Advisory Database Sync

advisories/unreviewed/2024/01/GHSA-8m2p-3j92-v9rw/GHSA-8m2p-3j92-v9rw.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8m2p-3j92-v9rw",
-  "modified": "2024-01-16T18:31:10Z",
+  "modified": "2025-06-03T06:31:13Z",
   "published": "2024-01-16T18:31:10Z",
   "aliases": [
     "CVE-2024-0579"
@@ -11,6 +11,10 @@
     {
       "type": "CVSS_V3",
       "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
     }
   ],
   "affected": [],
@@ -30,10 +34,19 @@
     {
       "type": "WEB",
       "url": "https://vuldb.com/?id.250795"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.263721"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.totolink.net"
     }
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-74",
       "CWE-77"
     ],
     "severity": "MODERATE",

advisories/unreviewed/2025/05/GHSA-jpf5-526x-c5hw/GHSA-jpf5-526x-c5hw.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-jpf5-526x-c5hw",
-  "modified": "2025-06-03T03:30:31Z",
+  "modified": "2025-06-03T06:31:13Z",
   "published": "2025-05-30T15:30:30Z",
   "aliases": [
     "CVE-2025-40909"
@@ -70,6 +70,10 @@
     {
       "type": "WEB",
       "url": "http://www.openwall.com/lists/oss-security/2025/06/02/7"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/06/03/1"
     }
   ],
   "database_specific": {

advisories/unreviewed/2025/06/GHSA-39fm-j66r-ffj4/GHSA-39fm-j66r-ffj4.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-39fm-j66r-ffj4",
+  "modified": "2025-06-03T06:31:14Z",
+  "published": "2025-06-03T06:31:14Z",
+  "aliases": [
+    "CVE-2025-21486"
+  ],
+  "details": "Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21486"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-822"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:26Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-3q79-wmhj-39pr/GHSA-3q79-wmhj-39pr.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3q79-wmhj-39pr",
+  "modified": "2025-06-03T06:31:15Z",
+  "published": "2025-06-03T06:31:15Z",
+  "aliases": [
+    "CVE-2025-3662"
+  ],
+  "details": "The FancyBox for WordPress plugin before 3.3.6 does not escape captions and titles attributes before using them to populate galleries' caption fields. The issue was received as a Contributor+ Stored XSS, however one of our researcher (Marc Montpas) escalated it to an Unauthenticated Stored XSS",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3662"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/4cda12f0-3c23-44ad-80ea-db2443ebcf82"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:27Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-49q8-x2pc-39wf/GHSA-49q8-x2pc-39wf.json

@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-49q8-x2pc-39wf",
+  "modified": "2025-06-03T06:31:13Z",
+  "published": "2025-06-03T06:31:13Z",
+  "aliases": [
+    "CVE-2025-4797"
+  ],
+  "details": "The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.7.0. This is due to the plugin not properly validating a user's identity prior to setting an authorization cookie. This makes it possible for unauthenticated attackers to log in as any user, including administrators, provided they know the user's email address.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4797"
+    },
+    {
+      "type": "WEB",
+      "url": "https://themeforest.net/item/golo-directory-listing-travel-wordpress-theme/25397810"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e7b56ec1-8735-4404-8069-219f5d8866d0?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-288"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T05:15:20Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-4rgj-78j5-635j/GHSA-4rgj-78j5-635j.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4rgj-78j5-635j",
+  "modified": "2025-06-03T06:31:15Z",
+  "published": "2025-06-03T06:31:15Z",
+  "aliases": [
+    "CVE-2025-4567"
+  ],
+  "details": "The Post Slider and Post Carousel with Post Vertical Scrolling Widget  WordPress plugin before 3.2.10 does not validate and escape some of its Widget options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4567"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/b8a50ae9-40c4-42f8-9342-2440d3bc12bb"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:27Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-65w5-5qgg-4h59/GHSA-65w5-5qgg-4h59.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-65w5-5qgg-4h59",
+  "modified": "2025-06-03T06:31:15Z",
+  "published": "2025-06-03T06:31:15Z",
+  "aliases": [
+    "CVE-2025-31710"
+  ],
+  "details": "In engineermode service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31710"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.unisoc.com/en_us/secy/announcementDetail/1929773763314909186"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:27Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-6p39-gq6w-rwhx/GHSA-6p39-gq6w-rwhx.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6p39-gq6w-rwhx",
+  "modified": "2025-06-03T06:31:15Z",
+  "published": "2025-06-03T06:31:15Z",
+  "aliases": [
+    "CVE-2025-3584"
+  ],
+  "details": "The Newsletter  WordPress plugin before 8.8.2 does not sanitise and escape some of its Subscription settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3584"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/76937bdd-7ffa-4b5e-ade1-60da095a03a3"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:27Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-74r6-jc3v-cc2r/GHSA-74r6-jc3v-cc2r.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-74r6-jc3v-cc2r",
+  "modified": "2025-06-03T06:31:14Z",
+  "published": "2025-06-03T06:31:14Z",
+  "aliases": [
+    "CVE-2024-53010"
+  ],
+  "details": "Memory corruption may occur while attaching VM when the HLOS retains access to VM.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53010"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-284"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:23Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-8crf-388w-629m/GHSA-8crf-388w-629m.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8crf-388w-629m",
+  "modified": "2025-06-03T06:31:14Z",
+  "published": "2025-06-03T06:31:14Z",
+  "aliases": [
+    "CVE-2025-21463"
+  ],
+  "details": "Transient DOS while processing the EHT operation IE in the received beacon frame.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21463"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-126"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:25Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-8fjc-wgpp-8px6/GHSA-8fjc-wgpp-8px6.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8fjc-wgpp-8px6",
+  "modified": "2025-06-03T06:31:14Z",
+  "published": "2025-06-03T06:31:14Z",
+  "aliases": [
+    "CVE-2024-53015"
+  ],
+  "details": "Memory corruption while processing IOCTL command to handle buffers associated with a session.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53015"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:24Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-94m6-5q5f-r8g8/GHSA-94m6-5q5f-r8g8.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-94m6-5q5f-r8g8",
+  "modified": "2025-06-03T06:31:15Z",
+  "published": "2025-06-03T06:31:15Z",
+  "aliases": [
+    "CVE-2025-27029"
+  ],
+  "details": "Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27029"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-126"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:26Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-99j9-vp2v-228j/GHSA-99j9-vp2v-228j.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-99j9-vp2v-228j",
+  "modified": "2025-06-03T06:31:15Z",
+  "published": "2025-06-03T06:31:15Z",
+  "aliases": [
+    "CVE-2025-31712"
+  ],
+  "details": "In cplog service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31712"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.unisoc.com/en_us/secy/announcementDetail/1929773763314909186"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:27Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-9hmj-hrww-2599/GHSA-9hmj-hrww-2599.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9hmj-hrww-2599",
+  "modified": "2025-06-03T06:31:14Z",
+  "published": "2025-06-03T06:31:14Z",
+  "aliases": [
+    "CVE-2024-53013"
+  ],
+  "details": "Memory corruption may occur while processing voice call registration with user.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53013"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:24Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-g6gr-6rr9-69jw/GHSA-g6gr-6rr9-69jw.json

@@ -0,0 +1,34 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g6gr-6rr9-69jw",
+  "modified": "2025-06-03T06:31:15Z",
+  "published": "2025-06-03T06:31:15Z",
+  "aliases": [
+    "CVE-2025-31711"
+  ],
+  "details": "In cplog service, there is a possible system crash due to null pointer dereference. This could lead to local denial of service with no additional execution privileges needed.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31711"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.unisoc.com/en_us/secy/announcementDetail/1929773763314909186"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:27Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-gg54-6w37-7r4j/GHSA-gg54-6w37-7r4j.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gg54-6w37-7r4j",
+  "modified": "2025-06-03T06:31:14Z",
+  "published": "2025-06-03T06:31:14Z",
+  "aliases": [
+    "CVE-2024-53017"
+  ],
+  "details": "Memory corruption while handling test pattern generator IOCTL command.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53017"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-823"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:24Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-gj4f-pc42-qxg8/GHSA-gj4f-pc42-qxg8.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gj4f-pc42-qxg8",
+  "modified": "2025-06-03T06:31:14Z",
+  "published": "2025-06-03T06:31:14Z",
+  "aliases": [
+    "CVE-2025-21480"
+  ],
+  "details": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21480"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:26Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-h454-pc9h-rvh2/GHSA-h454-pc9h-rvh2.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h454-pc9h-rvh2",
+  "modified": "2025-06-03T06:31:15Z",
+  "published": "2025-06-03T06:31:15Z",
+  "aliases": [
+    "CVE-2025-27038"
+  ],
+  "details": "Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27038"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:27Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-j7v4-f93f-x37v/GHSA-j7v4-f93f-x37v.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-j7v4-f93f-x37v",
+  "modified": "2025-06-03T06:31:14Z",
+  "published": "2025-06-03T06:31:14Z",
+  "aliases": [
+    "CVE-2024-53016"
+  ],
+  "details": "Memory corruption while processing I2C settings in Camera driver.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53016"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-367"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:24Z"
+  }
+}

advisories/unreviewed/2025/06/GHSA-p8mr-7vfx-25q5/GHSA-p8mr-7vfx-25q5.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p8mr-7vfx-25q5",
+  "modified": "2025-06-03T06:31:14Z",
+  "published": "2025-06-03T06:31:14Z",
+  "aliases": [
+    "CVE-2024-53019"
+  ],
+  "details": "Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53019"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-126"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-06-03T06:15:25Z"
+  }
+}