CWE-1284.

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability.

• AMD Ryzen™ 3000 Series Desktop Processors
• AMD Ryzen™ 5000 Series Desktop Processors
• CWE-1284

A logic issue was addressed with improved restrictions.

• Apple macOS
• CWE-1284

In Modem, there is a possible system crash due to improper input validation.

• MediaTek, Inc. MT2735, MT2737, MT6767, MT6768, MT6769, MT6769K, MT6769S, MT6769T, MT6769Z, MT6779, MT6781, MT6783, MT6785, MT6785T, MT6785U, MT6789, MT6833P, MT6835, MT6835T, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6878, MT6878M, MT6879, MT6880, MT6880T, MT6880U, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT6895, MT6895TT, MT6896, MT6897, MT6899, MT6980, MT6980D, MT6983T, MT6985, MT6985T, MT6989, MT6989T, MT6990, MT6991, MT8666, MT8673, MT8675, MT8676, MT8678, MT8765, MT8766, MT8768, MT8771, MT8781, MT8786, MT8788, MT8788E, MT8789, MT8791T, MT8795T, MT8797, MT8798, MT8863
• CWE-1284

An issue in the DeviceloControl function of ITE Tech.

• CWE-1284

netdevsim: prevent bad user input in nsim_dev_health_break_write()

• Linux kernel
• CWE-1284

OPPO Store app include remote account token hijacking and sensitive information leakage

• OPPO Store APP
• Authentication bypass
• CWE-1284

IBM InfoSphere Information Server denial of service

• IBM InfoSphere Information Server
• CWE-1284

Business Logic Error in RestApp Inc.'s Online Ordering System

• RestApp Inc. Online Ordering System
• Memory corruption
• CWE-1284

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, Modem 5123, and Modem 5300.

• CWE-1284

Google Chrome: Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a…

• Google Chrome
• CWE-1284

Florent Thiéry has found that selected Axis devices were vulnerable to handling certain ethernet frames which could lead to the Axis device becoming unavailable in the network.

• Axis Communications AB AXIS Q6128-E PTZ Network Camera
• Axis Communications AB AXIS P1428-E Network Camera
• CWE-1284

Input Validation Vulnerability exists in Arena® Input Analyzer

• Rockwell Automation Arena Input Analyzer
• CWE-1284

An issue in the Bluetooth Low Energy implementation of Realtek RTL8762E BLE SDK v1.4.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted ll_terminate_ind packet.

• CWE-1284

Denial of Service (DoS) Vulnerability in Mitsubishi Electric CNC Series

• Mitsubishi Electric Corporation Mitsubishi Electric CNC M800V Series M800VW
• Mitsubishi Electric Corporation Mitsubishi Electric CNC M800V Series M800VS
• CWE-1284

Authentication bypass vulnerability on CIRCUTOR Q-SMT

• CIRCUTOR Q-SMT
• CWE-1284

BT: Unchecked user input in bap_broadcast_assistant

• Zephyr
• Memory corruption
• CWE-1284

SourceCodester Food Ordering Management System Price place-order.php improper validation of specified quantity in input

• SourceCodester Food Ordering Management System
• CWE-1284

NVIDIA CUDA Toolkit: NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may…

• NVIDIA CUDA Toolkit
• CWE-1284

Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed input for the "set temperature input selection" command, potentially resulting…

• AMD Radeon™ RX 6000 Series Graphics Cards
• AMD Radeon™ PRO W6000 Series Graphics Cards
• CWE-1284

Improper input validation in SMU may allow an attacker with privileges and a compromised physical function (PF) to modify the PCIe® lane count and speed, potentially leading to a loss of availability.

• AMD Radeon™ RX 6000 Series Graphics Cards
• AMD Radeon™ PRO W6000 Series Graphics Cards
• CWE-1284

Denial of Service in CLFS.sys

• Microsoft Windows 10
• Microsoft Windows 11
• CWE-1284

A vulnerability was discovered in Samsung Mobile Processors Exynos 2200 and Exynos 2400 where they lack a check for the validation of native handles, which can result in a DoS(Denial of Service) atta…

• CWE-1284

A vulnerability was discovered in Samsung Mobile Processors Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, and Exynos W930 where they do not properly check…

• CWE-1284

phonenumber: panic on parsing crafted phonenumber inputs

• Broken access control
• Denial of service

>=0.3.3, <0.3.6 · fixed in 0.3.6

Communication DoS vulnerability

• ABB 800xA Base
• CWE-1284

Elevation of Privelage via symlinked file in Avast Antivirus

• Avast Antivirus
• CWE-1284

WordPress WordPress BookIt Plugin plugin <= 2.4.0 - Price Bypass Vulnerability vulnerability

• The Events Calendar BookIt
• CWE-1284

WordPress WP Express Checkout plugin <= 2.3.7 - Price Manipulation vulnerability

• Tips and Tricks HQ WP Express Checkout (Accept PayPal Payments)
• CWE-1284

SailPoint Identity Security Cloud Improper Access Control

• SailPoint Identity Security Cloud
• CWE-1284

Rapid7 Insight Agent Sensitive Key Exposed To Local Users

• Rapid7 Insight Agent
• CWE-1284

A vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 that could allow a privileged attacker with loca…

• Lenovo Windows 7 and 8 PC Preloads
• CWE-1284

In SecurityCommand message after as security has been actived., there is a possible improper input validation.

• Unisoc (Shanghai) Technologies Co., Ltd. T760/T770/T820/S8000
• CWE-1284

Apache HTTP Server: HTTP response splitting

• Apache Software Foundation Apache HTTP Server
• CWE-1284

Zoom Clients - Improper Input Validation

• Zoom Video Communications, Inc. Zoom Clients
• CWE-1284

A vulnerability exists in the input validation of the GOOSE messages where out of range values received and processed by the IED caused a reboot of the device.

• Hitachi Energy Relion670
• CWE-1284

DoS via long hostnames

• Checkmk
• CWE-1284

Junos OS and Junos OS Evolved: An l2cpd crash will occur when specific LLDP packets are received

• Juniper Networks Junos OS
• Juniper Networks Junos OS Evolved
• CWE-1284

phonenumber: panic on parsing crafted RF3966 phonenumber inputs

• CWE-248
• CWE-392

>=0.0.0-0, <0.2.5 || >=0.3.0, <0.3.3 · fixed in 0.2.5, 0.3.3

blurhash: panic on parsing crafted blurhash inputs

• CWE-248
• CWE-392

>=0.0.0-0, <0.2.0 · fixed in 0.2.0

SourceCodester Card Holder Management System Minus Value unknown vulnerability

• SourceCodester Card Holder Management System
• CWE-1284

OMRON Corporation CJ2M CPU Unit: Denial-of-service (DoS) vulnerability due to improper validation of specified type of…

• OMRON Corporation CJ2M CPU Unit
• OMRON Corporation CJ2H CPU Unit
• CWE-1284

Vulnerability of unstrict data verification and parameter check.

• Huawei HarmonyOS
• Huawei EMUI
• CWE-1284

jcvi vulnerable to Configuration Injection due to unsanitized user input

• Command injection
• CWE-1284

<=1.3.5 · no fixed version yet

The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers.

• CWE-1284

A denial of service attack might be launched against the server if an unusually lengthy password (more than 10000000 characters) is supplied using the osTicket application.

• CWE-1284

PocketMine-MP vulnerable to improperly checked dropped item count leading to server crash

• CWE-1284

<4.18.1 · fixed in 4.18.1

Mozilla Firefox: Due to URL previews in the network panel of developer tools improperly storing URLs…

• Mozilla Firefox
• CWE-1284

An issue was found in Action Launcher v50.5 allows an attacker to escalate privilege via modification of the intent string to function update.

• CWE-1284

Android: In several functions of PhoneAccountRegistrar.java…

• Android
• CWE-1284

In m4u, there is a possible out of bounds write due to improper input validation.

• MediaTek, Inc. MT6765, MT6768, MT8768
• CWE-1284

In keyinstall, there is a possible out of bounds read due to a missing bounds check.

• MediaTek, Inc. MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8185, MT8321, MT8385, MT8666, MT8667, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797
• CWE-1284

In keyinstall, there is a possible out of bounds read due to a missing bounds check.

• MediaTek, Inc. MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8185, MT8321, MT8385, MT8666, MT8667, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797
• CWE-1284

In keyinstall, there is a possible out of bounds read due to a missing bounds check.

• MediaTek, Inc. MT6580, MT6731, MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT6983, MT8185, MT8321, MT8385, MT8666, MT8667, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791, MT8791T, MT8797
• CWE-1284

In ril, there is a possible out of bounds write due to a missing bounds check.

• MediaTek, Inc. MT6735, MT6737, MT6739, MT6753, MT6757, MT6757C, MT6757CD, MT6757CH, MT6761, MT6762, MT6763, MT6765, MT6768, MT6769, MT6771, MT6779, MT6781, MT6785, MT6789, MT6833, MT6853, MT6853T, MT6855, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT6895, MT8321, MT8765, MT8766, MT8768, MT8781, MT8786, MT8788, MT8789, MT8791T, MT8797
• CWE-1284

In apu, there is a possible out of bounds read due to a missing bounds check.

• MediaTek, Inc. MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT8183, MT8195
• CWE-1284

In apu, there is a possible out of bounds read due to a missing bounds check.

• MediaTek, Inc. MT6853, MT6853T, MT6873, MT6875, MT6877, MT6879, MT6883, MT6885, MT6889, MT6891, MT6893, MT8183, MT8195
• CWE-1284

Multiple validation issues were addressed with improved input sanitization.

• Apple macOS
• Apple iOS and iPadOS
• CWE-1284

A validation issue was addressed with improved input sanitization.

• Apple macOS
• Apple iOS and iPadOS
• CWE-1284

CLTPHP <=6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php.

• CWE-1284

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, which may lead to hypothetical Information leak of unimportan…

• vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows)
• CWE-1284