netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-289c-grq2-86fp
GHSA-2c5p-v6r6-q8xj
GHSA-2hhm-535h-jfpf
GHSA-2q9j-fxww-vw94
GHSA-2qv3-7vvv-5c37
GHSA-3crx-72mc-vg28
GHSA-6cmw-42pp-vrv8
GHSA-c93h-pcj4-frj7
GHSA-h3pq-wm2x-37wm
GHSA-hxr2-47r8-rr3v
GHSA-j7qp-74vm-wr32
GHSA-m396-rwgp-jw45
GHSA-mgww-wpg8-7gmj
GHSA-pmp6-g6pf-49wc
GHSA-wr8w-653v-34g8
This commit is contained in:
advisory-database[bot]
2024-12-02 06:33:35 +00:00
parent fd6a774cba
commit 92b4fd6a44
15 changed files with 465 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/12/GHSA-289c-grq2-86fp/GHSA-289c-grq2-86fp.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-289c-grq2-86fp",
"modified": "2024-12-02T06:31:49Z",
"published": "2024-12-02T06:31:49Z",
"aliases": [
"CVE-2024-20136"
],
"details": "In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09121847; Issue ID: MSV-1821.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20136"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:05Z"
}
}
advisories/unreviewed/2024/12/GHSA-2c5p-v6r6-q8xj/GHSA-2c5p-v6r6-q8xj.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2c5p-v6r6-q8xj",
"modified": "2024-12-02T06:31:49Z",
"published": "2024-12-02T06:31:49Z",
"aliases": [
"CVE-2024-20138"
],
"details": "In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Issue ID: MSV-1604.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20138"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:06Z"
}
}
advisories/unreviewed/2024/12/GHSA-2hhm-535h-jfpf/GHSA-2hhm-535h-jfpf.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2hhm-535h-jfpf",
"modified": "2024-12-02T06:31:49Z",
"published": "2024-12-02T06:31:49Z",
"aliases": [
"CVE-2024-20133"
],
"details": "In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1871.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20133"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:05Z"
}
}
advisories/unreviewed/2024/12/GHSA-2q9j-fxww-vw94/GHSA-2q9j-fxww-vw94.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2q9j-fxww-vw94",
"modified": "2024-12-02T06:31:49Z",
"published": "2024-12-02T06:31:49Z",
"aliases": [
"CVE-2024-20134"
],
"details": "In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09154589; Issue ID: MSV-1866.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20134"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:05Z"
}
}
advisories/unreviewed/2024/12/GHSA-2qv3-7vvv-5c37/GHSA-2qv3-7vvv-5c37.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2qv3-7vvv-5c37",
"modified": "2024-12-02T06:31:46Z",
"published": "2024-12-02T06:31:46Z",
"aliases": [
"CVE-2024-20116"
],
"details": "In cmdq, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09057438; Issue ID: MSV-1696.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20116"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:03Z"
}
}
advisories/unreviewed/2024/12/GHSA-3crx-72mc-vg28/GHSA-3crx-72mc-vg28.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3crx-72mc-vg28",
"modified": "2024-12-02T06:31:49Z",
"published": "2024-12-02T06:31:49Z",
"aliases": [
"CVE-2024-20132"
],
"details": "In Modem, there is a possible out of bonds write due to a mission bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00957388; Issue ID: MSV-1872.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20132"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:05Z"
}
}
advisories/unreviewed/2024/12/GHSA-6cmw-42pp-vrv8/GHSA-6cmw-42pp-vrv8.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6cmw-42pp-vrv8",
"modified": "2024-12-02T06:31:49Z",
"published": "2024-12-02T06:31:49Z",
"aliases": [
"CVE-2024-20130"
],
"details": "In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09193374; Issue ID: MSV-1982.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20130"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:05Z"
}
}
advisories/unreviewed/2024/12/GHSA-c93h-pcj4-frj7/GHSA-c93h-pcj4-frj7.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c93h-pcj4-frj7",
"modified": "2024-12-02T06:31:49Z",
"published": "2024-12-02T06:31:49Z",
"aliases": [
"CVE-2024-20129"
],
"details": "In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09289881; Issue ID: MSV-2025.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20129"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:05Z"
}
}
advisories/unreviewed/2024/12/GHSA-h3pq-wm2x-37wm/GHSA-h3pq-wm2x-37wm.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h3pq-wm2x-37wm",
"modified": "2024-12-02T06:31:49Z",
"published": "2024-12-02T06:31:49Z",
"aliases": [
"CVE-2024-20137"
],
"details": "In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00384543; Issue ID: MSV-1727.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20137"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-248"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:06Z"
}
}
advisories/unreviewed/2024/12/GHSA-hxr2-47r8-rr3v/GHSA-hxr2-47r8-rr3v.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hxr2-47r8-rr3v",
"modified": "2024-12-02T06:31:48Z",
"published": "2024-12-02T06:31:48Z",
"aliases": [
"CVE-2024-20125"
],
"details": "In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09046782; Issue ID: MSV-1728.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20125"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:04Z"
}
}
advisories/unreviewed/2024/12/GHSA-j7qp-74vm-wr32/GHSA-j7qp-74vm-wr32.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j7qp-74vm-wr32",
"modified": "2024-12-02T06:31:49Z",
"published": "2024-12-02T06:31:49Z",
"aliases": [
"CVE-2024-20128"
],
"details": "In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09289881; Issue ID: MSV-2024.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20128"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:04Z"
}
}
advisories/unreviewed/2024/12/GHSA-m396-rwgp-jw45/GHSA-m396-rwgp-jw45.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m396-rwgp-jw45",
"modified": "2024-12-02T06:31:49Z",
"published": "2024-12-02T06:31:49Z",
"aliases": [
"CVE-2024-20131"
],
"details": "In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issue ID: MSV-1873.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20131"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:05Z"
}
}
advisories/unreviewed/2024/12/GHSA-mgww-wpg8-7gmj/GHSA-mgww-wpg8-7gmj.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mgww-wpg8-7gmj",
"modified": "2024-12-02T06:31:49Z",
"published": "2024-12-02T06:31:49Z",
"aliases": [
"CVE-2024-20139"
],
"details": "In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09001270; Issue ID: MSV-1600.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20139"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-617"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:06Z"
}
}
advisories/unreviewed/2024/12/GHSA-pmp6-g6pf-49wc/GHSA-pmp6-g6pf-49wc.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pmp6-g6pf-49wc",
"modified": "2024-12-02T06:31:49Z",
"published": "2024-12-02T06:31:49Z",
"aliases": [
"CVE-2024-20127"
],
"details": "In Telephony, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09289881; Issue ID: MSV-2023.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20127"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:04Z"
}
}
advisories/unreviewed/2024/12/GHSA-wr8w-653v-34g8/GHSA-wr8w-653v-34g8.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wr8w-653v-34g8",
"modified": "2024-12-02T06:31:49Z",
"published": "2024-12-02T06:31:49Z",
"aliases": [
"CVE-2024-20135"
],
"details": "In soundtrigger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09142526; Issue ID: MSV-1841.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20135"
},
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/December-2024"
}
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T04:15:05Z"
}
}