CVE Vulnerability Catalog

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote escalation of privilege if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation.

In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation.

In ccci, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

In gnss, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.

In Modem, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

In Modem, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation.

A path traversal vulnerability was found in deepset-ai farm up to 0.8.0 in the WordEmbedding_LM.load function of farm/modeling/language_model.py in the Model Package Loader component. Manipulation of the embeddings_filename argument leads to path traversal, and the attack requires local access. The exploit has been publicly disclosed, the vendor did not respond, and the vulnerability only affects products no longer supported by the maintainer.

A path traversal vulnerability was found in deepset-ai farm up to 0.8.0 in the EmbeddingTokenizer.from_pretrained function of farm/modeling/tokenization.py in the Tokenizer Loader component. Manipulation of the vocab_filename argument leads to path traversal, and the attack may be performed remotely. The exploit has been publicly disclosed, the vendor did not respond, and the vulnerability only affects products no longer supported by the maintainer.

A path traversal vulnerability was detected in Webpro-nl Knip up to 6.44.0 in the writeFile function of packages/knip/src/IssueFixer.ts in the Workspace Handler component. Manipulation of the workspaces argument leads to path traversal, and the attack can be executed remotely. The exploit has been publicly disclosed and the vendor did not respond.

A path traversal weakness was identified in Aklivity Zilla up to 1.3.4/2.4.7/2.5.0-rc2 in the Path.resolve function of FileSystemServerFactory in the http-filesystem Binding component. Manipulation of the params argument enables remote exploitation, and a public exploit is already available.

http4k from 4.9.10.0 before 6.60.0.0 contains a missing integrity check vulnerability because DigestEncoder computes the auth-int digest without hashing the request entity body. On-path attackers on non-TLS channels can rewrite the body of authenticated requests while keeping the Authorization header valid, executing state-changing actions as the victim.

http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload. Unauthenticated attackers can read files outside baseTemplateDir by supplying ../ segments in ViewModel.template() values, as Thymeleaf's FileTemplateResolver resolves escaped paths without containment checks.