Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-48936 State: PUBLISHED Published: 2024-10-28T00:00:00 Last Updated: 2024-10-30T21:00:21.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: SchedMD Slurm before 24.05.4 has Incorrect Authorization. A mistake in authentication handling in stepmgr could permit an attacker to execute processes under other users' jobs. This is limited to jobs explicitly running with --stepmgr, or on systems that have globally enabled stepmgr via SlurmctldParameters=enable_stepmgr in their configuration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.schedmd.com/security-policy/ - https://lists.schedmd.com/pipermail/slurm-announce/2024/date.html - https:/
- https://www.schedmd.com/security-policy/ - https://lists.schedmd.com/pipermail/slurm-announce/2024/date.html - https://lists.schedmd.com/mailman3/hyperkitty/list/slurm-announce%40lists.schedmd.com/message/44MFMN7R35YZFWTNO43R2754W5B5XUAI/
CVE ID: CVE-2024-48937 State: PUBLISHED Published: 2024-10-11T00:00:00.000Z Last Updated: 2025-03-13T13:33:01.866Z Vendors: n/a Products: n/a Problem Types: n/a Description: Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows XSS. JavaScript code in the short description of the SLA field in Activity Dialogues is executed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.znuny.com - https://www.znuny.org/en/advisories/zsa-2024-05 - https://www.znuny.org/en/advisories
CVE ID: CVE-2024-48938 State: PUBLISHED Published: 2024-10-11T00:00:00.000Z Last Updated: 2025-03-14T13:44:45.162Z Vendors: n/a Products: n/a Problem Types: n/a Description: Znuny before LTS 6.5.1 through 6.5.10 and 7.0.1 through 7.0.16 allows DoS/ReDos via email. Parsing the content of emails where HTML code is copied from Microsoft Word could lead to high CPU usage and block the parsing process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.znuny.com - https://www.znuny.org/en/advisories - https://www.znuny.org/en/advisories/zsa-2024-04
CVE ID: CVE-2024-48939 State: PUBLISHED Published: 2024-11-11T00:00:00 Last Updated: 2024-11-19T19:25:30.198Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient validation performed on the REST API License file in Paxton Net2 before 6.07.14023.5015 (SR4) enables use of the REST API with an invalid License File. Attackers may be able to retrieve access-log data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://paxton-access.co.uk - https://seclists.org/fulldisclosure/2024/Oct/3 - https://github.com/gitaware/CVE/blob/main/CVE-2024-48939/20241020_vuln_discl_paxton_API_license.pdf
CVE ID: CVE-2024-48941 State: PUBLISHED Published: 2024-10-09T00:00:00 Last Updated: 2024-10-10T17:25:53.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to bypass 2FA by interacting with the /rest endpoint of Jira, Confluence, or Bitbucket. In the default configuration, /rest is allowlisted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://syracom-bee.atlassian.net/wiki/spaces/SL/pages/3236560898/2024-09-16+-+Secure+Login+security+advisory+-+Insecure+default+configuration
CVE ID: CVE-2024-48942 State: PUBLISHED Published: 2024-10-09T00:00:00 Last Updated: 2024-10-10T17:31:27.754Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to easily brute-force the 2FA PIN via the plugins/servlet/twofactor/public/pinvalidation endpoint. The last 30 and the next 30 tokens are valid. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://syracom-bee.atlassian.net/wiki/spaces/SL/pages/3236560898/2024-09-16+-+Secure+Login+security+advisory+-+Insecure+default+configuration
CVE ID: CVE-2024-48944 State: PUBLISHED Published: 2025-03-27T15:05:57.302Z Last Updated: 2025-05-08T10:26:40.785Z Vendors: Apache Software Foundation Products: Apache Kylin Problem Types: CWE-918 Description: Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. Through a kylin server, an attacker may forge a request to invoke "/kylin/api/xxx/diag" api on another internal host and possibly get leaked information. There are two preconditions: 1) The attacker has got admin access to a kylin server; 2) Another internal host has the "/kylin/api/xxx/diag" api endpoint open for service. This issue affects Apache Kylin: from 5.0.0 through 5.0.1. Users are recommended to upgrade to vers
nt open for service. This issue affects Apache Kylin: from 5.0.0 through 5.0.1. Users are recommended to upgrade to version 5.0.2, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/1xxxtdfh9hzqsqgb1pd9grb8hvqdyc9x
CVE ID: CVE-2024-48948 State: PUBLISHED Published: 2024-10-15T00:00:00 Last Updated: 2024-12-20T13:06:45.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Elliptic package 6.5.7 for Node.js, in its for ECDSA implementation, does not correctly verify valid signatures if the hash contains at least four leading 0 bytes and when the order of the elliptic curve's base point is smaller than the hash, because of an _truncateToN anomaly. This leads to valid signatures being rejected. Legitimate transactions or communications may be incorrectly flagged as invalid. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/indutny/ell
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/indutny/elliptic/pull/322 - https://github.com/indutny/elliptic/issues/321
CVE ID: CVE-2024-48949 State: PUBLISHED Published: 2024-10-10T00:00:00.000Z Last Updated: 2025-03-25T16:10:41.890Z Vendors: n/a Products: n/a Problem Types: n/a Description: The verify function in lib/elliptic/eddsa/index.js in the Elliptic package before 6.5.6 for Node.js omits "sig.S().gte(sig.eddsa.curve.n) || sig.S().isNeg()" validation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/indutny/elliptic/commit/7ac5360118f74eb02da73bdf9f24fd0c72ff5281 - https://github.com/indutny/elliptic/compare/v6.5.5...v6.5.6
CVE ID: CVE-2024-48950 State: PUBLISHED Published: 2024-11-07T00:00:00 Last Updated: 2024-11-07T20:07:29.769Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Logpoint before 7.5.0. An endpoint used by Distributed Logpoint Setup was exposed, allowing unauthenticated attackers to bypass CSRF protections and authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/ - https://servicedesk.logpoint.com/hc/en-us/articles/21968264954525-Authentication-and-CSRF-bypass-leading-to-unauthorized-access - https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Secur
F-bypass-leading-to-unauthorized-access - https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security
CVE ID: CVE-2024-48951 State: PUBLISHED Published: 2024-11-07T00:00:00 Last Updated: 2024-11-07T20:05:51.201Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Logpoint before 7.5.0. Server-Side Request Forgery (SSRF) on SOAR can be used to leak Logpoint's API Token leading to authentication bypass. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/ - https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security - https://servicedesk.logpoint.com/hc/en-us/articles/21968916591261-Server-Side-Request-Forgery-SSRF-on-SOAR-results-in-authentication-bypass
CVE ID: CVE-2024-48952 State: PUBLISHED Published: 2024-11-07T00:00:00 Last Updated: 2024-11-07T20:03:17.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Logpoint before 7.5.0. SOAR uses a static JWT secret key to generate tokens that allow access to SOAR API endpoints without authentication. This static key vulnerability enables attackers to create custom JWT secret keys for unauthorized access to these endpoints. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/ - https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security - https://servicedesk.logp
n/latest/ - https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security - https://servicedesk.logpoint.com/hc/en-us/articles/21968950913693-Static-JWT-Key-enables-unauthorized-API-access
CVE ID: CVE-2024-48953 State: PUBLISHED Published: 2024-11-07T00:00:00 Last Updated: 2024-11-07T20:15:39.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Logpoint before 7.5.0. Endpoints for creating, editing, or deleting third-party authentication modules lacked proper authorization checks. This allowed unauthenticated users to register their own authentication plugins in Logpoint, resulting in unauthorized access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/ - https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security - https://servicedesk.log
en/latest/ - https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security - https://servicedesk.logpoint.com/hc/en-us/articles/21968899128221-Authentication-Bypass-using-URL-endpoints-in-the-Authentication-Modules
CVE ID: CVE-2024-48954 State: PUBLISHED Published: 2024-11-07T00:00:00 Last Updated: 2024-11-07T20:12:06.058Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Logpoint before 7.5.0. Unvalidated input during the EventHub Collector setup by an authenticated user leads to Remote Code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.logpoint.com/docs/whats-new-in-logpoint/en/latest/ - https://servicedesk.logpoint.com/hc/en-us/sections/7201103730845-Product-Security - https://servicedesk.logpoint.com/hc/en-us/articles/21968851138461-Remote-Code-Execution-RCE-in-EventHub-Collector
CVE ID: CVE-2024-48955 State: PUBLISHED Published: 2024-10-29T00:00:00.000Z Last Updated: 2025-03-18T18:37:32.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: Broken access control in NetAdmin 4.030319 returns data with functionalities on the endpoint that "assembles" the functionalities menus, the return of this call is not encrypted and as the system does not validate the session authorization, an attacker can copy the content of the browser of a user with greater privileges having access to the functionalities of the user that the code was copied. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://netadmin.software/gestao-de-identidade-e-acesso/ - http
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://netadmin.software/gestao-de-identidade-e-acesso/ - https://github.com/BrotherOfJhonny/CVE-2024-48955_Overview - https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-48955&sortby=bydate
CVE ID: CVE-2024-48956 State: PUBLISHED Published: 2024-12-09T00:00:00.000Z Last Updated: 2025-08-27T21:33:04.129Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: n/a Problem Types: CWE-1394 Description: Serviceware Processes 6.0 through 7.3 before 7.4 allows attackers without valid authentication to send a specially crafted HTTP request to a service endpoint resulting in remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://serviceware-se.com/platform/serviceware-processes - https://security.serviceware-se.com/CVE-2024-48956/
CVE ID: CVE-2024-48957 State: PUBLISHED Published: 2024-10-10T00:00:00.000Z Last Updated: 2025-08-29T19:08:51.237Z Vendors: n/a Products: n/a Problem Types: n/a Description: execute_filter_audio in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libarchive/libarchive/pull/2149 - https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5 - https://github.com/terrynini/CVE-Reports/blob/main/CVE-2024-48957/README.md
CVE ID: CVE-2024-48958 State: PUBLISHED Published: 2024-10-10T00:00:00.000Z Last Updated: 2025-11-03T20:41:07.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: execute_filter_delta in archive_read_support_format_rar.c in libarchive before 3.7.5 allows out-of-bounds access via a crafted archive file because src can move beyond dst. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/libarchive/libarchive/compare/v3.7.4...v3.7.5 - https://github.com/libarchive/libarchive/pull/2148 - https://github.com/terrynini/CVE-Reports/tree/main/CVE-2024-48958
CVE ID: CVE-2024-48962 State: PUBLISHED Published: 2024-11-18T08:41:30.545Z Last Updated: 2024-11-21T15:34:27.275Z Vendors: Apache Software Foundation Products: Apache OFBiz Problem Types: CWE-94, CWE-352, CWE-1336 Description: Improper Control of Generation of Code ('Code Injection'), Cross-Site Request Forgery (CSRF), : Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.17. Users are recommended to upgrade to version 18.12.17, which fixes the issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://ofbiz.apache.org/download.html - https://ofbiz.apa
CVE Program Container: - CISA ADP Vulnrichment: References: - https://ofbiz.apache.org/download.html - https://ofbiz.apache.org/security.html - https://issues.apache.org/jira/browse/OFBIZ-13162 - https://lists.apache.org/thread/6sddh4pts90cp8ktshqb4xykdp6lb6q6
CVE ID: CVE-2024-48963 State: PUBLISHED Published: 2024-10-23T18:24:48.174Z Last Updated: 2024-10-24T13:44:01.996Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Snyk Products: Snyk Cli, Snyk PHP Plugin Problem Types: CWE-78 Description: The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted PHP project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning trusted projects. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/snyk/snyk-php-plugin/releases/tag/v1
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/snyk/snyk-php-plugin/releases/tag/v1.10.0
CVE ID: CVE-2024-48964 State: PUBLISHED Published: 2024-10-23T18:24:42.404Z Last Updated: 2024-10-24T13:48:00.580Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Snyk Products: Snyk Cli, Snyk Gradle Plugin Problem Types: CWE-78 Description: The package Snyk CLI before 1.1294.0 is vulnerable to Code Injection when scanning an untrusted Gradle project. The vulnerability can be triggered if Snyk test is run inside the untrusted project due to the improper handling of the current working directory name. Snyk recommends only scanning trusted projects. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/snyk/snyk-gradle-plugin/commit
ects. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/snyk/snyk-gradle-plugin/commit/2f5ee7579f00660282dd161a0b79690f4a9c865d
CVE ID: CVE-2024-48966 State: PUBLISHED Published: 2024-11-14T21:38:11.113Z Last Updated: 2024-11-15T15:37:40.878Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Baxter Products: Life2000 Ventilation System Problem Types: CWE-306 Description: The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the tools are installed could obtain diagnostic information through the test tool or manipulate the ventilator's settings and embedded software via the calibration tool, without having to authenticate to either tool. This could result in unauthorized disclo
ftware via the calibration tool, without having to authenticate to either tool. This could result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-319-01
CVE ID: CVE-2024-48967 State: PUBLISHED Published: 2024-11-14T21:40:44.904Z Last Updated: 2024-11-15T14:28:13.605Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Baxter Products: Life2000 Ventilation System Problem Types: CWE-778 Description: The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings that result in unauthorized disclosure of information and/or have unintended impacts on device performance. Additional Anal
t result in unauthorized disclosure of information and/or have unintended impacts on device performance. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-319-01
CVE ID: CVE-2024-48970 State: PUBLISHED Published: 2024-11-14T21:31:14.701Z Last Updated: 2024-11-18T15:23:48.292Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Baxter Products: Life2000 Ventilation System Problem Types: CWE-1191 Description: The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-319-
lyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-319-01
CVE ID: CVE-2024-48971 State: PUBLISHED Published: 2024-11-14T21:13:36.036Z Last Updated: 2024-11-15T21:06:24.325Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Baxter Products: Life2000 Ventilation System Problem Types: CWE-798 Description: The Clinician Password and Serial Number Clinician Password are hard-coded into the ventilator in plaintext form. This could allow an attacker to obtain the password off the ventilator and use it to gain unauthorized access to the device, with clinician privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-319-01
CVE ID: CVE-2024-48973 State: PUBLISHED Published: 2024-11-14T21:24:14.099Z Last Updated: 2024-11-18T15:33:44.924Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Baxter Products: Life2000 Ventilation System Problem Types: CWE-1263 Description: The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and receive messages over the debug port (which are unencrypted; see 3.2.1) that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-
formance. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-319-01
CVE ID: CVE-2024-48974 State: PUBLISHED Published: 2024-11-14T21:27:10.284Z Last Updated: 2024-11-18T15:32:38.488Z Severity: CRITICAL (CVSS 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Baxter Products: Life2000 Ventilation System Problem Types: CWE-494 Description: The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality by pushing a compromised/illegitimate firmware file. This could disrupt the function of the device and/or cause unauthorized information disclosure. Additional Analyst Notes: - CIS
uld disrupt the function of the device and/or cause unauthorized information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-319-01
CVE ID: CVE-2024-48981 State: PUBLISHED Published: 2024-11-20T00:00:00 Last Updated: 2024-11-25T21:07:44.461Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MBed OS 6.16.0. During processing of HCI packets, the software dynamically determines the length of the packet header by looking up the identifying first byte and matching it against a table of possible lengths. The initial parsing function, hciTrSerialRxIncoming does not drop packets with invalid identifiers but also does not set a safe default for the length of unknown packets' headers, leading to a buffer overflow. This can be leveraged into an arbitrary write by an attacker. It is possible to ov
eaders, leading to a buffer overflow. This can be leveraged into an arbitrary write by an attacker. It is possible to overwrite the pointer to a not-yet-allocated buffer that is supposed to receive the contents of the packet body. One can then overwrite the state variable used by the function to determine which state of packet parsing is currently occurring. Because the buffer is allocated when the last byte of the header has been copied, the combination of having a bad header length variable that will never match the counter variable and being able to overwrite the state variable with the resulting buffer overflow can be used to advance the function to the next step while skipping the buffe
ariable with the resulting buffer overflow can be used to advance the function to the next step while skipping the buffer allocation and resulting pointer write. The next 16 bytes from the packet body are then written wherever the corrupted data pointer is pointing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mbed-ce/mbed-os/blob/54e8693ef4ff7e025018094f290a1d5cf380941f/connectivity/FEATURE_BLE/source/cordio/stack_adaptation/hci_tr.c#L161 - https://github.com/mbed-ce/mbed-os/pull/374
CVE ID: CVE-2024-48982 State: PUBLISHED Published: 2024-11-20T00:00:00 Last Updated: 2024-11-25T21:03:47.200Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MBed OS 6.16.0. Its hci parsing software dynamically determines the length of certain hci packets by reading a byte from its header. This value is assumed to be greater than or equal to 3, but the software doesn't ensure that this is the case. Supplying a length less than 3 leads to a buffer overflow in a buffer that is allocated later. It is simultaneously possible to cause another integer overflow by supplying large length values because the provided length value is increased by a few bytes to acc