode clients can access legacy privileged APIs which may lead to denial of service escalation of privileges and information disclosure.


NVIDIA Linux kernel distributions contain a vulnerability in nvmap where writes may be allowed to read-only buffers which may result in escalation of privileges complete denial of service unconstrained information disclosure and serious data tampering of all processes on the system.


NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where there is the potential to execute privileged operations by the guest OS which may lead to information disclosure data tampering escalation of privileges and denial of service


NVIDIA GPU Display Driver for Windows installer contains a vulnerability where an attacker with local unprivileged system access may be able to replace an application resource with malicious files. This attack requires a user with system administration rights to execute the installer and requires the attacker to replace the files in a very short time window between file integrity validation and execution. Such an attack may lead to code execution escalation of privileges denial of service and information disclosure.


NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where there is the potential to write to a shared memory location and manipulate the data after the data has been validated which may lead to denial of service and escalation of privileges and information disclosure but attacker doesn't have control over what information is obtained. This affects vGPU version 12.x (prior to 12.2) version 11.x (prior to 11.4) and version 8.x (prior to 8.7).


NVIDIA GeForce Experience contains a vulnerability in user authorization where GameStream does not correctly apply individual user access controls for users on the same device which with user intervention may lead to escalation of privileges information disclosure data tampering and denial of service affecting other resources beyond the intended security authority of GameStream.


Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing. Improper restriction of operations within the bounds of a memory buffer might lead to escalation of privileges information disclosure and denial of service.


NVIDIA Tegra kernel driver contains a vulnerability in NVIDIA NVDEC where a user with high privileges might be able to read from or write to a memory location that is outside the intended boundary of the buffer which may lead to denial of service Information disclosure loss of Integrity or possible escalation of privileges.


Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing. Improper restriction of operations within the bounds of a memory buffer might lead to denial of service escalation of privileges and information disclosure.


Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing. Improper restriction of operations within the bounds of a memory buffer might lead to information disclosure denial of service or escalation of privileges.


RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB device privileged IN and OUT instructions (leading to Escalation of Privileges Denial of Service Code Execution and Information Disclosure) via a crafted Device IO Control packet to a device.


RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve unauthorized access to USB devices (Escalation of Privileges Denial of Service Code Execution and Information Disclosure) via a crafted Device IO Control packet to a device.


Dell DBUtilDrv2.sys driver (versions 2.5 and 2.6) contains an insufficient access control vulnerability which may lead to escalation of privileges denial of service or information disclosure. Local authenticated user access is required.


RtsUpx.sys in Realtek RtsUpx USB Utility Driver for Camera/Hub/Audio through 1.14.0.0 allows local low-privileged users to achieve an arbitrary read or write operation from/to physical memory (leading to Escalation of Privileges Denial of Service Code Execution and Information Disclosure) via a crafted Device IO Control packet to a device.


Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges denial of service or information disclosure. Local authenticated user access is required.


NVIDIA GPU Display Driver for Windows contains a vulnerability in the DirectX11 user mode driver (nvwgf2um/x.dll) where an unauthorized attacker on the network can cause an out-of-bounds write through a specially crafted shader which may lead to code execution to cause denial of service escalation of privileges information disclosure and data tampering. The scope of the impact may extend to other components.


NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged regular user on the network can cause an out-of-bounds write through a specially crafted shader which may lead to code execution denial of service escalation of privileges information disclosure and data tampering. The scope of the impact may extend to other components.


Escalation of privilege vulnerability in admin portal for Intel Unite App versions 3.1.32.12 3.1.41.18 and 3.1.45.26 allows an attacker with network access to cause a denial of service and/or information disclosure.


Logic issue in variable service module for EDK II/UDK2018/UDK2017/UDK2015 may allow an authenticated user to potentially enable escalation of privilege information disclosure and/or denial of service via local access.


Improper configuration in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege information disclosure and/or denial of service via local access.


Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege information disclosure and/or denial of service via local access.


Stack overflow in DxeCore for EDK II may allow an unauthenticated user to potentially enable escalation of privilege information disclosure and/or denial of service via local access.


NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL) handling for user mode requests could create a non-trusted pointer dereference which may lead to information disclosure denial of service escalation of privileges or code execution. The updates apply to all versions prior to R28.3.


Logic error in BIOS firmware for 8th 9th and 10th Generation Intel(R) Core(TM) Processors may allow an unauthenticated user to potentially enable escalation of privilege denial of service and/or information disclosure via physical access.


NVIDIA GeForce Experience all versions prior to 3.20.5.70 contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module which may lead to code execution denial of service escalation of privileges and information disclosure.


NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which the software reads from a buffer by using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer which may lead to code execution denial of service escalation of privileges or information disclosure. This affects vGPU version 8.x (prior to 8.4) version 9.x (prior to 9.4) and version 10.x (prior to 10.3).


NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which the software does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed by using an index or pointer such as memory or files which may lead to code execution denial of service escalation of privileges or information disclosure. This affects vGPU version 8.x (prior to 8.4) version 9.x (prior to 9.4) and version 10.x (prior to 10.3).


Reversible one-way hash in Intel(R) CSME versions before 11.8.76 11.12.77 and 11.22.77 may allow a privileged user to potentially enable escalation of privilege denial of service or information disclosure via local access.


Pool/Heap Overflow in AMD Graphics Driver for Windows 10 in Escape 0x110037 may lead to escalation of privilege information disclosure or denial of service.


Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege denial of service and/or information disclosure via local access.


Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege denial of service and/or information disclosure via local access.


Insufficient session validation in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege denial of service and/or information disclosure via local access.


Potential vulnerabilities have been identified in the system BIOS of certain HP PC products which may allow Escalation of Privilege Arbitrary Code Execution Unauthorized Code Execution Denial of Service and Information Disclosure.


Insufficient access protection in firmware in Intel Server Board Intel Server System and Intel Compute Module before firmware version 00.01.0014 may allow an unauthenticated attacker to potentially execute arbitrary code resulting in information disclosure escalation of privilege and/or denial of service via local access.

information disclosure
denial of service
escalated privilege
arbitrary code execution


Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure escalation of privilege and/or denial of service via local access.


Improper access control in the Intel(R) Processor Diagnostic Tool before version 4.1.2.24 may allow an authenticated user to potentially enable escalation of privilege information disclosure or denial of service via local access.

information disclosure
denial of service
escalated privilege
improper access control


Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerability can cause memory corruption which may lead to information disclosure escalation of privileges and denial of service.

information disclosure
denial of service
escalated privilege
memory corruption


Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privilege denial of service and information disclosure via adjacent access.


Memory corruption issues in Intel(R) PROSet/Wireless WiFi Software extension DLL before version 21.40 may allow an authenticated user to potentially enable escalation of privilege information disclosure and a denial of service via local access.


Memory corruption issues in Intel(R) WIFI Drivers before version 21.40 may allow a privileged user to potentially enable escalation of privilege denial of service and information disclosure via local access.


Memory corruption in system firmware for Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege denial of service and/or information disclosure via local access.


NVIDIA GPU Display Driver for Windows and Linux all versions contains a vulnerability in the kernel mode layer (nvlddmkm.sys or nvidia.ko) where improper access control may lead to denial of service information disclosure or data corruption.

information disclosure
denial of service
improper access control


NVIDIA GPU Display Driver for Windows all versions contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which improper access control may lead to denial of service and information disclosure.


NVIDIA Windows GPU Display Driver all versions contains a vulnerability in the Inter Process Communication APIs in which improper access control may lead to code execution denial of service or information disclosure.


NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which an input index is not validated which may lead to integer overflow which in turn may cause tampering of data information disclosure or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).

information disclosure
denial of service
integer overflow


Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow on the size parameter of the tz_map_shared_mem function which might lead to denial of service information disclosure or data tampering.


An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4

information disclosure
denial of service
integer overflow
buffer overflow


Trusty (the trusted OS produced by NVIDIA for Jetson devices) driver contains a vulnerability in the NVIDIA OTE protocol message parsing code where an integer overflow in a malloc() size calculation leads to a buffer overflow on the heap which might result in information disclosure escalation of privileges and denial of service.

information disclosure
denial of service
integer overflow
buffer overflow
escalated privilege


In Exiv2 0.26 there is an out-of-bounds read in Exiv2::Internal::binaryToString in image.cpp. It could result in denial of service or information disclosure.

information disclosure
denial of service
out of bound read


NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged regular user can cause an out-of-bounds read which may lead to denial of service and information disclosure.


There is an out-of-bounds read vulnerability in the function FlateStream::getChar() located at Stream.cc in Xpdf 4.01.01. It can for example be triggered by sending a crafted PDF document to the pdftoppm tool. It might allow an attacker to cause Information Disclosure or a denial of service.


The ConvertToPDF plugin in Foxit Reader before 8.2.1 and PhantomPDF before 8.2.1 on Windows when the gflags app is enabled allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted TIFF image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.


The ConvertToPDF plugin in Foxit Reader before 8.2 and PhantomPDF before 8.2 on Windows when the gflags app is enabled allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted JPEG image. The vulnerability could lead to information disclosure; an attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process.


There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability will cause Information Disclosure or Denial of Service.


Out-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Denial of Service or Information Disclosure via a crafted SSI file.


Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80 11.12.80 11.22.80 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure and/or denial of service via network access.


NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which a race condition may cause the vGPU plugin to continue using a previously validated resource that has since changed which may lead to denial of service or information disclosure. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).

information disclosure
denial of service
race condition


NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which it validates a shared resource before using it creating a race condition which may lead to denial of service or information disclosure. This affects vGPU version 8.x (prior to 8.4) version 9.x (prior to 9.4) and version 10.x (prior to 10.3).


An issue was discovered in Grafana Cortex through 1.9.0. The header value X-Scope-OrgID is used to construct file paths for rules files and if crafted to conduct directory traversal such as ae ../../sensitive/path/in/deployment pathname then Cortex will attempt to parse a rules file at that location and include some of the contents in the error message. (Other Cortex API requests can also be sent a malicious OrgID header e.g. tricking the ingester into writing metrics to a different location but the effect is nuisance rather than information disclosure.)

information disclosure
directory traversal


A directory traversal vulnerability exists in the Web Manager FSBrowsePage functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially crafted HTTP request can lead to information disclosure. An attacker can make an authenticated HTTP request to trigger this vulnerability.


SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the importFile parameter of the RefreshMapping import functionality.


SuiteCRM before 7.10.33 and 7.11.22 allows information disclosure via Directory Traversal. An attacker can partially include arbitrary files via the file_name parameter of the Step3 import functionality.


A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6 R41x before R410.6 and R43x before R430.2 which could lead to possible information disclosure. Honeywell strongly encourages and recommends all customers running unsupported versions of EKPS prior to R400 to upgrade to a supported version.


Directory Traversal in Dell Storage Manager 2016 R2.1 causes Information Disclosure when the doGet method of the EmWebsiteServlet class doesn't properly validate user provided path before using it in file operations. Was ZDI-CAN-4459.


Remote Manager in Open Enterprise Server (OES) allows unauthenticated remote attackers to read any arbitrary file via a specially crafted URL that allows complete directory traversal and total information disclosure. This vulnerability is present on all versions of OES for linux it applies to OES2015 SP1 before Maintenance Update 11080 OES2015 before Maintenance Update 11079 OES11 SP3 before Maintenance Update 11078 OES11 SP2 before Maintenance Update 11077).


ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal and file extension check bypass in the Course component resulting in code execution. ATutor versions 2.2.1 and earlier are vulnerable to a directory traversal vulnerability in the Course Icon component resulting in information disclosure.


Adobe Reader Mobile versions 20.0.1 and earlier have a directory traversal vulnerability. Successful exploitation could lead to information disclosure.


In xmpp-http-upload before version 0.4.0 when the GET method is attacked attackers can read files which have a `.data` suffix and which are accompanied by a JSON file with the `.meta` suffix. This can lead to Information Disclosure and in some shared-hosting scenarios also to circumvention of authentication or other limitations on the outbound (GET) traffic. For example in a scenario where a single server has multiple instances of the application running (with separate DATA_ROOT settings) an attacker who has knowledge about the directory structure is able to read files from any other instance to which the process has read access. If instances have individual authentication (for example HTTP authentication via a reverse proxy source IP based filtering) or other restrictions (such as quotas) attackers may circumvent those limits in such a scenario by using the Directory Traversal to retrieve data from the other instances. If the associated XMPP server (or anyone knowing the SECRET_KEY) is malicious they can write files outside the DATA_ROOT. The files which are written are constrained to have the `.meta` and the `.data` suffixes; the `.meta` file will contain the JSON with the Content-Type of the original request and the `.data` file will contain the payload. The issue is patched in version 0.4.0.


NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint /VisualOPS/v.1.0./ lacks proper access control and parameter validation allowing for information disclosure via a directory traversal attack.


Numerous Tableau products are vulnerable to XXE via a malicious workbook extension or data source leading to information disclosure or a DoS. This affects Tableau Server Tableau Desktop Tableau Reader and Tableau Public Desktop.


An information disclosure issue existed in the handling of the Storage Access API. This issue was addressed with improved logic. This issue is fixed in iOS 13.3 and iPadOS 13.3 tvOS 13.3 Safari 13.0.4 iTunes 12.10.3 for Windows. Visiting a maliciously crafted website may reveal sites a user has visited.


An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.4 Security Update 2021-003 Catalina Security Update 2021-004 Mojave iOS 14.6 and iPadOS 14.6. Processing a maliciously crafted USD file may disclose memory contents.


An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 15.3 and iPadOS 15.3 tvOS 15.3 Security Update 2022-001 Catalina macOS Monterey 12.2 macOS Big Sur 11.6.3. Processing a maliciously crafted STL file may lead to unexpected application termination or arbitrary code execution.


SimpleXML (latest version 2.7.1) is vulnerable to an XXE vulnerability resulting SSRF information disclosure DoS and so on.


In check_user_token in util.c in the Yubico PAM module (aka pam_yubico) 2.18 through 2.25 successful logins can leak file descriptors to the auth mapping file which can lead to information disclosure (serial number of a device) and/or DoS (reaching the maximum number of file descriptors).


A

flaw

was

found

in

polkit

before

version

The

implementation

of

the

polkit_backend_interactive_authority_check_authorization

function

in

polkitd

allows

to

test

for

authentication

and

trigger

authentication

of

unrelated

processes

owned

by

other

users.

This

may

result

in

a

local

DoS

and

information

disclosure.


GnuPG

version

contains

a

Cross

ite

Request

Forgery

(CSRF)

vulnerability

in

dirmngr

that

can

result

in

Attacker

controlled

CSRF

Information

Disclosure

DoS.

This

attack

appear

to

be

exploitable

via

Victim

must

perform

a

WKD

request

e.g.

enter

an

email

address

in

the

composer

window

of

Thunderbird/Enigmail.

This

vulnerability

appears

to

have

been

fixed

in

after

commit


An information disclosure issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1 watchOS 7.0 iOS 14.0 and iPadOS 14.0 iTunes for Windows 12.10.9 iCloud for Windows 11.5 tvOS 14.0. A remote attacker may be able to leak memory.


An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 13.5 and iPadOS 13.5 macOS Catalina 10.15.5 tvOS 13.4.5 watchOS 6.2.5. A malicious application may be able to determine another application's memory layout.


An information disclosure issue was addressed with improved state management. This issue is fixed in watchOS 7.2 macOS Big Sur 11.1 Security Update 2020-001 Catalina Security Update 2020-007 Mojave iOS 14.3 and iPadOS 14.3 tvOS 14.3. Processing a maliciously crafted font may result in the disclosure of process memory.


It was found that the JAXP implementation used in JBoss EAP 7.0 for SAX and DOM parsing is vulnerable to certain XXE flaws. An attacker could use this flaw to cause DoS SSRF or information disclosure if they are able to provide XML content for parsing.


In Mahara before 20.04.5 20.10.3 21.04.2 and 21.10.0 the account associated with a web services token is vulnerable to being exploited and logged into resulting in information disclosure (at a minimum) and often escalation of privileges.

information disclosure
escalated privilege


Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege and/or information disclosure via local access.


Logic issue in subsystem for Intel(R) CSME before versions 12.0.45 13.0.10 and 14.0.10 may allow a privileged user to potentially enable escalation of privilege and information disclosure via local access.


In SmsController there is a possible information disclosure due to a permissions bypass. This could lead to local escalation of privilege and sending sms with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-195311502


Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.


In vcu driver there is a possible information disclosure due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171675; Issue ID: ALPS06171675.


Remote

Information

Disclosure

and

Escalation

of

Privileges

in

ManageEngine

Desktop

Central

MSP

allows

attackers

to

download

unencrypted

XML

files

containing

all

data

for

configuration

policies

via

a

predictable

/client-data/<client_id>/collections/##/usermgmt.xml

URL

as

demonstrated

by

passwords

and

Wi-Fi

keys.

This

is

fixed

in

build


CoreOS Tectonic 1.7.x before 1.7.9-tectonic.4 and 1.8.x before 1.8.4-tectonic.3 mounts a direct proxy to the kubernetes cluster at /api/kubernetes/ which is accessible without authentication to Tectonic and allows an attacker to directly connect to the kubernetes API server. Unauthenticated users are able to list all Namespaces through the Console resulting in an information disclosure. Tectonic's exposure of an unauthenticated API endpoint containing information regarding the internal state of the cluster can provide an attacker with information that may assist in other attacks against the cluster. For example an attacker may not have the permissions required to list all namespaces in the cluster but can instead leverage this vulnerability to enumerate the namespaces and then begin to check each namespace for weak authorization policies that may allow further escalation of privileges.


Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure via physical access.


Improper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an authenticated user to potentially enable escalation of privilege and information disclosure via physical access.


Improper access control in the Insyde software tools may allow an authenticated user to potentially enable escalation of privilege or information disclosure via local access. This is a software vulnerability not a firmware issue. Affected tools include: H2OFFT version 3.02~5.28 100.00.00.00~100.00.08.23 and 200.00.00.01~200.00.00.05 H2OOAE before version 200.00.00.02 H2OSDE before version 200.00.00.07 H2OUVE before version 200.00.02.02 H2OPCM before version 100.00.06.00 H2OELV before version 100.00.02.08.

information disclosure
escalated privilege
improper access control


Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7 may allow a local attacker to potentially enable information disclosure via local access.

information disclosure
improper access control


Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.


Improper access control for the Intel(R) Computing Improvement Program before version 2.4.5982 may allow an unprivileged user to potentially enable information disclosure via network access.


Improper access control in the API for the Intel(R) Graphics Driver versions before 26.20.100.7209 may allow an authenticated user to potentially enable information disclosure via local access.


Improper access control in software for Intel(R) PROSet/Wireless Wi-Fi and Killer(TM) Wi-Fi in Windows 10 and 11 may allow an authenticated user to potentially enable information disclosure via local access.


Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.


Improper access control in the Intel(R) RealSense(TM) DCM before version 20210625 may allow an authenticated user to potentially enable information disclosure via local access.


Improper access control in the Intel(R) Capital Global Summit Android application may allow an authenticated user to potentially enable information disclosure via local access.


Improper access control in the Intel(R) Smart Campus Android application before version 6.1 may allow authenticated user to potentially enable information disclosure via local access.


Improper access control in SOA Configuration Trace component in SAP NetWeaver (ABAP Server) and ABAP Platform versions - 702 730 731 740 750 allows any authenticated user to enumerate all SAP users leading to Information Disclosure.


Improper access control in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to potentially enable information disclosure via local access.


Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.


Information Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to improper access control. A remote attacker can check for the existence of paths and file names via crafted HTTP requests.


There is an improper access control vulnerability in Huawei Share. The software does not properly restrict access to certain file from certain application. An attacker tricks the user into installing a malicious application then establishing a connect to the attacker through Huawei Share successful exploit could cause information disclosure.


An improper access control vulnerability was reported in some Motorola-branded Binatone Hubble Cameras which could allow an unauthenticated attacker on the same network as the device to access administrative pages that could result in information disclosure or device firmware update with verified firmware.


NVIDIA Tegra kernel in Jetson AGX Xavier Series Jetson Xavier NX TX1 TX2 Nano and Nano 2GB all L4T versions prior to r32.5 contains a vulnerability in the INA3221 driver in which improper access control may lead to unauthorized users gaining access to system power usage data which may lead to information disclosure.


The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/action.php file which can be exploited by an unauthenticated attacker to view all API keys and secrets of integrated third-party APIs like that of PayPal Stripe Mailchimp Hubspot HelpScout reCAPTCHA and many more in versions up to and including 2.1.3.


In aee daemon there is a possible information disclosure due to improper access control. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419017; Issue ID: ALPS06284104.


Improper access control in Citrix ADC and Citrix Gateway versions before 13.0-58.30 12.1-57.18 12.0-63.21 11.1-64.14 and 10.5-70.18 and Citrix SDWAN WAN-OP versions before 11.1.1a 11.0.3d and 10.2.7 resulting in limited information disclosure to low privileged users.


In JetBrains YouTrack before 2020.3.6638 improper access control for some subresources leads to information disclosure via the REST API.


Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Information Exposure Through an Error Message vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.

information disclosure
information exposure


There is an information exposure vulnerability on several Huawei Products. The vulnerability is due to that the software does not properly protect certain information. Successful exploit could cause information disclosure. Affected product versions include: CloudEngine 12800 V200R005C10SPC800; CloudEngine 5800 V200R005C10SPC800 V200R019C00SPC800; CloudEngine 6800 V200R005C10SPC800 V200R005C20SPC800 V200R019C00SPC800; CloudEngine 7800 V200R005C10SPC800 V200R019C00SPC800.


HUAWEI P30 smart phones with versions earlier than 10.1.0.160(C00E160R2P11) have an information exposure vulnerability. The system does not properly authenticate the application that access a specified interface. Attackers can trick users into installing malicious software to exploit this vulnerability and obtain some information about the device. Successful exploit may cause information disclosure.


** DISPUTED ** Citrix Gateway 11.1 12.0 and 12.1 allows Information Exposure Through Caching. NOTE: Citrix disputes this as not a vulnerability. There is no sensitive information disclosure through the cache headers on Citrix ADC. The \Via\ header lists cache protocols and recipients between the start and end points for a request or a response. The \Age\ header provides the age of the cached response in seconds. Both headers are commonly used for proxy cache and the information is not sensitive.


Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70 12.0.45 and 13.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.

information disclosure
insufficient input validation


Adobe Campaign Classic version 18.10.5-8984 and earlier versions have an Insufficient input validation vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.


Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70 11.11.70 11.22.70 12.0.45 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.


Insufficient input validation in Intel(R) DAL software for Intel(R) CSME before versions 11.8.70 11.11.70 11.22.70 12.0.45 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.


Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70 11.11.70 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via physical access.


Insufficient input validation in Intel(R) Baseboard Management Controller firmware may allow an authenticated user to potentially enable information disclosure via network access.


Insufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user to potentially enable information disclosure via adjacent access.


Insufficient input validation in BIOS update utility in Intel NUC FW kits downloaded before May 24 2018 may allow a privileged user to potentially trigger a denial of service or information disclosure via local access.

information disclosure
insufficient input validation
denial of service


Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors Intel(R) Xeon(R) Processors D Family Intel(R) Xeon(R) Processors E5 v4 Family Intel(R) Xeon(R) Processors E7 v4 Family and Intel(R) Atom(R) processor C Series may allow a privileged user to potentially enable escalation of privilege denial of service and/or information disclosure via local access.

information disclosure
insufficient input validation
denial of service
escalated privilege


Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70 11.11.70 11.22.70 12.0.45 13.0.10 and 14.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable escalation of privilege information disclosure or denial of service via local access.


Insufficient input validation in MdeModulePkg in EDKII may allow an unauthenticated user to potentially enable escalation of privilege denial of service and/or information disclosure via physical access.


Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of privilege denial of service and/or information disclosure via local access.


Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially enable escalation of privilege denial of service and/or information disclosure via local access.


Insufficient input validation in Intel(R) SGX SDK multiple Linux and Windows versions may allow an authenticated user to enable information disclosure escalation of privilege or denial of service via local access.


Adobe Acrobat and Reader versions 2018.011.20063 and earlier 2017.011.30102 and earlier and 2015.006.30452 and earlier have an integer overflow vulnerability. Successful exploitation could lead to information disclosure.


Adobe Flash Player versions 29.0.0.171 and earlier have an Integer Overflow vulnerability. Successful exploitation could lead to information disclosure.


In NDEF_MsgValidate of ndef_utils in Android 7.1.1 7.1.2 8.0 8.1 and 9 there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.


Adobe Acrobat and Reader versions 2019.010.20069 and earlier 2019.010.20069 and earlier 2017.011.30113 and earlier version and 2015.006.30464 and earlier have an integer overflow vulnerability. Successful exploitation could lead to information disclosure.


Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to integer overflow when parsing MIME headers. This may lead to information disclosure or crash.


In libandroidfw there is a possible OOB read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-111215250


Adobe Acrobat and Reader versions 2019.012.20035 and earlier 2019.012.20035 and earlier 2017.011.30142 and earlier 2017.011.30143 and earlier 2015.006.30497 and earlier and 2015.006.30498 and earlier have an integer overflow vulnerability. Successful exploitation could lead to information disclosure.


In tremolo there is a possible out of bounds read due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-210625816


In valid_ipc_dram_addr of cm_access_control.c there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-197966306References: N/A


In asf extractor there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05561383.


In ccu driver there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05827154; Issue ID: ALPS05827154.


In flv extractor there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561369; Issue ID: ALPS05561369.


In WAVSource::read of WAVExtractor.cpp there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1 Android-9 Android-10 Android-11 Android-8.0; Android ID: A-170583712.


In flv extractor there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561362; Issue ID: ALPS05561362.


In CryptoPlugin::decrypt of CryptoPlugin.cpp there is a possible out of bounds read due to integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176496160


In decrypt_1_2 of CryptoPlugin.cpp there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444786


In the FingerTipS touch screen driver there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157156744


In the FingerTipS touch screen driver there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-156739245


In asf extractor there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05585817.


Huawei smartphones with software of MHA-AL00AC00B125 have an integer overflow vulnerability. The software does not process certain variable properly when handle certain process. An attacker tricks the user who has root privilege to install a crafted application successful exploit could cause information disclosure.