deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-20645
Published: 2025-03-03
Description: In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09475476; Issue ID: MSV-2599.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/March-2025
CVE: CVE-2025-20646
Published: 2025-03-03
Description: In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/March-2025
CVE: CVE-2025-20647
Published: 2025-03-03
Description: In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00791311 /  MOLY01067019; Issue ID: MSV-2721.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://corp.mediatek.com/product-security-bulletin/March-2025
CVE: CVE-2025-20648
Published: 2025-03-03
Description: In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09456673; Issue ID: MSV-2584.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://corp.mediatek.com/product-security-bulletin/March-2025
CVE: CVE-2025-20649
Published: 2025-03-03
Description: In Bluetooth Stack SW, there is a possible information disclosure due to a missing permission check. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00396437; Issue ID: MSV-2184.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-280
References: https://corp.mediatek.com/product-security-bulletin/March-2025
CVE: CVE-2025-20650
Published: 2025-03-03
Description: In da, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291294; Issue ID: MSV-2061.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://corp.mediatek.com/product-security-bulletin/March-2025
CVE: CVE-2025-20651
Published: 2025-03-03
Description: In da, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291294; Issue ID: MSV-2062.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://corp.mediatek.com/product-security-bulletin/March-2025
CVE: CVE-2025-20652
Published: 2025-03-03
Description: In V5 DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291215; Issue ID: MSV-2052.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://corp.mediatek.com/product-security-bulletin/March-2025
CVE: CVE-2025-20653
Published: 2025-03-03
Description: In da, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291064; Issue ID: MSV-2046.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190, CWE-190
References: https://corp.mediatek.com/product-security-bulletin/March-2025
CVE: CVE-2025-1848
Published: 2025-03-03
Description: A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is an unknown function of the file /import_data_check. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/caigo8/CVE-md/blob/main/zz/zz_import_data_check_SSRF.md; https://vuldb.com/?ctiid.298116; https://vuldb.com/?id.298116
CVE: CVE-2025-1849
Published: 2025-03-03
Description: A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is an unknown functionality of the file /import_data_todb. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://github.com/caigo8/CVE-md/blob/main/zz/zz_import_data_todb_SSRF.md; https://vuldb.com/?ctiid.298117; https://vuldb.com/?id.298117
CVE: CVE-2025-27590
Published: 2025-03-03
Description: In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-22
References: https://github.com/ytti/oxidized-web/commit/a5220a0ddc57b85cd122bffee228d3ed4901668e; https://github.com/ytti/oxidized-web/releases/tag/0.15.0
CVE: CVE-2025-1850
Published: 2025-03-03
Description: A vulnerability, which was classified as critical, has been found in Codezips College Management System 1.0. Affected by this issue is some unknown functionality of the file /university.php. The manipulation of the argument book_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/WHOAMI-xiaoyu/CVE/blob/main/CVE_2.md; https://vuldb.com/?ctiid.298118; https://vuldb.com/?id.298118
CVE: CVE-2025-1851
Published: 2025-03-03
Description: A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/Raining-101/IOT_cve/blob/main/ac7_V15.03.06.44_SetFirewallCfg.md; https://vuldb.com/?ctiid.298119; https://vuldb.com/?id.298119
CVE: CVE-2025-1852
Published: 2025-03-03
Description: A vulnerability has been found in Totolink EX1800T 9.1.0cu.2112_B20220316 and classified as critical. This vulnerability affects the function loginAuth of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument password leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120, CWE-120
References: https://github.com/watermelon-happy/cve/blob/main/ex1800tCVE.md; https://vuldb.com/?ctiid.298120; https://vuldb.com/?id.298120
CVE: CVE-2025-1853
Published: 2025-03-03
Description: A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub_49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121, CWE-787
References: https://github.com/Raining-101/IOT_cve/blob/main/tenda-ac8_sub_49E098.md; https://vuldb.com/?ctiid.298121; https://vuldb.com/?id.298121
CVE: CVE-2024-53382
Published: 2025-03-03
Description: Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-94, CWE-79
References: https://gist.github.com/jackfromeast/aeb128e44f05f95828a1a824708df660; https://github.com/PrismJS/prism/blob/59e5a[PII_REDACTED]de1f401ba38337aca27b80e03/prism.js#L226-L259; https://gist.github.com/jackfromeast/aeb128e44f05f95828a1a824708df660
CVE: CVE-2024-53386
Published: 2025-03-03
Description: Stage.js through 0.8.10 allows DOM Clobbering (with resultant XSS for untrusted input that contains HTML but does not directly contain JavaScript), because document.currentScript lookup can be shadowed by attacker-injected HTML elements.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-94, CWE-79
References: https://gist.github.com/jackfromeast/31d56f1ad17673aabb6ab541e65a5534; https://github.com/piqnt/stage.js/blob/919f6e94b14242f6e6994141a9e1188439d306d5/lib/core.js#L158-L159; https://gist.github.com/jackfromeast/31d56f1ad17673aabb6ab541e65a5534
CVE: CVE-2025-1854
Published: 2025-03-03
Description: A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/del_member.php. The manipulation of the argument name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/yhj09/CVE/blob/main/CVE_1.md; https://vuldb.com/?ctiid.298122; https://vuldb.com/?id.298122
CVE: CVE-2025-1855
Published: 2025-03-03
Description: A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /product-details.php. The manipulation of the argument quality/price/value/name/summary/review leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/panghuanjie/Code-audits/blob/main/PHPGurukul/PHPGurukul%20Online%20Shopping%20Portal%20v2.1%20SQL%20Injection3%20.pdf; https://phpgurukul.com/; https://vuldb.com/?ctiid.298123
CVE: CVE-2025-1723
Published: 2025-03-03
Description: Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the session mishandling. Valid account holders in the setup only have the potential to exploit this bug.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287
References: https://www.manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html
CVE: CVE-2025-1856
Published: 2025-03-03
Description: A vulnerability was found in Codezips Gym Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /dashboard/admin/gen_invoice.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/smartttt1/CVE/blob/main/CVE_1.md; https://vuldb.com/?ctiid.298124; https://vuldb.com/?id.298124
CVE: CVE-2025-1857
Published: 2025-03-03
Description: A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This affects an unknown part of the file /check_availability.php. The manipulation of the argument employeeid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/panghuanjie/Code-audits/issues/1; https://phpgurukul.com/; https://vuldb.com/?ctiid.298125
CVE: CVE-2025-1858
Published: 2025-03-03
Description: A vulnerability classified as critical was found in Codezips Online Shopping Website 1.0. This vulnerability affects unknown code of the file /success.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/Centurion-cyber/CVE/blob/main/CVE_1.md; https://vuldb.com/?ctiid.298126; https://vuldb.com/?id.298126
CVE: CVE-2025-1859
Published: 2025-03-03
Description: A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1. This issue affects some unknown processing of the file /login.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/panghuanjie/Code-audits/issues/2; https://phpgurukul.com/; https://vuldb.com/?ctiid.298127
CVE: CVE-2025-1864
Published: 2025-03-03
Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-120
References: https://github.com/radareorg/radare2/pull/23981
CVE: CVE-2025-1866
Published: 2025-03-03
Description: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in warmcat libwebsockets allows Pointer Manipulation, potentially leading to out-of-bounds memory access. This issue affects libwebsockets before 4.3.4 and is present in code built specifically for the Win32 platform.

By default, the affected code is not executed unless one of the following conditions is met:

LWS_WITHOUT_EXTENSIONS (default ON) is manually set to OFF in CMake.
LWS_WITH_HTTP_STREAM_COMPRESSION (default OFF) is manually set to ON in CMake.
Despite these conditions, when triggered in affected configurations, this vulnerability may allow attackers to manipulate pointers, potentially leading to memory corruption or unexpected behavior.
CWE: CWE-119
References: https://github.com/warmcat/libwebsockets/commit/3f7c79fd57338aca1bf4a1b1f24e324b80d36265
CVE: CVE-2025-1867
Published: 2025-03-03
Description: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in ithewei libhv allows HTTP Response Smuggling.This issue affects libhv: through 1.3.3.
CWE: CWE-444
References: https://github.com/ithewei/libhv/pull/689
CVE: CVE-2025-24654
Published: 2025-03-03
Description: Missing Authorization vulnerability in SEO Squirrly SEO Plugin by Squirrly SEO squirrly-seo.This issue affects SEO Plugin by Squirrly SEO: from n/a through <= 12.4.07.
CVSS Score: 7.1 (HIGH)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/squirrly-seo/vulnerability/wordpress-squirrly-seo-plugin-12-4-05-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-24846
Published: 2025-03-03
Description: Authentication bypass vulnerability exists in FutureNet AS series (Industrial Routers) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may obtain the device information such as MAC address by sending a specially crafted request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-288
References: https://jvn.jp/en/vu/JVNVU96398949/; https://www.centurysys.co.jp/backnumber/common/jvnvu96398949.html
CVE: CVE-2025-25280
Published: 2025-03-03
Description: Buffer overflow vulnerability exists in FutureNet AS series (Industrial Routers) and FA series (Protocol Conversion Machine) provided by Century Systems Co., Ltd. If this vulnerability is exploited, a remote unauthenticated attacker may reboot the device by sending a specially crafted request.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120
References: https://jvn.jp/en/vu/JVNVU96398949/; https://www.centurysys.co.jp/backnumber/common/jvnvu96398949.html
CVE: CVE-2024-8186
Published: 2025-03-03
Description: An issue has been discovered in GitLab CE/EE affecting all versions from 16.6 before 17.7.6, 17.8 before 17.8.4, and 17.9 before 17.9.1. An attacker could inject HMTL into the child item search potentially leading to XSS in certain situations.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://gitlab.com/gitlab-org/gitlab/-/issues/480751; https://hackerone.com/reports/2655757
CVE: CVE-2024-10925
Published: 2025-03-03
Description: A vulnerability in GitLab-EE affecting all versions from 16.2 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1 allows a Guest user to read Security policy YAML
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://gitlab.com/gitlab-org/gitlab/-/issues/502857; https://hackerone.com/reports/2818270
CVE: CVE-2024-24778
Published: 2025-03-03
Description: Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know. 





This issue affects Apache StreamPipes: through 0.95.1.

Users are recommended to upgrade to version 0.97.0 which fixes the issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://lists.apache.org/thread/j14w6wghlwwrgfgc6hoz9f94fwxtlgzh; http://www.openwall.com/lists/oss-security/2025/03/03/1
CVE: CVE-2024-38426
Published: 2025-03-03
Description: While processing the authentication message in UE, improper authentication may lead to information disclosure.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-287
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-43051
Published: 2025-03-03
Description: Information disclosure while deriving keys for a session for any Widevine use case.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-285
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-43055
Published: 2025-03-03
Description: Memory corruption while processing camera use case IOCTL call.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-43056
Published: 2025-03-03
Description: Transient DOS during hypervisor virtual I/O operation in a virtual machine.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-126, CWE-125
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-43057
Published: 2025-03-03
Description: Memory corruption while processing command in Glink linux.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-43059
Published: 2025-03-03
Description: Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-43060
Published: 2025-03-03
Description: Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.
CVSS Score: 7.8 (HIGH)
CWE: CWE-823, CWE-119
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-43061
Published: 2025-03-03
Description: Memory corruption during voice activation, when sound model parameters are loaded from HLOS, and the received sound model list is empty in HLOS drive.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-43062
Published: 2025-03-03
Description: Memory corruption caused by missing locks and checks on the DMA fence and improper synchronization.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-45580
Published: 2025-03-03
Description: Memory corruption while handling multuple IOCTL calls from userspace for remote invocation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-49836
Published: 2025-03-03
Description: Memory corruption may occur during the synchronization of the camera`s frame processing pipeline.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-53011
Published: 2025-03-03
Description: Information disclosure may occur due to improper permission and access controls to Video Analytics engine.
CVSS Score: 7.9 (HIGH)
CWE: CWE-264, CWE-200
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-53012
Published: 2025-03-03
Description: Memory corruption may occur due to improper input validation in clock device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-53014
Published: 2025-03-03
Description: Memory corruption may occur while validating  ports and channels in Audio driver.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-53022
Published: 2025-03-03
Description: Memory corruption may occur during communication between primary and guest VM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-53023
Published: 2025-03-03
Description: Memory corruption may occur while accessing a variable during extended back to back tests.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-53024
Published: 2025-03-03
Description: Memory corruption in display driver while detaching a device.
CVSS Score: 7.8 (HIGH)
CWE: CWE-476
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-53025
Published: 2025-03-03
Description: Transient DOS can occur while processing UCI command.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-190
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-53027
Published: 2025-03-03
Description: Transient DOS may occur while processing the country IE.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-53028
Published: 2025-03-03
Description: Memory corruption may occur while processing message from frontend during allocation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-53029
Published: 2025-03-03
Description: Memory corruption while reading a value from a buffer controlled by the Guest Virtual Machine.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-53030
Published: 2025-03-03
Description: Memory corruption while processing input message passed from FE driver.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html
CVE: CVE-2024-53031
Published: 2025-03-03
Description: Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-787
References: https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html