netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-4vfq-29m3-4mf8
GHSA-6wgj-rp85-6f6w
GHSA-fj3p-hvq5-mp63
GHSA-gf75-g3w3-83w4
GHSA-h7c6-v859-vr9j
GHSA-m57g-7h85-rchp
GHSA-mqx9-69q5-c3vh
GHSA-mw8r-ffhf-5qvw
GHSA-q9c7-f5ph-hcwx
GHSA-rj89-pvp9-vqg3
GHSA-w66q-chx8-5439
GHSA-wg7c-c82w-8v8f
GHSA-xm75-jp9m-47jj
This commit is contained in:
advisory-database[bot]
2024-12-02 12:39:37 +00:00
parent 8eb5a45dfe
commit 9c08569136
13 changed files with 468 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/12/GHSA-4vfq-29m3-4mf8/GHSA-4vfq-29m3-4mf8.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4vfq-29m3-4mf8",
"modified": "2024-12-02T12:38:27Z",
"published": "2024-12-02T12:38:27Z",
"aliases": [
"CVE-2024-33040"
],
"details": "Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-33040"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T11:15:08Z"
}
}
advisories/unreviewed/2024/12/GHSA-6wgj-rp85-6f6w/GHSA-6wgj-rp85-6f6w.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6wgj-rp85-6f6w",
"modified": "2024-12-02T12:38:27Z",
"published": "2024-12-02T12:38:27Z",
"aliases": [
"CVE-2024-43053"
],
"details": "Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43053"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T11:15:09Z"
}
}
advisories/unreviewed/2024/12/GHSA-fj3p-hvq5-mp63/GHSA-fj3p-hvq5-mp63.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fj3p-hvq5-mp63",
"modified": "2024-12-02T12:38:27Z",
"published": "2024-12-02T12:38:27Z",
"aliases": [
"CVE-2024-43048"
],
"details": "Memory corruption when invalid input is passed to invoke GPU Headroom API call.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43048"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T11:15:08Z"
}
}
advisories/unreviewed/2024/12/GHSA-gf75-g3w3-83w4/GHSA-gf75-g3w3-83w4.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gf75-g3w3-83w4",
"modified": "2024-12-02T12:38:27Z",
"published": "2024-12-02T12:38:27Z",
"aliases": [
"CVE-2024-33039"
],
"details": "Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-33039"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-822"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T11:15:07Z"
}
}
advisories/unreviewed/2024/12/GHSA-h7c6-v859-vr9j/GHSA-h7c6-v859-vr9j.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h7c6-v859-vr9j",
"modified": "2024-12-02T12:38:27Z",
"published": "2024-12-02T12:38:27Z",
"aliases": [
"CVE-2024-33053"
],
"details": "Memory corruption when multiple threads try to unregister the CVP buffer at the same time.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-33053"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T11:15:08Z"
}
}
advisories/unreviewed/2024/12/GHSA-m57g-7h85-rchp/GHSA-m57g-7h85-rchp.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m57g-7h85-rchp",
"modified": "2024-12-02T12:38:27Z",
"published": "2024-12-02T12:38:27Z",
"aliases": [
"CVE-2024-33037"
],
"details": "Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-33037"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-126"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T11:15:07Z"
}
}
advisories/unreviewed/2024/12/GHSA-mqx9-69q5-c3vh/GHSA-mqx9-69q5-c3vh.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mqx9-69q5-c3vh",
"modified": "2024-12-02T12:38:27Z",
"published": "2024-12-02T12:38:27Z",
"aliases": [
"CVE-2024-33063"
],
"details": "Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-33063"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-190"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T11:15:08Z"
}
}
advisories/unreviewed/2024/12/GHSA-mw8r-ffhf-5qvw/GHSA-mw8r-ffhf-5qvw.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mw8r-ffhf-5qvw",
"modified": "2024-12-02T12:38:27Z",
"published": "2024-12-02T12:38:27Z",
"aliases": [
"CVE-2024-43052"
],
"details": "Memory corruption while processing API calls to NPU with invalid input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43052"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T11:15:09Z"
}
}
advisories/unreviewed/2024/12/GHSA-q9c7-f5ph-hcwx/GHSA-q9c7-f5ph-hcwx.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q9c7-f5ph-hcwx",
"modified": "2024-12-02T12:38:27Z",
"published": "2024-12-02T12:38:27Z",
"aliases": [
"CVE-2024-33036"
],
"details": "Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-33036"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-823"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T11:15:06Z"
}
}
advisories/unreviewed/2024/12/GHSA-rj89-pvp9-vqg3/GHSA-rj89-pvp9-vqg3.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rj89-pvp9-vqg3",
"modified": "2024-12-02T12:38:27Z",
"published": "2024-12-02T12:38:27Z",
"aliases": [
"CVE-2024-33044"
],
"details": "Memory corruption while Configuring the SMR/S2CR register in Bypass mode.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-33044"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-129"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T11:15:08Z"
}
}
advisories/unreviewed/2024/12/GHSA-w66q-chx8-5439/GHSA-w66q-chx8-5439.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w66q-chx8-5439",
"modified": "2024-12-02T12:38:27Z",
"published": "2024-12-02T12:38:27Z",
"aliases": [
"CVE-2024-33056"
],
"details": "Memory corruption when allocating and accessing an entry in an SMEM partition continuously.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-33056"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-126"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T11:15:08Z"
}
}
advisories/unreviewed/2024/12/GHSA-wg7c-c82w-8v8f/GHSA-wg7c-c82w-8v8f.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wg7c-c82w-8v8f",
"modified": "2024-12-02T12:38:27Z",
"published": "2024-12-02T12:38:27Z",
"aliases": [
"CVE-2024-43049"
],
"details": "Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43049"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T11:15:09Z"
}
}
advisories/unreviewed/2024/12/GHSA-xm75-jp9m-47jj/GHSA-xm75-jp9m-47jj.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xm75-jp9m-47jj",
"modified": "2024-12-02T12:38:27Z",
"published": "2024-12-02T12:38:27Z",
"aliases": [
"CVE-2024-43050"
],
"details": "Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43050"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/december-2024-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-02T11:15:09Z"
}
}