Vulnerabilities (CVE)

Filtered by CWE-125
Total 9747 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-33018 1 Qualcomm 302 Ar8035, Ar8035 Firmware, Csr8811 and 299 more 2026-06-17 N/A 7.5 HIGH
Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame.
CVE-2024-33015 1 Qualcomm 390 Ar8035, Ar8035 Firmware, Csr8811 and 387 more 2026-06-17 N/A 7.5 HIGH
Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is less than neighbor report.
CVE-2024-33014 1 Qualcomm 650 315 5g Iot Modem, 315 5g Iot Modem Firmware, 860 Mobile Platform and 647 more 2026-06-17 N/A 7.5 HIGH
Transient DOS while parsing ESP IE from beacon/probe response frame.
CVE-2024-33013 1 Qualcomm 340 Ar8035, Ar8035 Firmware, Csr8811 and 337 more 2026-06-17 N/A 7.5 HIGH
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length.
CVE-2024-33012 1 Qualcomm 498 Ar8035, Ar8035 Firmware, Ar9380 and 495 more 2026-06-17 N/A 7.5 HIGH
Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon.
CVE-2024-33011 1 Qualcomm 498 Ar8035, Ar8035 Firmware, Ar9380 and 495 more 2026-06-17 N/A 7.5 HIGH
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero.
CVE-2024-32920 1 Google 1 Android 2026-06-17 N/A 7.1 HIGH
In set_secure_reg of sac_handler.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure of 4 bytes of stack memory with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-32915 1 Google 1 Android 2026-06-17 N/A 4.3 MEDIUM
In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.
CVE-2024-32914 1 Google 1 Android 2026-06-17 N/A 5.5 MEDIUM
In tpu_get_int_state of tpu.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-32904 1 Google 1 Android 2026-06-17 N/A 4.7 MEDIUM
In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation.
CVE-2024-32898 1 Google 1 Android 2026-06-17 N/A 4.7 MEDIUM
In ProtocolCellIdentityParserV4::Parse() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not needed for exploitation.
CVE-2024-32897 1 Google 1 Android 2026-06-17 N/A 5.9 MEDIUM
In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.
CVE-2024-32894 1 Google 1 Android 2026-06-17 N/A 7.5 HIGH
In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-32893 1 Google 1 Android 2026-06-17 N/A 5.5 MEDIUM
In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-32669 2026-06-17 N/A 5.3 MEDIUM
Improper Input Validation vulnerability in Samsung Open Source escargot JavaScript engine allows Overflow Buffers. However, it occurs in the test code and does not include in the release. This issue affects escargot: 4.0.0.
CVE-2024-32667 2026-06-17 N/A 3.9 LOW
Out-of-bounds read for some OpenCL(TM) software may allow an authenticated user to potentially enable denial of service via local access.
CVE-2024-32662 2 Fedoraproject, Freerdp 2 Fedora, Freerdp 2026-06-17 N/A 7.5 HIGH
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when `WCHAR` string is read with twice the size it has and converted to `UTF-8`, `base64` decoded. The string is only used to compare against the redirection server certificate. Version 3.5.1 contains a patch for the issue. No known workarounds are available.
CVE-2024-32659 2 Fedoraproject, Freerdp 2 Fedora, Freerdp 2026-06-17 N/A 9.8 CRITICAL
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read if `((nWidth == 0) and (nHeight == 0))`. Version 3.5.1 contains a patch for the issue. No known workarounds are available.
CVE-2024-32658 2 Fedoraproject, Freerdp 2 Fedora, Freerdp 2026-06-17 N/A 9.8 CRITICAL
FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. Version 3.5.1 contains a patch for the issue. No known workarounds are available.
CVE-2024-32636 1 Siemens 3 Jt2go, Parasolid, Teamcenter Visualization 2026-06-17 N/A 7.8 HIGH
A vulnerability has been identified in JT2Go (All versions < V2312.0005), Teamcenter Visualization V14.2 (All versions < V14.2.0.12), Teamcenter Visualization V14.3 (All versions < V14.3.0.10), Teamcenter Visualization V2312 (All versions < V2312.0005). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted X_T files. This could allow an attacker to execute code in the context of the current process.