diff --git a/advisories/unreviewed/2024/10/GHSA-w22f-vwwp-37pr/GHSA-w22f-vwwp-37pr.json b/advisories/unreviewed/2024/10/GHSA-w22f-vwwp-37pr/GHSA-w22f-vwwp-37pr.json index f5724bc45de..8709b89c193 100644 --- a/advisories/unreviewed/2024/10/GHSA-w22f-vwwp-37pr/GHSA-w22f-vwwp-37pr.json +++ b/advisories/unreviewed/2024/10/GHSA-w22f-vwwp-37pr/GHSA-w22f-vwwp-37pr.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-w22f-vwwp-37pr", - "modified": "2024-10-22T18:32:11Z", + "modified": "2025-03-03T12:30:31Z", "published": "2024-10-22T18:32:11Z", "aliases": [ "CVE-2024-10234" @@ -19,6 +19,14 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10234" }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2025:2025" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2025:2026" + }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2024-10234" diff --git a/advisories/unreviewed/2025/02/GHSA-gghq-qp34-gqg8/GHSA-gghq-qp34-gqg8.json b/advisories/unreviewed/2025/02/GHSA-gghq-qp34-gqg8/GHSA-gghq-qp34-gqg8.json index e0425e3cd09..3910c298266 100644 --- a/advisories/unreviewed/2025/02/GHSA-gghq-qp34-gqg8/GHSA-gghq-qp34-gqg8.json +++ b/advisories/unreviewed/2025/02/GHSA-gghq-qp34-gqg8/GHSA-gghq-qp34-gqg8.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-gghq-qp34-gqg8", - "modified": "2025-03-03T09:30:34Z", + "modified": "2025-03-03T12:30:31Z", "published": "2025-02-12T15:32:02Z", "aliases": [ "CVE-2025-1244" @@ -43,6 +43,10 @@ "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2025:1964" }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2025:2022" + }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2025-1244" diff --git a/advisories/unreviewed/2025/03/GHSA-24vm-48r8-7jq6/GHSA-24vm-48r8-7jq6.json b/advisories/unreviewed/2025/03/GHSA-24vm-48r8-7jq6/GHSA-24vm-48r8-7jq6.json new file mode 100644 index 00000000000..772e3df7567 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-24vm-48r8-7jq6/GHSA-24vm-48r8-7jq6.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-24vm-48r8-7jq6", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-38426" + ], + "details": "While processing the authentication message in UE, improper authentication may lead to information disclosure.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38426" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-287" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-32hq-jmxj-p7pr/GHSA-32hq-jmxj-p7pr.json b/advisories/unreviewed/2025/03/GHSA-32hq-jmxj-p7pr/GHSA-32hq-jmxj-p7pr.json new file mode 100644 index 00000000000..01dfceb5541 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-32hq-jmxj-p7pr/GHSA-32hq-jmxj-p7pr.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-32hq-jmxj-p7pr", + "modified": "2025-03-03T12:30:33Z", + "published": "2025-03-03T12:30:33Z", + "aliases": [ + "CVE-2024-53014" + ], + "details": "Memory corruption may occur while validating ports and channels in Audio driver.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53014" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-129" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-465f-4qw5-v44q/GHSA-465f-4qw5-v44q.json b/advisories/unreviewed/2025/03/GHSA-465f-4qw5-v44q/GHSA-465f-4qw5-v44q.json new file mode 100644 index 00000000000..852f709e9b6 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-465f-4qw5-v44q/GHSA-465f-4qw5-v44q.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-465f-4qw5-v44q", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-49836" + ], + "details": "Memory corruption may occur during the synchronization of the camera`s frame processing pipeline.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49836" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-129" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-48q8-jcx3-378c/GHSA-48q8-jcx3-378c.json b/advisories/unreviewed/2025/03/GHSA-48q8-jcx3-378c/GHSA-48q8-jcx3-378c.json new file mode 100644 index 00000000000..ac3ae2c9b7a --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-48q8-jcx3-378c/GHSA-48q8-jcx3-378c.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-48q8-jcx3-378c", + "modified": "2025-03-03T12:30:33Z", + "published": "2025-03-03T12:30:33Z", + "aliases": [ + "CVE-2024-53030" + ], + "details": "Memory corruption while processing input message passed from FE driver.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53030" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-20" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-4c7c-vf23-fq42/GHSA-4c7c-vf23-fq42.json b/advisories/unreviewed/2025/03/GHSA-4c7c-vf23-fq42/GHSA-4c7c-vf23-fq42.json new file mode 100644 index 00000000000..6ec57663cca --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-4c7c-vf23-fq42/GHSA-4c7c-vf23-fq42.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4c7c-vf23-fq42", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-43055" + ], + "details": "Memory corruption while processing camera use case IOCTL call.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43055" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-120" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-57r4-vcg6-xmgf/GHSA-57r4-vcg6-xmgf.json b/advisories/unreviewed/2025/03/GHSA-57r4-vcg6-xmgf/GHSA-57r4-vcg6-xmgf.json new file mode 100644 index 00000000000..7e728e98e55 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-57r4-vcg6-xmgf/GHSA-57r4-vcg6-xmgf.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-57r4-vcg6-xmgf", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-53023" + ], + "details": "Memory corruption may occur while accessing a variable during extended back to back tests.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53023" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-5pg7-35m9-25qj/GHSA-5pg7-35m9-25qj.json b/advisories/unreviewed/2025/03/GHSA-5pg7-35m9-25qj/GHSA-5pg7-35m9-25qj.json new file mode 100644 index 00000000000..99dacbd62cb --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-5pg7-35m9-25qj/GHSA-5pg7-35m9-25qj.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5pg7-35m9-25qj", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-43060" + ], + "details": "Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43060" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-823" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-658r-mcr3-mw76/GHSA-658r-mcr3-mw76.json b/advisories/unreviewed/2025/03/GHSA-658r-mcr3-mw76/GHSA-658r-mcr3-mw76.json new file mode 100644 index 00000000000..9096949b717 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-658r-mcr3-mw76/GHSA-658r-mcr3-mw76.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-658r-mcr3-mw76", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-53022" + ], + "details": "Memory corruption may occur during communication between primary and guest VM.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53022" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-20" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-6grj-mxj6-346g/GHSA-6grj-mxj6-346g.json b/advisories/unreviewed/2025/03/GHSA-6grj-mxj6-346g/GHSA-6grj-mxj6-346g.json new file mode 100644 index 00000000000..558e7402b35 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-6grj-mxj6-346g/GHSA-6grj-mxj6-346g.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6grj-mxj6-346g", + "modified": "2025-03-03T12:30:33Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-53025" + ], + "details": "Transient DOS can occur while processing UCI command.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53025" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-6x4p-xg8f-2h67/GHSA-6x4p-xg8f-2h67.json b/advisories/unreviewed/2025/03/GHSA-6x4p-xg8f-2h67/GHSA-6x4p-xg8f-2h67.json new file mode 100644 index 00000000000..85c48f21c04 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-6x4p-xg8f-2h67/GHSA-6x4p-xg8f-2h67.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6x4p-xg8f-2h67", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-53012" + ], + "details": "Memory corruption may occur due to improper input validation in clock device.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53012" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-20" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-7g83-7r9m-4q2j/GHSA-7g83-7r9m-4q2j.json b/advisories/unreviewed/2025/03/GHSA-7g83-7r9m-4q2j/GHSA-7g83-7r9m-4q2j.json new file mode 100644 index 00000000000..a6f9fbd6485 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-7g83-7r9m-4q2j/GHSA-7g83-7r9m-4q2j.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7g83-7r9m-4q2j", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-53024" + ], + "details": "Memory corruption in display driver while detaching a device.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53024" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-476" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-7hgc-c47c-w4p9/GHSA-7hgc-c47c-w4p9.json b/advisories/unreviewed/2025/03/GHSA-7hgc-c47c-w4p9/GHSA-7hgc-c47c-w4p9.json new file mode 100644 index 00000000000..5859f51f6f3 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-7hgc-c47c-w4p9/GHSA-7hgc-c47c-w4p9.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7hgc-c47c-w4p9", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-43057" + ], + "details": "Memory corruption while processing command in Glink linux.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43057" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-92vg-px9c-73fc/GHSA-92vg-px9c-73fc.json b/advisories/unreviewed/2025/03/GHSA-92vg-px9c-73fc/GHSA-92vg-px9c-73fc.json new file mode 100644 index 00000000000..19b573aab95 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-92vg-px9c-73fc/GHSA-92vg-px9c-73fc.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-92vg-px9c-73fc", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-43059" + ], + "details": "Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43059" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-c5hm-fr3r-98xm/GHSA-c5hm-fr3r-98xm.json b/advisories/unreviewed/2025/03/GHSA-c5hm-fr3r-98xm/GHSA-c5hm-fr3r-98xm.json new file mode 100644 index 00000000000..7c7ed6bd9c1 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-c5hm-fr3r-98xm/GHSA-c5hm-fr3r-98xm.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-c5hm-fr3r-98xm", + "modified": "2025-03-03T12:30:33Z", + "published": "2025-03-03T12:30:33Z", + "aliases": [ + "CVE-2024-53027" + ], + "details": "Transient DOS may occur while processing the country IE.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53027" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-120" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-g25r-jvm6-wcv9/GHSA-g25r-jvm6-wcv9.json b/advisories/unreviewed/2025/03/GHSA-g25r-jvm6-wcv9/GHSA-g25r-jvm6-wcv9.json new file mode 100644 index 00000000000..d6634eba10e --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-g25r-jvm6-wcv9/GHSA-g25r-jvm6-wcv9.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-g25r-jvm6-wcv9", + "modified": "2025-03-03T12:30:33Z", + "published": "2025-03-03T12:30:33Z", + "aliases": [ + "CVE-2024-53031" + ], + "details": "Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53031" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-20" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-g5qp-3jx2-p69r/GHSA-g5qp-3jx2-p69r.json b/advisories/unreviewed/2025/03/GHSA-g5qp-3jx2-p69r/GHSA-g5qp-3jx2-p69r.json new file mode 100644 index 00000000000..c20036a41ba --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-g5qp-3jx2-p69r/GHSA-g5qp-3jx2-p69r.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-g5qp-3jx2-p69r", + "modified": "2025-03-03T12:30:31Z", + "published": "2025-03-03T12:30:31Z", + "aliases": [ + "CVE-2024-8186" + ], + "details": "An issue has been discovered in GitLab CE/EE affecting all versions from 16.6 before 17.7.6, 17.8 before 17.8.4, and 17.9 before 17.9.1. An attacker could inject HMTL into the child item search potentially leading to XSS in certain situations.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8186" + }, + { + "type": "WEB", + "url": "https://hackerone.com/reports/2655757" + }, + { + "type": "WEB", + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/480751" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T10:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-ggqm-rv53-68hr/GHSA-ggqm-rv53-68hr.json b/advisories/unreviewed/2025/03/GHSA-ggqm-rv53-68hr/GHSA-ggqm-rv53-68hr.json new file mode 100644 index 00000000000..8fc574477f4 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-ggqm-rv53-68hr/GHSA-ggqm-rv53-68hr.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ggqm-rv53-68hr", + "modified": "2025-03-03T12:30:33Z", + "published": "2025-03-03T12:30:33Z", + "aliases": [ + "CVE-2024-53033" + ], + "details": "Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53033" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-822" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-grh2-c3rj-hgjx/GHSA-grh2-c3rj-hgjx.json b/advisories/unreviewed/2025/03/GHSA-grh2-c3rj-hgjx/GHSA-grh2-c3rj-hgjx.json new file mode 100644 index 00000000000..b9d1a5db750 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-grh2-c3rj-hgjx/GHSA-grh2-c3rj-hgjx.json @@ -0,0 +1,34 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-grh2-c3rj-hgjx", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-53011" + ], + "details": "Information disclosure may occur due to improper permission and access controls to Video Analytics engine.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53011" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-gx6r-6gqm-9h5g/GHSA-gx6r-6gqm-9h5g.json b/advisories/unreviewed/2025/03/GHSA-gx6r-6gqm-9h5g/GHSA-gx6r-6gqm-9h5g.json new file mode 100644 index 00000000000..d7a616a132f --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-gx6r-6gqm-9h5g/GHSA-gx6r-6gqm-9h5g.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gx6r-6gqm-9h5g", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-43061" + ], + "details": "Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43061" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-h3w4-v573-hrpr/GHSA-h3w4-v573-hrpr.json b/advisories/unreviewed/2025/03/GHSA-h3w4-v573-hrpr/GHSA-h3w4-v573-hrpr.json new file mode 100644 index 00000000000..887730868f0 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-h3w4-v573-hrpr/GHSA-h3w4-v573-hrpr.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h3w4-v573-hrpr", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-45580" + ], + "details": "Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45580" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-hvxp-h4pj-mgvp/GHSA-hvxp-h4pj-mgvp.json b/advisories/unreviewed/2025/03/GHSA-hvxp-h4pj-mgvp/GHSA-hvxp-h4pj-mgvp.json new file mode 100644 index 00000000000..6c4ba9831f5 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-hvxp-h4pj-mgvp/GHSA-hvxp-h4pj-mgvp.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hvxp-h4pj-mgvp", + "modified": "2025-03-03T12:30:33Z", + "published": "2025-03-03T12:30:33Z", + "aliases": [ + "CVE-2024-53032" + ], + "details": "Memory corruption may occur in keyboard virtual device due to guest VM interaction.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53032" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-367" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-j3ph-4p3p-3qqc/GHSA-j3ph-4p3p-3qqc.json b/advisories/unreviewed/2025/03/GHSA-j3ph-4p3p-3qqc/GHSA-j3ph-4p3p-3qqc.json new file mode 100644 index 00000000000..3d5447ef623 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-j3ph-4p3p-3qqc/GHSA-j3ph-4p3p-3qqc.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j3ph-4p3p-3qqc", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-43062" + ], + "details": "Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43062" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-p653-p8p8-pw6m/GHSA-p653-p8p8-pw6m.json b/advisories/unreviewed/2025/03/GHSA-p653-p8p8-pw6m/GHSA-p653-p8p8-pw6m.json new file mode 100644 index 00000000000..e4e22f38b6c --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-p653-p8p8-pw6m/GHSA-p653-p8p8-pw6m.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p653-p8p8-pw6m", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-43051" + ], + "details": "Information disclosure while deriving keys for a session for any Widevine use case.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43051" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-285" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-q98w-g5j8-3x6h/GHSA-q98w-g5j8-3x6h.json b/advisories/unreviewed/2025/03/GHSA-q98w-g5j8-3x6h/GHSA-q98w-g5j8-3x6h.json new file mode 100644 index 00000000000..0d5ff7fd24b --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-q98w-g5j8-3x6h/GHSA-q98w-g5j8-3x6h.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q98w-g5j8-3x6h", + "modified": "2025-03-03T12:30:33Z", + "published": "2025-03-03T12:30:33Z", + "aliases": [ + "CVE-2025-21424" + ], + "details": "Memory corruption while calling the NPU driver APIs concurrently.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21424" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-v4xx-gmqv-5845/GHSA-v4xx-gmqv-5845.json b/advisories/unreviewed/2025/03/GHSA-v4xx-gmqv-5845/GHSA-v4xx-gmqv-5845.json new file mode 100644 index 00000000000..e83dfa8b40c --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-v4xx-gmqv-5845/GHSA-v4xx-gmqv-5845.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v4xx-gmqv-5845", + "modified": "2025-03-03T12:30:33Z", + "published": "2025-03-03T12:30:33Z", + "aliases": [ + "CVE-2024-53034" + ], + "details": "Memory corruption occurs during an Escape call if an invalid Kernel Mode CPU event and sync object handle are passed with the DriverKnownEscape flag reset.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53034" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-822" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-vgg3-fwvm-x7q7/GHSA-vgg3-fwvm-x7q7.json b/advisories/unreviewed/2025/03/GHSA-vgg3-fwvm-x7q7/GHSA-vgg3-fwvm-x7q7.json new file mode 100644 index 00000000000..483d27dc712 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-vgg3-fwvm-x7q7/GHSA-vgg3-fwvm-x7q7.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vgg3-fwvm-x7q7", + "modified": "2025-03-03T12:30:33Z", + "published": "2025-03-03T12:30:33Z", + "aliases": [ + "CVE-2024-53029" + ], + "details": "Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53029" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-20" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-vm7w-2724-5m23/GHSA-vm7w-2724-5m23.json b/advisories/unreviewed/2025/03/GHSA-vm7w-2724-5m23/GHSA-vm7w-2724-5m23.json new file mode 100644 index 00000000000..efe0bc2bf39 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-vm7w-2724-5m23/GHSA-vm7w-2724-5m23.json @@ -0,0 +1,31 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vm7w-2724-5m23", + "modified": "2025-03-03T12:30:31Z", + "published": "2025-03-03T12:30:31Z", + "aliases": [ + "CVE-2024-24778" + ], + "details": "Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know. \n\n\n\n\n\nThis issue affects Apache StreamPipes: through 0.95.1.\n\nUsers are recommended to upgrade to version 0.97.0 which fixes the issue.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24778" + }, + { + "type": "WEB", + "url": "https://lists.apache.org/thread/j14w6wghlwwrgfgc6hoz9f94fwxtlgzh" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-269" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-wg86-4jf6-2j9w/GHSA-wg86-4jf6-2j9w.json b/advisories/unreviewed/2025/03/GHSA-wg86-4jf6-2j9w/GHSA-wg86-4jf6-2j9w.json new file mode 100644 index 00000000000..0c2f82ea08f --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-wg86-4jf6-2j9w/GHSA-wg86-4jf6-2j9w.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wg86-4jf6-2j9w", + "modified": "2025-03-03T12:30:33Z", + "published": "2025-03-03T12:30:33Z", + "aliases": [ + "CVE-2024-53028" + ], + "details": "Memory corruption may occur while processing message from frontend during allocation.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53028" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-367" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-wpxf-3mm2-76f8/GHSA-wpxf-3mm2-76f8.json b/advisories/unreviewed/2025/03/GHSA-wpxf-3mm2-76f8/GHSA-wpxf-3mm2-76f8.json new file mode 100644 index 00000000000..f48b5433b41 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-wpxf-3mm2-76f8/GHSA-wpxf-3mm2-76f8.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wpxf-3mm2-76f8", + "modified": "2025-03-03T12:30:33Z", + "published": "2025-03-03T12:30:33Z", + "aliases": [ + "CVE-2025-0475" + ], + "details": "An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1. A proxy feature could potentially allow unintended content rendering leading to XSS under specific circumstances.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0475" + }, + { + "type": "WEB", + "url": "https://hackerone.com/reports/2932309" + }, + { + "type": "WEB", + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/513142" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/03/GHSA-wrrw-r6x5-8634/GHSA-wrrw-r6x5-8634.json b/advisories/unreviewed/2025/03/GHSA-wrrw-r6x5-8634/GHSA-wrrw-r6x5-8634.json new file mode 100644 index 00000000000..c39a7d9ecf5 --- /dev/null +++ b/advisories/unreviewed/2025/03/GHSA-wrrw-r6x5-8634/GHSA-wrrw-r6x5-8634.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wrrw-r6x5-8634", + "modified": "2025-03-03T12:30:32Z", + "published": "2025-03-03T12:30:32Z", + "aliases": [ + "CVE-2024-43056" + ], + "details": "Transient DOS during hypervisor virtual I/O operation in a virtual machine.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43056" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-126" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-03-03T11:15:11Z" + } +} \ No newline at end of file