CVE-2024-33xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
609 records · Page 6 of 7
An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
UpdatedAn issue in the component AsIO64.sys of ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver v1.0.1.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
UpdatedAn issue in the component AsUpIO64.sys of ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver 5.30.20.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
UpdatedTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the page parameter in ip/goform/addressNat.
UpdatedTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/addressNat.
UpdatedTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter in ip/goform/RouteStatic.
UpdatedTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the mitInterface parameter in ip/goform/RouteStatic.
UpdatedTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm.
UpdatedTenda FH1206 V1.2.0.8(8155)_EN was discovered to contain a stack-based buffer overflow vulnerability via the PPPOEPassword parameter in ip/goform/QuickIndex.
UpdatedA cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts into web pages viewed by other users.
UpdatedFlatPress v1.3 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which allows them to execute arbitrary code in the context of a victim's web browser.
UpdatedTenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/addWifiMacFilter.
UpdatedTenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceMac parameter at ip/goform/addWifiMacFilter.
UpdatedTenda AC18 V15.03.3.10_EN was discovered to contain a stack-based buffer overflow vulnerability via the deviceId parameter at ip/goform/saveParentControlInfo.
UpdatedJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authUserList() function.
UpdatedJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the unallocatedList() function.
UpdatedJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the getDeptList() function.
UpdatedJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the commentList() function.
UpdatedJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the myProcessList function.
UpdatedJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the list function.
UpdatedJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the authRoleList function.
UpdatedJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the export function.
UpdatedJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findApplyedTasksPage function in BpmTaskMapper.xml.
UpdatedJ2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the sql_filter parameter in the findpage function.
UpdatedRoothub v2.6 was discovered to contain a SQL injection vulnerability via the nodeTitle parameter in the parentNode() function..
UpdatedRoothub v2.6 was discovered to contain a SQL injection vulnerability via the topic parameter in the list() function.
UpdatedRoothub v2.6 was discovered to contain a SQL injection vulnerability via the 's' parameter in the search() function.
UpdatedRoothub v2.5 was discovered to contain an arbitrary file upload vulnerability via the customPath parameter in the upload() function. This vulnerability allows attackers to execute arbitrary code via a crafted JSP file.
UpdatedLuckyFrameWeb v3.5.2 was discovered to contain an arbitrary read vulnerability via the fileDownload method in class com.luckyframe.project.common.CommonController.
Updatedcrmeb_java v1.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the mergeList method in class com.zbkj.front.pub.ImageMergeController.
UpdatedD-LINK DIR-845L <=v1.01KRb03 is vulnerable to Information disclosurey via bsc_sms_inbox.php.
UpdatedD-Link DIR-845L router v1.01KRb03 and before is vulnerable to Command injection via the hnap_main()func.
UpdatedD-Link DIR-845L router <=v1.01KRb03 is vulnerable to Cross Site Scripting (XSS) via /htdocs/webinc/js/bsc_sms_inbox.php.
UpdatedD-Link DIR-845L router v1.01KRb03 and before is vulnerable to Permission Bypass via the getcfg.php component.
UpdatedDirectory Traversal in the web interface of the Tiptel IP 286 with firmware version 2.61.13.10 allows attackers to overwrite arbitrary files on the phone via the Ringtone upload function.
UpdatedAn arbitrary file upload vulnerability in the Media Manager component of DokuWiki 2024-02-06a allows attackers to execute arbitrary code by uploading a crafted SVG file. NOTE: as noted in the 4267 issue reference, there is a position that exploitability can only occur with a misconfiguration of the product.
UpdatedA stored cross-site scripting (XSS) vulnerability in the component /pubs/counter.php of ThinkSAAS v3.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the code parameter.
UpdatedA stored cross-site scripting (XSS) vulnerability in the component /action/anti.php of ThinkSAAS v3.7.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the word parameter.
UpdatedTencent Libpag v4.3 is vulnerable to Buffer Overflow. A user can send a crafted image to trigger a overflow leading to remote code execution.
UpdatedInformation disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
UpdatedTransient DOS while parsing the MBSSID IE from the beacons when IE length is 0.
UpdatedTransient DOS while parsing ESP IE from beacon/probe response frame.
UpdatedTransient DOS when transmission of management frame sent by host is not successful and error status is received in the host.
UpdatedTransient DOS while parsing fragments of MBSSID IE from beacon frame.
Updated- CVE-2024-33067: Buffer Over-read in Audio 6.1 Medium
Information disclosure while invoking callback function of sound model driver from ADSP for every valid opcode received from sound model driver.
Updated Memory corruption while redirecting log file to any file location with any file name.
UpdatedMemory corruption while taking snapshot when an offset variable is set by camera driver.
UpdatedInformation disclosure while parsing the multiple MBSSID IEs from the beacon.
UpdatedTransient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.
UpdatedInformation disclosure while processing IOCTL call made for releasing a trusted VM process release or opening a channel without initializing the process.
UpdatedMemory corruption when two threads try to map and unmap a single node simultaneously.
UpdatedMemory corruption while processing frame command IOCTL calls.
UpdatedMemory corruption while assigning memory from the source DDR memory(HLOS) to ADSP.
UpdatedTransient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location.
UpdatedMemory corruption when allocating and accessing an entry in an SMEM partition continuously.
UpdatedMemory corruption while invoking IOCTL calls to unmap the DMA buffers.
UpdatedMemory corruption during the handshake between the Primary Virtual Machine and Trusted Virtual Machine.
Updated- CVE-2024-33053: Use After Free in Video 6.7 Medium
Memory corruption when multiple threads try to unregister the CVP buffer at the same time.
Updated - CVE-2024-33052: Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host 7.8 High
Memory corruption when user provides data for FM HCI command control operations.
Updated Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
UpdatedTransient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
UpdatedTransient DOS while parsing noninheritance IE of Extension element when length of IE is 2 of beacon frame.
UpdatedTransient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame.
UpdatedMemory corruption when the captureRead QDCM command is invoked from user-space.
UpdatedMemory corruption when BTFM client sends new messages over Slimbus to ADSP.
UpdatedMemory corruption while Configuring the SMR/S2CR register in Bypass mode.
Updated- CVE-2024-33043: Buffer Over-read in FM Host 5.5 Medium
Transient DOS while handling PS event when Program Service name length offset value is set to 255.
Updated - CVE-2024-33042: Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in FM Host 7.8 High
Memory corruption when Alternative Frequency offset value is set to 255.
Updated Memory corruption when input parameter validation for number of fences is missing for fence frame IOCTL calls,
UpdatedMemory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.
UpdatedMemory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.
UpdatedMemory corruption while passing untrusted/corrupted pointers from DSP to EVA.
UpdatedInformation disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.
UpdatedMemory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.
UpdatedMemory corruption while calculating total metadata size when a very high reserved size is requested by gralloc clients.
UpdatedMemory corruption can occur if VBOs hold outdated or invalid GPU SMMU mappings, especially when the binding and reclaiming of memory buffers are performed at the same time.
UpdatedMemory corruption while processing IOCTL calls to unmap the buffers.
UpdatedMemory corruption when the user application modifies the same shared memory asynchronously when kernel is accessing it.
UpdatedMemory corruption while processing the update SIM PB records request.
UpdatedMemory corruption while parsing IPC frequency table parameters for LPLH that has size greater than expected size.
UpdatedMemory corruption while handling the PDR in driver for getting the remote heap maps.
UpdatedMemory corruption as fence object may still be accessed in timeline destruct after isync fence is released.
UpdatedMemory corruption can occur when arbitrary user-space app gains kernel level privilege to modify DDR memory by corrupting the GPU page table.
UpdatedTransient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.
UpdatedTransient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE.
UpdatedTransient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the ML IE length.
UpdatedMemory corruption while creating a fence to wait on timeline events, and simultaneously signal timeline events.
UpdatedMemory corruption while allocating memory in HGSL driver.
UpdatedMemory corruption while processing IOCTL call to set metainfo.
UpdatedTransient DOS while processing TID-to-link mapping IE elements.
UpdatedTransient DOS while parsing the received TID-to-link mapping action frame.
UpdatedTransient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.
Updated- CVE-2024-33016: Improper Restriction of Operations within the Bounds of a Memory Buffer in Storage 6.8 Medium
memory corruption when an invalid firehose patch command is invoked.
Updated Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.
UpdatedTransient DOS while parsing ESP IE from beacon/probe response frame.
UpdatedTransient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.
UpdatedTransient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.
UpdatedTransient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
UpdatedTransient DOS while parsing fragments of MBSSID IE from beacon frame.
UpdatedSAP Global Label Management is vulnerable to SQL injection. On exploitation the attacker can use specially crafted inputs to modify database commands resulting in the retrieval of additional information persisted by the system. This could lead to low impact on Confidentiality and Integrity of the application.
Updated