Latest CVE Feed

Following is the list of latest published vulnerabilities. You can filter the list based on the severity of the vulnerability, whether it is actively exploited (also known as CISA KEV List) or remotely exploitable. You can also sort the list based on the published date, last updated date, or CVSS score.

Latest Critical Actively Exploited Remotely Exploitable

7.8

HIGH

CVE-2024-43049

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver....

Affected Products : wcd9380_firmware wcd9385_firmware wsa8830_firmware wsa8835_firmware snapdragon_7c\+_gen_3_compute_firmware wcn3660b_firmware fastconnect_6900_firmware fastconnect_7800_firmware sdm429w_firmware wcn3620_firmware +28 more products
Published: Dec. 02, 2024

Modified: Dec. 12, 2024
7.8

HIGH

CVE-2024-43048

Memory corruption when invalid input is passed to invoke GPU Headroom API call....

Affected Products : wcd9341_firmware wcd9380_firmware wcd9385_firmware wcn3988_firmware wsa8810_firmware wsa8815_firmware wsa8830_firmware wsa8835_firmware qcm4325_firmware sg4150p_firmware +94 more products
Published: Dec. 02, 2024

Modified: Dec. 12, 2024
7.5

HIGH

CVE-2024-33063

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present....

Affected Products : qam8295p_firmware qca6391_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6155p_firmware sa8155p_firmware sa8195p_firmware sa8295p_firmware wcd9341_firmware +240 more products
Published: Dec. 02, 2024

Modified: Dec. 12, 2024
8.4

HIGH

CVE-2024-33056

Memory corruption when allocating and accessing an entry in an SMEM partition continuously....

Affected Products : qam8295p_firmware qca6391_firmware qca6420_firmware qca6426_firmware qca6430_firmware qca6436_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware sa6145p_firmware +652 more products
Published: Dec. 02, 2024

Modified: Dec. 12, 2024
6.7

MEDIUM

CVE-2024-33053

Memory corruption when multiple threads try to unregister the CVP buffer at the same time....

Affected Products : qam8295p_firmware qca6391_firmware qca6426_firmware qca6436_firmware qca6574au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware sa8145p_firmware +104 more products
Published: Dec. 02, 2024

Modified: Dec. 12, 2024
8.4

HIGH

CVE-2024-33044

Memory corruption while Configuring the SMR/S2CR register in Bypass mode....

Affected Products : aqt1000_firmware qam8295p_firmware qca6391_firmware qca6420_firmware qca6426_firmware qca6430_firmware qca6436_firmware qca6574au_firmware qca6595au_firmware qca6696_firmware +415 more products
Published: Dec. 02, 2024

Modified: Dec. 12, 2024
7.0

HIGH

CVE-2024-33040

Memory corruption while invoking redundant release command to release one buffer from user space as race condition can occur in kernel space between buffer release and buffer access....

Affected Products : qca6391_firmware qca6426_firmware qca6436_firmware qca6595au_firmware sd865_5g_firmware sw5100_firmware sw5100p_firmware wcd9380_firmware wcn3980_firmware wcn3988_firmware +50 more products
Published: Dec. 02, 2024

Modified: Dec. 12, 2024
6.7

MEDIUM

CVE-2024-33039

Memory corruption when PAL client calls PAL service APIs by passing a random value as handle and the handle is not validated by the service....

Affected Products : sw5100_firmware sw5100p_firmware wcn3980_firmware wcn3988_firmware wsa8830_firmware wsa8835_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware sa9000p_firmware qam8255p_firmware sa8255p_firmware +34 more products
Published: Dec. 02, 2024

Modified: Dec. 11, 2024
6.1

MEDIUM

CVE-2024-33037

Information disclosure as NPU firmware can send invalid IPC message to NPU driver as the driver doesn`t validate the IPC message received from the firmware....

Affected Products : qam8295p_firmware qca6391_firmware qca6426_firmware qca6436_firmware qca6574au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware sa8145p_firmware +94 more products
Published: Dec. 02, 2024

Modified: Dec. 11, 2024
6.7

MEDIUM

CVE-2024-33036

Memory corruption while parsing sensor packets in camera driver, user-space variable is used while allocating memory in kernel and parsing which can lead to huge allocation or invalid memory access....

Affected Products : qam8295p_firmware qca6391_firmware qca6426_firmware qca6436_firmware qca6574au_firmware qca6696_firmware sa6145p_firmware sa6150p_firmware sa6155p_firmware sa8145p_firmware +96 more products
Published: Dec. 02, 2024

Modified: Dec. 11, 2024
8.4

HIGH

CVE-2024-10490

An “Authentication Bypass Using an Alternate Path or Channel” vulnerability in the OPC UA Server configuration required for B&R mapp Cockpit before 6.0, B&R mapp View before 6.0, B&R mapp Services before 6.0, B&R mapp Motion before 6.0 and B&R mapp Vision...

Affected Products :
Published: Dec. 02, 2024

Modified: Dec. 02, 2024
7.8

HIGH

CVE-2024-53104

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format This can lead to out of bounds writes since frames of this type were not taken into account when calcul...

Affected Products : linux_kernel
Actively Exploited

Published: Dec. 02, 2024

Modified: Feb. 06, 2025
7.8

HIGH

CVE-2024-53103

In the Linux kernel, the following vulnerability has been resolved: hv_sock: Initializing vsk->trans to NULL to prevent a dangling pointer When hvs is released, there is a possibility that vsk->trans may not be initialized to NULL, which could lead to a...

Affected Products : linux_kernel
Published: Dec. 02, 2024

Modified: Jan. 07, 2025
6.5

MEDIUM

CVE-2024-20139

In Bluetooth firmware, there is a possible firmware asssert due to improper handling of exceptional conditions. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Pat...

Affected Products :
Published: Dec. 02, 2024

Modified: Dec. 02, 2024
7.5

HIGH

CVE-2024-20138

In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0899829...

Affected Products : android mt6985 mt6989 mt6990 mt8195 mt8390 mt3605 mt7927 software_development_kit mt8370 +1 more products
Published: Dec. 02, 2024

Modified: Apr. 22, 2025
7.5

HIGH

CVE-2024-20137

In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch...

Affected Products :
Published: Dec. 02, 2024

Modified: Dec. 02, 2024
6.2

MEDIUM

CVE-2024-20136

In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09121847; Issue ID:...

Affected Products : android openwrt rdk-b mt6781 mt6789 mt6855 mt6878 mt6879 mt6880 mt6886 +22 more products
Published: Dec. 02, 2024

Modified: Apr. 22, 2025
6.7

MEDIUM

CVE-2024-20135

In soundtrigger, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09142526; Issu...

Affected Products : android mt6781 mt6833 mt6853 mt6877 mt6878 mt6893 mt6897 mt6989 mt6768 +3 more products
Published: Dec. 02, 2024

Modified: Apr. 22, 2025
6.7

MEDIUM

CVE-2024-20134

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09154589; Issue ID: MSV...

Affected Products : android mt6835 mt6878 mt6879 mt6895 mt6896 mt6897 mt6985 mt6989 mt6983 +4 more products
Published: Dec. 02, 2024

Modified: Apr. 22, 2025
6.7

MEDIUM

CVE-2024-20133

In Modem, there is a possible escalation of privilege due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01395886; Issu...

Affected Products : nr16 mt6879 mt6886 mt6895 mt6895t mt6896 mt6980 mt6983 mt8673 mt8798 +2 more products
Published: Dec. 02, 2024

Modified: Apr. 22, 2025

Showing 20 of 291638 Results

1
...
1712
1713
1714
1715
1716
1717
1718
...
14582

Latest CVE Feed

7.8

7.8

7.5

8.4

6.7

8.4

7.0

6.7

6.1

6.7

8.4

7.8

7.8

6.5

7.5

7.5

6.2

6.7

6.7

6.7

Theme Customizer

Layout

Vertical

Horizontal

Two Column

Color Scheme

Light

Dark

Layout Width

Fluid

Boxed

Layout Position

Topbar Color

Light

Dark

Sidebar Size

Default

Compact

Small (Icon View)

Small Hover View

Sidebar View

Default

Detached

Sidebar Color

Light

Dark

Gradient

Preloader

Enable

Disable