deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-42558
Published: 2022-01-12
Description: An issue was discovered in CALDERA 2.8.1. It contains multiple reflected, stored, and self XSS vulnerabilities that may be exploited by authenticated and unauthenticated attackers.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42558-Multiple%20XSS-MITRE%20Caldera; https://github.com/mitre/caldera/releases; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42558-Multiple%20XSS-MITRE%20Caldera
CVE: CVE-2021-42559
Published: 2022-01-12
Description: An issue was discovered in CALDERA 2.8.1. It contains multiple startup "requirements" that execute commands when starting the server. Because these commands can be changed via the REST API, an authenticated user can insert arbitrary commands that will execute when the server is restarted.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42559-Command%20Injection%20Via%20Configurations-MITRE%20Caldera; https://github.com/mitre/caldera/releases; https://github.com/DrunkenShells/Disclosures/tree/master/CVE-2021-42559-Command%20Injection%20Via%20Configurations-MITRE%20Caldera
CVE: CVE-2021-45449
Published: 2022-01-12
Description: Docker Desktop version 4.3.0 and 4.3.1 has a bug that may log sensitive information (access token or password) on the user's machine during login. This only affects users if they are on Docker Desktop 4.3.0, 4.3.1 and the user has logged in while on 4.3.0, 4.3.1. Gaining access to this data would require having access to the user’s local files.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532
References: https://docs.docker.com/desktop/windows/release-notes/; https://docs.docker.com/desktop/windows/release-notes/
CVE: CVE-2021-46225
Published: 2022-01-12
Description: A buffer overflow in the GmfOpenMesh() function of libMeshb v7.61 allows attackers to cause a Denial of Service (DoS) via a crafted MESH file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://github.com/LoicMarechal/libMeshb/commit/8cd68c54e0647c0030ae4506a225ad4a2655c316; https://github.com/LoicMarechal/libMeshb/issues/21; https://github.com/LoicMarechal/libMeshb/commit/8cd68c54e0647c0030ae4506a225ad4a2655c316
CVE: CVE-2022-20612
Published: 2022-01-12
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins 2.329 and earlier, LTS 2.319.1 and earlier allows attackers to trigger build of job without parameters when no security realm is set.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2558; https://www.oracle.com/security-alerts/cpuapr2022.html
CVE: CVE-2022-20613
Published: 2022-01-12
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2163; https://www.oracle.com/security-alerts/cpuapr2022.html
CVE: CVE-2022-20614
Published: 2022-01-12
Description: A missing permission check in Jenkins Mailer Plugin 391.ve4a_38c1b_cf4b_ and earlier allows attackers with Overall/Read access to use the DNS used by the Jenkins instance to resolve an attacker-specified hostname.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2163; https://www.oracle.com/security-alerts/cpuapr2022.html
CVE: CVE-2022-20615
Published: 2022-01-12
Description: Jenkins Matrix Project Plugin 1.19 and earlier does not escape HTML metacharacters in node and label names, and label descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2017; https://www.oracle.com/security-alerts/cpuapr2022.html
CVE: CVE-2022-20616
Published: 2022-01-12
Description: Jenkins Credentials Binding Plugin 1.27 and earlier does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read access to validate if a credential ID refers to a secret file credential and whether it's a zip file.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2342; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-20617
Published: 2022-01-12
Description: Jenkins Docker Commons Plugin 1.17 and earlier does not sanitize the name of an image or a tag, resulting in an OS command execution vulnerability exploitable by attackers with Item/Configure permission or able to control the contents of a previously configured job's SCM repository.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1878; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-20618
Published: 2022-01-12
Description: A missing permission check in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2033; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-20619
Published: 2022-01-12
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVSS Score: 7.1 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2467; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-20620
Published: 2022-01-12
Description: Missing permission checks in Jenkins SSH Agent Plugin 1.23 and earlier allows attackers with Overall/Read access to enumerate credentials IDs of credentials stored in Jenkins.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2189; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-20621
Published: 2022-01-12
Description: Jenkins Metrics Plugin 4.0.2.8 and earlier stores an access key unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1624; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-23105
Published: 2022-01-12
Description: Jenkins Active Directory Plugin 2.25 and earlier does not encrypt the transmission of data between the Jenkins controller and Active Directory servers in most configurations.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1389; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-23106
Published: 2022-01-12
Description: Jenkins Configuration as Code Plugin 1.55 and earlier used a non-constant time comparison function when validating an authentication token allowing attackers to use statistical methods to obtain a valid authentication token.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2141; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-23107
Published: 2022-01-12
Description: Jenkins Warnings Next Generation Plugin 9.10.2 and earlier does not restrict the name of a file when configuring custom ID, allowing attackers with Item/Configure permission to write and read specific files with a hard-coded suffix on the Jenkins controller file system.
CVSS Score: 8.1 (HIGH)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2090; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-23108
Published: 2022-01-12
Description: Jenkins Badge Plugin 1.9 and earlier does not escape the description and does not check for allowed protocols when creating a badge, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2547; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-23109
Published: 2022-01-12
Description: Jenkins HashiCorp Vault Plugin 3.7.0 and earlier does not mask Vault credentials in Pipeline build logs or in Pipeline step descriptions when Pipeline: Groovy Plugin 2.85 or later is installed.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2213; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-23110
Published: 2022-01-12
Description: Jenkins Publish Over SSH Plugin 1.22 and earlier does not escape the SSH server name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Overall/Administer permission.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2287; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-23111
Published: 2022-01-12
Description: A cross-site request forgery (CSRF) vulnerability in Jenkins Publish Over SSH Plugin 1.22 and earlier allows attackers to connect to an attacker-specified SSH server using attacker-specified credentials.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2290; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-23112
Published: 2022-01-12
Description: A missing permission check in Jenkins Publish Over SSH Plugin 1.22 and earlier allows attackers with Overall/Read access to connect to an attacker-specified SSH server using attacker-specified credentials.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2290; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-23113
Published: 2022-01-12
Description: Jenkins Publish Over SSH Plugin 1.22 and earlier performs a validation of the file name specifying whether it is present or not, resulting in a path traversal vulnerability allowing attackers with Item/Configure permission to discover the name of the Jenkins controller files.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2307; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-23114
Published: 2022-01-12
Description: Jenkins Publish Over SSH Plugin 1.22 and earlier stores password unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
CVSS Score: 3.3 (LOW)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2291; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-23115
Published: 2022-01-12
Description: Cross-site request forgery (CSRF) vulnerabilities in Jenkins batch task Plugin 1.19 and earlier allows attackers with Overall/Read access to retrieve logs, build or delete a batch task.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-1025; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-23116
Published: 2022-01-12
Description: Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to decrypt secrets stored in Jenkins obtained through another method.
CVSS Score: 7.5 (HIGH)
CWE: CWE-311
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2522%20%281%29; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-23117
Published: 2022-01-12
Description: Jenkins Conjur Secrets Plugin 1.0.9 and earlier implements functionality that allows attackers able to control agent processes to retrieve all username/password credentials stored on the Jenkins controller.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2522%20%282%29; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2022-23118
Published: 2022-01-12
Description: Jenkins Debian Package Builder Plugin 1.6.11 and earlier implements functionality that allows agents to invoke command-line `git` at an attacker-specified path on the controller, allowing attackers able to control agent processes to invoke arbitrary OS commands on the controller.
CVSS Score: 8.8 (HIGH)
CWE: CWE-668
References: http://www.openwall.com/lists/oss-security/2022/01/12/6; https://www.jenkins.io/security/advisory/2022-01-12/#SECURITY-2546; http://www.openwall.com/lists/oss-security/2022/01/12/6
CVE: CVE-2021-37529
Published: 2022-01-12
Description: A double-free vulnerability exists in fig2dev through 3.28a is affected by: via the free_stream function in readpics.c, which could cause a denial of service (context-dependent).
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-415
References: https://sourceforge.net/p/mcj/tickets/125/; https://sourceforge.net/p/mcj/tickets/125/
CVE: CVE-2021-37530
Published: 2022-01-12
Description: A denial of service vulnerabiity exists in fig2dev through 3.28a due to a segfault in the open_stream function in readpics.c.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: https://sourceforge.net/p/mcj/tickets/126/; https://sourceforge.net/p/mcj/tickets/126/
CVE: CVE-2021-40559
Published: 2022-01-12
Description: A null pointer deference vulnerability exists in gpac through 1.0.1 via the naludmx_parse_nal_avc function in reframe_nalu, which allows a denail of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/issues/1886; https://www.debian.org/security/2023/dsa-5411; https://github.com/gpac/gpac/issues/1886
CVE: CVE-2021-40562
Published: 2022-01-12
Description: A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmx_enqueue_or_dispatch function in reframe_nalu.c, which causes a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-697
References: https://github.com/gpac/gpac/commit/5dd71c7201a3e5cf40732d585bfb21c906c171d3; https://github.com/gpac/gpac/issues/1901; https://www.debian.org/security/2023/dsa-5411
CVE: CVE-2021-40563
Published: 2022-01-12
Description: A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmx_create_avc_decoder_config function in reframe_nalu.c when using mp4box, which causes a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/5ce0c906ed8599d218036b18b78e8126a496f137; https://github.com/gpac/gpac/issues/1892; https://www.debian.org/security/2023/dsa-5411
CVE: CVE-2021-40564
Published: 2022-01-12
Description: A Segmentation fault caused by null pointer dereference vulnerability eists in Gpac through 1.0.2 via the avc_parse_slice function in av_parsers.c when using mp4box, which causes a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/cf6771c857eb9a290e2c19ddacfdd3ed98b27618; https://github.com/gpac/gpac/issues/1898; https://www.debian.org/security/2023/dsa-5411
CVE: CVE-2021-40565
Published: 2022-01-12
Description: A Segmentation fault caused by a null pointer dereference vulnerability exists in Gpac through 1.0.1 via the gf_avc_parse_nalu function in av_parsers.c when using mp4box, which causes a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://github.com/gpac/gpac/commit/893fb99b606eebfae46cde151846a980e689039b; https://github.com/gpac/gpac/issues/1902; https://www.debian.org/security/2023/dsa-5411
CVE: CVE-2021-40566
Published: 2022-01-12
Description: A Segmentation fault casued by heap use after free vulnerability exists in Gpac through 1.0.1 via the mpgviddmx_process function in reframe_mpgvid.c when using mp4box, which causes a denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-416
References: https://github.com/gpac/gpac/commit/96047e0e6166407c40cc19f4e94fb35cd7624391; https://github.com/gpac/gpac/issues/1887; https://www.debian.org/security/2023/dsa-5411
CVE: CVE-2021-43860
Published: 2022-01-12
Description: Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properly validate that the permissions displayed to the user for an app at install time match the actual permissions granted to the app at runtime, in the case that there's a null byte in the metadata file of an app. Therefore apps can grant themselves permissions without the consent of the user. Flatpak shows permissions to the user during install by reading them from the "xa.metadata" key in the commit metadata. This cannot contain a null terminator, because it is an untrusted GVariant. Flatpak compares these permissions to the *actual* metadata, from the "metadata" file to ensure it wasn't lied to. However, the actual metadata contents are loaded in several places where they are read as simple C-style strings. That means that, if the metadata file includes a null terminator, only the content of the file from *before* the terminator gets compared to xa.metadata. Thus, any permissions that appear in the metadata file after a null terminator are applied at runtime but not shown to the user. So maliciously crafted apps can give themselves hidden permissions. Users who have Flatpaks installed from untrusted sources are at risk in case the Flatpak has a maliciously crafted metadata file, either initially or in an update. This issue is patched in versions 1.12.3 and 1.10.6. As a workaround, users can manually check the permissions of installed apps by checking the metadata file or the xa.metadata key on the commit metadata.
CVSS Score: 8.2 (HIGH)
CWE: CWE-269, CWE-276
References: https://github.com/flatpak/flatpak/commit/54ec1a482dfc668127eaae57f135e6a8e0bc52da; https://github.com/flatpak/flatpak/commit/65cbfac982cb1c83993a9e19aa424daee8e9f042; https://github.com/flatpak/flatpak/commit/93357d[PII_REDACTED]04df05acc32ff335839c6451
CVE: CVE-2022-0196
Published: 2022-01-13
Description: phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/phoronix-test-suite/phoronix-test-suite/commit/4f18296a1862fe54a4c58701a1f5ec6bd62a4d94; https://huntr.dev/bounties/3675eec7-bbce-4dfd-a2d3-d6862dce9ea6; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/57V2CSFU5MKWKL6RJUKMXSD4PCRFTMMQ/
CVE: CVE-2022-0197
Published: 2022-01-13
Description: phoronix-test-suite is vulnerable to Cross-Site Request Forgery (CSRF)
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://github.com/phoronix-test-suite/phoronix-test-suite/commit/4f18296a1862fe54a4c58701a1f5ec6bd62a4d94; https://huntr.dev/bounties/5abb7915-32f4-4fb1-afa7-bb6d8c4c5ad2; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/57V2CSFU5MKWKL6RJUKMXSD4PCRFTMMQ/
CVE: CVE-2022-0198
Published: 2022-01-13
Description: corenlp is vulnerable to Improper Restriction of XML External Entity Reference
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: https://github.com/stanfordnlp/corenlp/commit/1f52136321cfca68b991bd7870563d06cf96624d; https://huntr.dev/bounties/3d7e70fe-dddd-4b79-af62-8e058c4d5763; https://github.com/stanfordnlp/corenlp/commit/1f52136321cfca68b991bd7870563d06cf96624d
CVE: CVE-2022-22112
Published: 2022-01-13
Description: In DayByDay CRM, versions 1.1 through 2.2.1 (latest) suffer from an application-wide Client-Side Template Injection (CSTI). A low privileged attacker can input template injection payloads in the application at various locations to execute JavaScript on the client browser.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Bottelet/DaybydayCRM/blob/2.2.1/resources/views/partials/clientheader.blade.php#L17; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-22112; https://github.com/Bottelet/DaybydayCRM/blob/2.2.1/resources/views/partials/clientheader.blade.php#L17
CVE: CVE-2022-22113
Published: 2022-01-13
Description: In DayByDay CRM, versions 2.2.0 through 2.2.1 (latest) are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.
CVSS Score: 8.8 (HIGH)
CWE: CWE-613, CWE-613
References: https://github.com/Bottelet/DaybydayCRM/blob/master/config/session.php#L32; https://www.whitesourcesoftware.com/vulnerability-database/CVE-2022-22113; https://github.com/Bottelet/DaybydayCRM/blob/master/config/session.php#L32
CVE: CVE-2021-30285
Published: 2022-01-13
Description: Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-20
References: https://www.qualcomm.com/company/product-security/bulletins/january-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2022-bulletin
CVE: CVE-2021-30287
Published: 2022-01-13
Description: Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://www.qualcomm.com/company/product-security/bulletins/january-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2022-bulletin
CVE: CVE-2021-30300
Published: 2022-01-13
Description: Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when processing the SRS configuration in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables
CVSS Score: 7.5 (HIGH)
CWE: CWE-704
References: https://www.qualcomm.com/company/product-security/bulletins/january-2022-bulletin; https://www.qualcomm.com/company/product-security/bulletins/january-2022-bulletin