deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-36646
Published: 2023-01-07
Description: A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38. This affects the function Ztring::Date_From_Seconds_1970_Local of the file Source/ZenLib/Ztring.cpp. The manipulation of the argument Value leads to unchecked return value to null pointer dereference. Upgrading to version 0.4.39 is able to address this issue. The identifier of the patch is 6475fcccd37c9cf17e0cfe263b5fe0e2e47a8408. It is recommended to upgrade the affected component. The identifier VDB-217629 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-690, CWE-476
References: https://github.com/MediaArea/ZenLib/commit/6475fcccd37c9cf17e0cfe263b5fe0e2e47a8408; https://github.com/MediaArea/ZenLib/pull/119; https://github.com/MediaArea/ZenLib/releases/tag/v0.4.39
CVE: CVE-2021-4307
Published: 2023-01-07
Description: A vulnerability was found in Yomguithereal Baobab up to 2.6.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The attack can be launched remotely. Upgrading to version 2.6.1 is able to address this issue. The patch is named c56639532a923d9a1600fb863ec7551b188b5d19. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217627.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-1321
References: https://github.com/Yomguithereal/baobab/commit/c56639532a923d9a1600fb863ec7551b188b5d19; https://github.com/Yomguithereal/baobab/pull/511; https://github.com/Yomguithereal/baobab/releases/tag/2.6.1
CVE: CVE-2014-125029
Published: 2023-01-07
Description: A vulnerability was found in ttskch PaginationServiceProvider up to 0.x. It has been declared as critical. This vulnerability affects unknown code of the file demo/index.php of the component demo. The manipulation of the argument sort/id leads to sql injection. Upgrading to version 1.0.0 is able to address this issue. The patch is identified as 619de478efce17ece1a3b913ab16e40651e1ea7b. It is recommended to upgrade the affected component. VDB-217150 is the identifier assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/ttskch/PaginationServiceProvider/commit/619de478efce17ece1a3b913ab16e40651e1ea7b; https://github.com/ttskch/PaginationServiceProvider/releases/tag/1.0.0; https://vuldb.com/?ctiid.217150
CVE: CVE-2021-4301
Published: 2023-01-07
Description: A vulnerability was found in slackero phpwcms up to 1.9.26 and classified as critical. Affected by this issue is some unknown functionality. The manipulation of the argument $phpwcms['db_prepend'] leads to sql injection. The attack may be launched remotely. Upgrading to version 1.9.27 is able to address this issue. The patch is identified as 77dafb6a8cc1015f0777daeb5792f43beef77a9d. It is recommended to upgrade the affected component. VDB-217418 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/slackero/phpwcms/commit/77dafb6a8cc1015f0777daeb5792f43beef77a9d; https://github.com/slackero/phpwcms/releases/tag/v1.9.27; https://vuldb.com/?ctiid.217418
CVE: CVE-2022-1101
Published: 2023-01-07
Description: A vulnerability was found in SourceCodester Royale Event Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /royal_event/userregister.php. The manipulation leads to improper authentication. The attack may be initiated remotely. The identifier VDB-195785 was assigned to this vulnerability.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287, CWE-287
References: https://vuldb.com/?ctiid.195785; https://vuldb.com/?id.195785; https://vuldb.com/?ctiid.195785
CVE: CVE-2022-1102
Published: 2023-01-07
Description: A vulnerability classified as problematic has been found in SourceCodester Royale Event Management System 1.0. Affected is an unknown function of the file /royal_event/companyprofile.php. The manipulation of the argument companyname/regno/companyaddress/companyemail leads to cross site scripting. It is possible to launch the attack remotely. VDB-195786 is the identifier assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: https://vuldb.com/?ctiid.195786; https://vuldb.com/?id.195786; https://www.sourcecodester.com/php/15238/event-management-system-project-php-source-code.html?
CVE: CVE-2022-2666
Published: 2023-01-07
Description: A vulnerability has been found in SourceCodester Loan Management System and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205618 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/cxaqhq/Loan-Management-System-Sqlinjection; https://vuldb.com/?ctiid.205618; https://vuldb.com/?id.205618
CVE: CVE-2014-125066
Published: 2023-01-08
Description: A vulnerability was found in emmflo yuko-bot. It has been declared as problematic. This vulnerability affects unknown code. The manipulation of the argument title leads to denial of service. The attack can be initiated remotely. The name of the patch is e580584b877934a4298d4dd0c497c79e579380d0. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217636.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-404
References: https://github.com/emmflo/yuko-bot/commit/e580584b877934a4298d4dd0c497c79e579380d0; https://vuldb.com/?ctiid.217636; https://vuldb.com/?id.217636
CVE: CVE-2007-10002
Published: 2023-01-08
Description: A vulnerability, which was classified as critical, has been found in web-cyradm. Affected by this issue is some unknown functionality of the file auth.inc.php. The manipulation of the argument login/login_password/LANG leads to sql injection. The attack may be launched remotely. The name of the patch is 2bcbead3bdb5f118bf2c38c541eaa73c29dcc90f. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217640.
CVSS Score: 7.3 (HIGH)
CWE: CWE-89
References: https://github.com/web-cyradm/web-cyradm/commit/2bcbead3bdb5f118bf2c38c541eaa73c29dcc90f; https://vuldb.com/?ctiid.217640; https://vuldb.com/?id.217640
CVE: CVE-2014-125067
Published: 2023-01-08
Description: A vulnerability classified as critical was found in corincerami curiosity. Affected by this vulnerability is an unknown functionality of the file app/controllers/image_controller.rb. The manipulation of the argument sol leads to sql injection. The patch is named d64fddd74ca72714e73f4efe24259ca05c8190eb. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217639.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/corincerami/curiosity/commit/d64fddd74ca72714e73f4efe24259ca05c8190eb; https://vuldb.com/?ctiid.217639; https://vuldb.com/?id.217639
CVE: CVE-2015-10030
Published: 2023-01-08
Description: A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php. The manipulation of the argument dir leads to pathname traversal. Upgrading to version 1.0.0 is able to address this issue. The patch is identified as d22337d453a2a14194cdb02bf12cdf9d9f827aa7. It is recommended to upgrade the affected component. VDB-217642 is the identifier assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-21, CWE-22
References: https://github.com/SUKOHI/Surpass/commit/d22337d453a2a14194cdb02bf12cdf9d9f827aa7; https://github.com/SUKOHI/Surpass/releases/tag/1.0.0; https://vuldb.com/?ctiid.217642
CVE: CVE-2020-36647
Published: 2023-01-08
Description: A vulnerability classified as critical has been found in YunoHost-Apps transmission_ynh. Affected is an unknown function of the file conf/nginx.conf. The manipulation leads to path traversal. The patch is identified as f136dfd44eda128129e5fd2d850a3a3c600e6a4a. It is recommended to apply a patch to fix this issue. VDB-217638 is the identifier assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22, CWE-22
References: https://github.com/YunoHost-Apps/transmission_ynh/commit/f136dfd44eda128129e5fd2d850a3a3c600e6a4a; https://github.com/YunoHost-Apps/transmission_ynh/pull/75; https://vuldb.com/?ctiid.217638
CVE: CVE-2020-36648
Published: 2023-01-08
Description: A vulnerability, which was classified as critical, was found in pouetnet pouet 2.0. This affects an unknown part. The manipulation of the argument howmany leads to sql injection. The identifier of the patch is 11d[PII_REDACTED]66fb2f6dcb07428277c2cd99baf. It is recommended to apply a patch to fix this issue. The identifier VDB-217641 was assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/pouetnet/pouet2.0/commit/11d[PII_REDACTED]66fb2f6dcb07428277c2cd99baf; https://vuldb.com/?ctiid.217641; https://vuldb.com/?id.217641
CVE: CVE-2021-4308
Published: 2023-01-08
Description: A vulnerability was found in WebPA up to 3.1.1. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to sql injection. Upgrading to version 3.1.2 is able to address this issue. The identifier of the patch is 8836c4f549181e885a68e0e7ca561fdbcbd04bf0. It is recommended to upgrade the affected component. The identifier VDB-217637 was assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/WebPA/WebPA/commit/8836c4f549181e885a68e0e7ca561fdbcbd04bf0; https://github.com/WebPA/WebPA/pull/87; https://github.com/WebPA/WebPA/releases/tag/v3.1.2
CVE: CVE-2014-125068
Published: 2023-01-08
Description: A vulnerability was found in saxman maps-js-icoads and classified as critical. This issue affects some unknown processing of the file http-server.js. The manipulation leads to path traversal. The patch is named 34b8b0cce2807b119f4cffda2ac48fc8f427d69a. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217643.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/saxman/maps-js-icoads/commit/34b8b0cce2807b119f4cffda2ac48fc8f427d69a; https://vuldb.com/?ctiid.217643; https://vuldb.com/?id.217643
CVE: CVE-2014-125069
Published: 2023-01-08
Description: A vulnerability was found in saxman maps-js-icoads. It has been classified as problematic. Affected is an unknown function. The manipulation leads to exposure of information through directory listing. It is possible to launch the attack remotely. The name of the patch is 34b8b0cce2807b119f4cffda2ac48fc8f427d69a. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217644.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-548, CWE-22
References: https://github.com/saxman/maps-js-icoads/commit/34b8b0cce2807b119f4cffda2ac48fc8f427d69a; https://vuldb.com/?ctiid.217644; https://vuldb.com/?id.217644
CVE: CVE-2019-25100
Published: 2023-01-08
Description: A vulnerability was found in happyman twmap. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file twmap3/data/ajaxCRUD/pointdata2.php. The manipulation of the argument id leads to sql injection. Upgrading to version v2.9_v4.31 is able to address this issue. The identifier of the patch is babbec79b3fa4efb3bd581ea68af0528d11bba0c. It is recommended to upgrade the affected component. The identifier VDB-217645 was assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/happyman/twmap/commit/babbec79b3fa4efb3bd581ea68af0528d11bba0c; https://github.com/happyman/twmap/issues/42; https://github.com/happyman/twmap/releases/tag/v2.9_v4.31
CVE: CVE-2018-25072
Published: 2023-01-08
Description: A vulnerability classified as critical has been found in lojban jbovlaste. This affects an unknown part of the file dict/listing.html. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The patch is named 6ff44c2e87b1113eb07d76ea62e1f64193b04d15. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217647.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/lojban/jbovlaste/commit/6ff44c2e87b1113eb07d76ea62e1f64193b04d15; https://vuldb.com/?ctiid.217647; https://vuldb.com/?id.217647
CVE: CVE-2022-4881
Published: 2023-01-08
Description: A vulnerability was found in CapsAdmin PAC3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lua/pac3/core/shared/http.lua. The manipulation of the argument url leads to cross site scripting. The attack may be launched remotely. The patch is identified as 8fc9e12dfa21d757be6eb4194c763e848b299ac0. It is recommended to apply a patch to fix this issue. VDB-217646 is the identifier assigned to this vulnerability.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/CapsAdmin/pac3/commit/8fc9e12dfa21d757be6eb4194c763e848b299ac0; https://github.com/CapsAdmin/pac3/pull/1210; https://vuldb.com/?ctiid.217646
CVE: CVE-2022-0668
Published: 2023-01-08
Description: JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated user.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-274, CWE-269
References: https://www.jfrog.com/confluence/display/JFROG/CVE-2022-0668%3A+Artifactory+Authentication+Bypass; https://www.jfrog.com/confluence/display/JFROG/CVE-2022-0668%3A+Artifactory+Authentication+Bypass
CVE: CVE-2015-10031
Published: 2023-01-08
Description: A vulnerability classified as critical was found in purpleparrots 491-Project. This vulnerability affects unknown code of the file update.php of the component Highscore Handler. The manipulation leads to sql injection. The name of the patch is a812a5e4cf72f2a635a716086fe1ee2b8fa0b1ab. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217648.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/purpleparrots/491-Project/commit/a812a5e4cf72f2a635a716086fe1ee2b8fa0b1ab; https://vuldb.com/?ctiid.217648; https://vuldb.com/?id.217648
CVE: CVE-2021-4309
Published: 2023-01-08
Description: A vulnerability, which was classified as problematic, has been found in 01-Scripts 01ACP. This issue affects some unknown processing. The manipulation of the argument $_SERVER['SCRIPT_NAME'] leads to cross site scripting. The attack may be initiated remotely. The identifier of the patch is a16eb7da46ed22bc61067c212635394f2571d3c4. It is recommended to apply a patch to fix this issue. The identifier VDB-217649 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/01-Scripts/01ACP/commit/a16eb7da46ed22bc61067c212635394f2571d3c4; https://vuldb.com/?ctiid.217649; https://vuldb.com/?id.217649
CVE: CVE-2014-125070
Published: 2023-01-08
Description: A vulnerability has been found in yanheven console and classified as problematic. Affected by this vulnerability is the function get_zone_hosts/AvailabilityZonesTable of the file openstack_dashboard/dashboards/admin/aggregates/tables.py. The manipulation leads to cross site scripting. The attack can be launched remotely. The patch is named ba908ae88d5925f4f6783eb234cc4ea95017472b. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217651.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-79
References: https://github.com/yanheven/console/commit/ba908ae88d5925f4f6783eb234cc4ea95017472b; https://vuldb.com/?ctiid.217651; https://vuldb.com/?id.217651
CVE: CVE-2016-15015
Published: 2023-01-08
Description: A vulnerability, which was classified as problematic, was found in viafintech Barzahlen Payment Module PHP SDK up to 2.0.0. Affected is the function verify of the file src/Webhook.php. The manipulation leads to observable timing discrepancy. The complexity of an attack is rather high. The exploitability is told to be difficult. Upgrading to version 2.0.1 is able to address this issue. The patch is identified as 3e7d29dc0ca6c054a6d6e211f32dae89078594c1. It is recommended to upgrade the affected component. VDB-217650 is the identifier assigned to this vulnerability.
CVSS Score: 2.6 (LOW)
CWE: CWE-208, CWE-203
References: https://github.com/viafintech/Barzahlen-PHP/commit/3e7d29dc0ca6c054a6d6e211f32dae89078594c1; https://github.com/viafintech/Barzahlen-PHP/pull/8; https://github.com/viafintech/Barzahlen-PHP/releases/tag/v2.0.1
CVE: CVE-2016-15016
Published: 2023-01-08
Description: A vulnerability was found in mrtnmtth joomla_mod_einsatz_stats up to 0.2. It has been classified as critical. This affects the function getStatsByType of the file helper.php. The manipulation of the argument year leads to sql injection. Upgrading to version 0.3 is able to address this issue. The identifier of the patch is 27c1b443cff45c81d9d7d926a74c76f8b6ffc6cb. It is recommended to upgrade the affected component. The identifier VDB-217653 was assigned to this vulnerability.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/mrtnmtth/joomla_mod_einsatz_stats/commit/27c1b443cff45c81d9d7d926a74c76f8b6ffc6cb; https://github.com/mrtnmtth/joomla_mod_einsatz_stats/releases/tag/v0.3; https://vuldb.com/?ctiid.217653
CVE: CVE-2022-43662
Published: 2023-01-09
Description: Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysTimerGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-120, CWE-787
References: https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md; https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md
CVE: CVE-2022-45126
Published: 2023-01-09
Description: Kernel subsystem within OpenHarmony-v3.1.4 and prior versions in kernel_liteos_a has a kernel stack overflow vulnerability when call SysClockGettime. 4 bytes padding data from kernel stack are copied to user space incorrectly and leaked.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-120, CWE-787
References: https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md; https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-12.md
CVE: CVE-2023-0035
Published: 2023-01-09
Description: softbus_client_stub in communication subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287, CWE-294
References: https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-01.md; https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-01.md
CVE: CVE-2023-0036
Published: 2023-01-09
Description: platform_callback_stub in misc subsystem within OpenHarmony-v3.0.5 and prior versions has an authentication bypass vulnerability which allows an "SA relay attack".Local attackers can bypass authentication and attack other SAs with high privilege.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-287, CWE-294
References: https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-01.md; https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2023/2023-01.md
CVE: CVE-2022-25890
Published: 2023-01-09
Description: All versions of the package wifey are vulnerable to Command Injection via the connect() function due to improper input sanitization.
CVSS Score: 7.4 (HIGH)
CWE: CWE-78
References: https://security.snyk.io/vuln/SNYK-JS-WIFEY-3175615; https://security.snyk.io/vuln/SNYK-JS-WIFEY-3175615
CVE: CVE-2010-10004
Published: 2023-01-09
Description: A vulnerability was found in Information Cards Module on simpleSAMLphp and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 1.0 is able to address this issue. The identifier of the patch is f6bfea49ae16dc6e179df8306d39c3694f1ef186. It is recommended to upgrade the affected component. The identifier VDB-217661 was assigned to this vulnerability.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/simplesamlphp/simplesamlphp-module-infocard/commit/f6bfea49ae16dc6e179df8306d39c3694f1ef186; https://github.com/simplesamlphp/simplesamlphp-module-infocard/releases/tag/v1.0; https://vuldb.com/?ctiid.217661
CVE: CVE-2022-22079
Published: 2023-01-09
Description: Denial of service while processing fastboot flash command on mmc due to buffer over read
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE: CVE-2022-22088
Published: 2023-01-09
Description: Memory corruption in Bluetooth HOST due to buffer overflow while parsing the command response received from remote
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE: CVE-2022-22470
Published: 2023-01-09
Description: 
IBM Security Verify Governance 10.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225232.


CVSS Score: 4.1 (MEDIUM)
CWE: CWE-312
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/225232; https://www.ibm.com/support/pages/node/6852697; https://exchange.xforce.ibmcloud.com/vulnerabilities/225232
CVE: CVE-2022-25715
Published: 2023-01-09
Description: Memory corruption in display driver due to incorrect type casting while accessing the fence structure fields
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-704, CWE-704
References: https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE: CVE-2022-25716
Published: 2023-01-09
Description: Memory corruption in Multimedia Framework due to unsafe access to the data members
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE: CVE-2022-25717
Published: 2023-01-09
Description: Memory corruption in display due to double free while allocating frame buffer memory
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-415, CWE-415
References: https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE: CVE-2022-25721
Published: 2023-01-09
Description: Memory corruption in video driver due to type confusion error during video playback
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-843, CWE-843
References: https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE: CVE-2022-25722
Published: 2023-01-09
Description: Information exposure in DSP services due to improper handling of freeing memory
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin
CVE: CVE-2022-25725
Published: 2023-01-09
Description: Denial of service in MODEM due to improper pointer handling
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-763, CWE-763
References: https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2023-bulletin