diff --git a/advisories/unreviewed/2024/01/GHSA-8m2p-3j92-v9rw/GHSA-8m2p-3j92-v9rw.json b/advisories/unreviewed/2024/01/GHSA-8m2p-3j92-v9rw/GHSA-8m2p-3j92-v9rw.json index 2c9aca2fe8e..abc4b91d3d2 100644 --- a/advisories/unreviewed/2024/01/GHSA-8m2p-3j92-v9rw/GHSA-8m2p-3j92-v9rw.json +++ b/advisories/unreviewed/2024/01/GHSA-8m2p-3j92-v9rw/GHSA-8m2p-3j92-v9rw.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-8m2p-3j92-v9rw", - "modified": "2024-01-16T18:31:10Z", + "modified": "2025-06-03T06:31:13Z", "published": "2024-01-16T18:31:10Z", "aliases": [ "CVE-2024-0579" @@ -11,6 +11,10 @@ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], "affected": [], @@ -30,10 +34,19 @@ { "type": "WEB", "url": "https://vuldb.com/?id.250795" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.263721" + }, + { + "type": "WEB", + "url": "https://www.totolink.net" } ], "database_specific": { "cwe_ids": [ + "CWE-74", "CWE-77" ], "severity": "MODERATE", diff --git a/advisories/unreviewed/2025/05/GHSA-jpf5-526x-c5hw/GHSA-jpf5-526x-c5hw.json b/advisories/unreviewed/2025/05/GHSA-jpf5-526x-c5hw/GHSA-jpf5-526x-c5hw.json index 9f0c65ee04c..7d094202f83 100644 --- a/advisories/unreviewed/2025/05/GHSA-jpf5-526x-c5hw/GHSA-jpf5-526x-c5hw.json +++ b/advisories/unreviewed/2025/05/GHSA-jpf5-526x-c5hw/GHSA-jpf5-526x-c5hw.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-jpf5-526x-c5hw", - "modified": "2025-06-03T03:30:31Z", + "modified": "2025-06-03T06:31:13Z", "published": "2025-05-30T15:30:30Z", "aliases": [ "CVE-2025-40909" @@ -70,6 +70,10 @@ { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2025/06/02/7" + }, + { + "type": "WEB", + "url": "http://www.openwall.com/lists/oss-security/2025/06/03/1" } ], "database_specific": { diff --git a/advisories/unreviewed/2025/06/GHSA-39fm-j66r-ffj4/GHSA-39fm-j66r-ffj4.json b/advisories/unreviewed/2025/06/GHSA-39fm-j66r-ffj4/GHSA-39fm-j66r-ffj4.json new file mode 100644 index 00000000000..37bad46446b --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-39fm-j66r-ffj4/GHSA-39fm-j66r-ffj4.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-39fm-j66r-ffj4", + "modified": "2025-06-03T06:31:14Z", + "published": "2025-06-03T06:31:14Z", + "aliases": [ + "CVE-2025-21486" + ], + "details": "Memory corruption during dynamic process creation call when client is only passing address and length of shell binary.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21486" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-822" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-3q79-wmhj-39pr/GHSA-3q79-wmhj-39pr.json b/advisories/unreviewed/2025/06/GHSA-3q79-wmhj-39pr/GHSA-3q79-wmhj-39pr.json new file mode 100644 index 00000000000..5dda189d35b --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-3q79-wmhj-39pr/GHSA-3q79-wmhj-39pr.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3q79-wmhj-39pr", + "modified": "2025-06-03T06:31:15Z", + "published": "2025-06-03T06:31:15Z", + "aliases": [ + "CVE-2025-3662" + ], + "details": "The FancyBox for WordPress plugin before 3.3.6 does not escape captions and titles attributes before using them to populate galleries' caption fields. The issue was received as a Contributor+ Stored XSS, however one of our researcher (Marc Montpas) escalated it to an Unauthenticated Stored XSS", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3662" + }, + { + "type": "WEB", + "url": "https://wpscan.com/vulnerability/4cda12f0-3c23-44ad-80ea-db2443ebcf82" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-49q8-x2pc-39wf/GHSA-49q8-x2pc-39wf.json b/advisories/unreviewed/2025/06/GHSA-49q8-x2pc-39wf/GHSA-49q8-x2pc-39wf.json new file mode 100644 index 00000000000..c9417479047 --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-49q8-x2pc-39wf/GHSA-49q8-x2pc-39wf.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-49q8-x2pc-39wf", + "modified": "2025-06-03T06:31:13Z", + "published": "2025-06-03T06:31:13Z", + "aliases": [ + "CVE-2025-4797" + ], + "details": "The Golo - City Travel Guide WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.7.0. This is due to the plugin not properly validating a user's identity prior to setting an authorization cookie. This makes it possible for unauthenticated attackers to log in as any user, including administrators, provided they know the user's email address.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4797" + }, + { + "type": "WEB", + "url": "https://themeforest.net/item/golo-directory-listing-travel-wordpress-theme/25397810" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e7b56ec1-8735-4404-8069-219f5d8866d0?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-288" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T05:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-4rgj-78j5-635j/GHSA-4rgj-78j5-635j.json b/advisories/unreviewed/2025/06/GHSA-4rgj-78j5-635j/GHSA-4rgj-78j5-635j.json new file mode 100644 index 00000000000..8d566c47871 --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-4rgj-78j5-635j/GHSA-4rgj-78j5-635j.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4rgj-78j5-635j", + "modified": "2025-06-03T06:31:15Z", + "published": "2025-06-03T06:31:15Z", + "aliases": [ + "CVE-2025-4567" + ], + "details": "The Post Slider and Post Carousel with Post Vertical Scrolling Widget WordPress plugin before 3.2.10 does not validate and escape some of its Widget options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4567" + }, + { + "type": "WEB", + "url": "https://wpscan.com/vulnerability/b8a50ae9-40c4-42f8-9342-2440d3bc12bb" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-65w5-5qgg-4h59/GHSA-65w5-5qgg-4h59.json b/advisories/unreviewed/2025/06/GHSA-65w5-5qgg-4h59/GHSA-65w5-5qgg-4h59.json new file mode 100644 index 00000000000..090b745311e --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-65w5-5qgg-4h59/GHSA-65w5-5qgg-4h59.json @@ -0,0 +1,34 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-65w5-5qgg-4h59", + "modified": "2025-06-03T06:31:15Z", + "published": "2025-06-03T06:31:15Z", + "aliases": [ + "CVE-2025-31710" + ], + "details": "In engineermode service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31710" + }, + { + "type": "WEB", + "url": "https://www.unisoc.com/en_us/secy/announcementDetail/1929773763314909186" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-6p39-gq6w-rwhx/GHSA-6p39-gq6w-rwhx.json b/advisories/unreviewed/2025/06/GHSA-6p39-gq6w-rwhx/GHSA-6p39-gq6w-rwhx.json new file mode 100644 index 00000000000..435e163e0cd --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-6p39-gq6w-rwhx/GHSA-6p39-gq6w-rwhx.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6p39-gq6w-rwhx", + "modified": "2025-06-03T06:31:15Z", + "published": "2025-06-03T06:31:15Z", + "aliases": [ + "CVE-2025-3584" + ], + "details": "The Newsletter WordPress plugin before 8.8.2 does not sanitise and escape some of its Subscription settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-3584" + }, + { + "type": "WEB", + "url": "https://wpscan.com/vulnerability/76937bdd-7ffa-4b5e-ade1-60da095a03a3" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-74r6-jc3v-cc2r/GHSA-74r6-jc3v-cc2r.json b/advisories/unreviewed/2025/06/GHSA-74r6-jc3v-cc2r/GHSA-74r6-jc3v-cc2r.json new file mode 100644 index 00000000000..c513bc97617 --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-74r6-jc3v-cc2r/GHSA-74r6-jc3v-cc2r.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-74r6-jc3v-cc2r", + "modified": "2025-06-03T06:31:14Z", + "published": "2025-06-03T06:31:14Z", + "aliases": [ + "CVE-2024-53010" + ], + "details": "Memory corruption may occur while attaching VM when the HLOS retains access to VM.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53010" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-8crf-388w-629m/GHSA-8crf-388w-629m.json b/advisories/unreviewed/2025/06/GHSA-8crf-388w-629m/GHSA-8crf-388w-629m.json new file mode 100644 index 00000000000..fa8c9a31ab1 --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-8crf-388w-629m/GHSA-8crf-388w-629m.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8crf-388w-629m", + "modified": "2025-06-03T06:31:14Z", + "published": "2025-06-03T06:31:14Z", + "aliases": [ + "CVE-2025-21463" + ], + "details": "Transient DOS while processing the EHT operation IE in the received beacon frame.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21463" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-126" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:25Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-8fjc-wgpp-8px6/GHSA-8fjc-wgpp-8px6.json b/advisories/unreviewed/2025/06/GHSA-8fjc-wgpp-8px6/GHSA-8fjc-wgpp-8px6.json new file mode 100644 index 00000000000..47a9abe9414 --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-8fjc-wgpp-8px6/GHSA-8fjc-wgpp-8px6.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8fjc-wgpp-8px6", + "modified": "2025-06-03T06:31:14Z", + "published": "2025-06-03T06:31:14Z", + "aliases": [ + "CVE-2024-53015" + ], + "details": "Memory corruption while processing IOCTL command to handle buffers associated with a session.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53015" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-94m6-5q5f-r8g8/GHSA-94m6-5q5f-r8g8.json b/advisories/unreviewed/2025/06/GHSA-94m6-5q5f-r8g8/GHSA-94m6-5q5f-r8g8.json new file mode 100644 index 00000000000..709289617dd --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-94m6-5q5f-r8g8/GHSA-94m6-5q5f-r8g8.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-94m6-5q5f-r8g8", + "modified": "2025-06-03T06:31:15Z", + "published": "2025-06-03T06:31:15Z", + "aliases": [ + "CVE-2025-27029" + ], + "details": "Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27029" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-126" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-99j9-vp2v-228j/GHSA-99j9-vp2v-228j.json b/advisories/unreviewed/2025/06/GHSA-99j9-vp2v-228j/GHSA-99j9-vp2v-228j.json new file mode 100644 index 00000000000..1ecf2f55656 --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-99j9-vp2v-228j/GHSA-99j9-vp2v-228j.json @@ -0,0 +1,34 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-99j9-vp2v-228j", + "modified": "2025-06-03T06:31:15Z", + "published": "2025-06-03T06:31:15Z", + "aliases": [ + "CVE-2025-31712" + ], + "details": "In cplog service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31712" + }, + { + "type": "WEB", + "url": "https://www.unisoc.com/en_us/secy/announcementDetail/1929773763314909186" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-9hmj-hrww-2599/GHSA-9hmj-hrww-2599.json b/advisories/unreviewed/2025/06/GHSA-9hmj-hrww-2599/GHSA-9hmj-hrww-2599.json new file mode 100644 index 00000000000..bc64c91fd4f --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-9hmj-hrww-2599/GHSA-9hmj-hrww-2599.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9hmj-hrww-2599", + "modified": "2025-06-03T06:31:14Z", + "published": "2025-06-03T06:31:14Z", + "aliases": [ + "CVE-2024-53013" + ], + "details": "Memory corruption may occur while processing voice call registration with user.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53013" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-120" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-g6gr-6rr9-69jw/GHSA-g6gr-6rr9-69jw.json b/advisories/unreviewed/2025/06/GHSA-g6gr-6rr9-69jw/GHSA-g6gr-6rr9-69jw.json new file mode 100644 index 00000000000..d0e37143c6a --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-g6gr-6rr9-69jw/GHSA-g6gr-6rr9-69jw.json @@ -0,0 +1,34 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-g6gr-6rr9-69jw", + "modified": "2025-06-03T06:31:15Z", + "published": "2025-06-03T06:31:15Z", + "aliases": [ + "CVE-2025-31711" + ], + "details": "In cplog service, there is a possible system crash due to null pointer dereference. This could lead to local denial of service with no additional execution privileges needed.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-31711" + }, + { + "type": "WEB", + "url": "https://www.unisoc.com/en_us/secy/announcementDetail/1929773763314909186" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-gg54-6w37-7r4j/GHSA-gg54-6w37-7r4j.json b/advisories/unreviewed/2025/06/GHSA-gg54-6w37-7r4j/GHSA-gg54-6w37-7r4j.json new file mode 100644 index 00000000000..5f9572af02c --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-gg54-6w37-7r4j/GHSA-gg54-6w37-7r4j.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gg54-6w37-7r4j", + "modified": "2025-06-03T06:31:14Z", + "published": "2025-06-03T06:31:14Z", + "aliases": [ + "CVE-2024-53017" + ], + "details": "Memory corruption while handling test pattern generator IOCTL command.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53017" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-823" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-gj4f-pc42-qxg8/GHSA-gj4f-pc42-qxg8.json b/advisories/unreviewed/2025/06/GHSA-gj4f-pc42-qxg8/GHSA-gj4f-pc42-qxg8.json new file mode 100644 index 00000000000..bc8417ddae5 --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-gj4f-pc42-qxg8/GHSA-gj4f-pc42-qxg8.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gj4f-pc42-qxg8", + "modified": "2025-06-03T06:31:14Z", + "published": "2025-06-03T06:31:14Z", + "aliases": [ + "CVE-2025-21480" + ], + "details": "Memory corruption due to unauthorized command execution in GPU micronode while executing specific sequence of commands.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21480" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-863" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-h454-pc9h-rvh2/GHSA-h454-pc9h-rvh2.json b/advisories/unreviewed/2025/06/GHSA-h454-pc9h-rvh2/GHSA-h454-pc9h-rvh2.json new file mode 100644 index 00000000000..5658983cfc3 --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-h454-pc9h-rvh2/GHSA-h454-pc9h-rvh2.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h454-pc9h-rvh2", + "modified": "2025-06-03T06:31:15Z", + "published": "2025-06-03T06:31:15Z", + "aliases": [ + "CVE-2025-27038" + ], + "details": "Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27038" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:27Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-j7v4-f93f-x37v/GHSA-j7v4-f93f-x37v.json b/advisories/unreviewed/2025/06/GHSA-j7v4-f93f-x37v/GHSA-j7v4-f93f-x37v.json new file mode 100644 index 00000000000..3a324a6207c --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-j7v4-f93f-x37v/GHSA-j7v4-f93f-x37v.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j7v4-f93f-x37v", + "modified": "2025-06-03T06:31:14Z", + "published": "2025-06-03T06:31:14Z", + "aliases": [ + "CVE-2024-53016" + ], + "details": "Memory corruption while processing I2C settings in Camera driver.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53016" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-367" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-p8mr-7vfx-25q5/GHSA-p8mr-7vfx-25q5.json b/advisories/unreviewed/2025/06/GHSA-p8mr-7vfx-25q5/GHSA-p8mr-7vfx-25q5.json new file mode 100644 index 00000000000..c4a8f0eebbb --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-p8mr-7vfx-25q5/GHSA-p8mr-7vfx-25q5.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p8mr-7vfx-25q5", + "modified": "2025-06-03T06:31:14Z", + "published": "2025-06-03T06:31:14Z", + "aliases": [ + "CVE-2024-53019" + ], + "details": "Information disclosure may occur while decoding the RTP packet with improper header length for number of contributing sources.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53019" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-126" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:25Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-q2mr-4w4q-26x6/GHSA-q2mr-4w4q-26x6.json b/advisories/unreviewed/2025/06/GHSA-q2mr-4w4q-26x6/GHSA-q2mr-4w4q-26x6.json new file mode 100644 index 00000000000..97176ad9f7a --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-q2mr-4w4q-26x6/GHSA-q2mr-4w4q-26x6.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q2mr-4w4q-26x6", + "modified": "2025-06-03T06:31:14Z", + "published": "2025-06-03T06:31:14Z", + "aliases": [ + "CVE-2024-53018" + ], + "details": "Memory corruption may occur while processing the OIS packet parser.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53018" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-367" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-qm7w-cjmv-j299/GHSA-qm7w-cjmv-j299.json b/advisories/unreviewed/2025/06/GHSA-qm7w-cjmv-j299/GHSA-qm7w-cjmv-j299.json new file mode 100644 index 00000000000..78cc800481d --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-qm7w-cjmv-j299/GHSA-qm7w-cjmv-j299.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qm7w-cjmv-j299", + "modified": "2025-06-03T06:31:14Z", + "published": "2025-06-03T06:31:14Z", + "aliases": [ + "CVE-2024-53021" + ], + "details": "Information disclosure may occur while processing goodbye RTCP packet from network.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53021" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-126" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:25Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-w4q4-rw8x-3296/GHSA-w4q4-rw8x-3296.json b/advisories/unreviewed/2025/06/GHSA-w4q4-rw8x-3296/GHSA-w4q4-rw8x-3296.json new file mode 100644 index 00000000000..af7a8d0b0a3 --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-w4q4-rw8x-3296/GHSA-w4q4-rw8x-3296.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w4q4-rw8x-3296", + "modified": "2025-06-03T06:31:14Z", + "published": "2025-06-03T06:31:14Z", + "aliases": [ + "CVE-2024-53026" + ], + "details": "Information disclosure when an invalid RTCP packet is received during a VoLTE/VoWiFi IMS call.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53026" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-126" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:25Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-w5w3-37x5-78hg/GHSA-w5w3-37x5-78hg.json b/advisories/unreviewed/2025/06/GHSA-w5w3-37x5-78hg/GHSA-w5w3-37x5-78hg.json new file mode 100644 index 00000000000..8cb26f5ab2d --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-w5w3-37x5-78hg/GHSA-w5w3-37x5-78hg.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w5w3-37x5-78hg", + "modified": "2025-06-03T06:31:15Z", + "published": "2025-06-03T06:31:14Z", + "aliases": [ + "CVE-2025-21485" + ], + "details": "Memory corruption while processing INIT and multimode invoke IOCTL calls on FastRPC.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-21485" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-367" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-w7pg-pjp7-vmxw/GHSA-w7pg-pjp7-vmxw.json b/advisories/unreviewed/2025/06/GHSA-w7pg-pjp7-vmxw/GHSA-w7pg-pjp7-vmxw.json new file mode 100644 index 00000000000..8e0b292dfe0 --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-w7pg-pjp7-vmxw/GHSA-w7pg-pjp7-vmxw.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w7pg-pjp7-vmxw", + "modified": "2025-06-03T06:31:15Z", + "published": "2025-06-03T06:31:15Z", + "aliases": [ + "CVE-2025-27031" + ], + "details": "memory corruption while processing IOCTL commands, when the buffer in write loopback mode is accessed after being freed.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27031" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:26Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/06/GHSA-w9f5-6mhq-cp5w/GHSA-w9f5-6mhq-cp5w.json b/advisories/unreviewed/2025/06/GHSA-w9f5-6mhq-cp5w/GHSA-w9f5-6mhq-cp5w.json new file mode 100644 index 00000000000..c7ef5371be9 --- /dev/null +++ b/advisories/unreviewed/2025/06/GHSA-w9f5-6mhq-cp5w/GHSA-w9f5-6mhq-cp5w.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w9f5-6mhq-cp5w", + "modified": "2025-06-03T06:31:14Z", + "published": "2025-06-03T06:31:14Z", + "aliases": [ + "CVE-2024-53020" + ], + "details": "Information disclosure may occur while decoding the RTP packet with invalid header extension from network.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53020" + }, + { + "type": "WEB", + "url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-126" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-06-03T06:15:25Z" + } +} \ No newline at end of file