Search Results (72449 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-63465 1 Totolink 2 Lr350, Lr350 Firmware 2025-11-05 7.5 High
Totolink LR350 v9.3.5u.6369_B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub_422880 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63459 1 Totolink 2 A7000r, A7000r Firmware 2025-11-05 7.5 High
Totolink A7000R v9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub_421CF0 function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63454 1 Tenda 2 Ax3, Ax3 Firmware 2025-11-05 7.5 High
Tenda AX-3 v16.03.12.10_CN was discovered to contain a stack overflow via the deviceId parameter in the get_parentControl_list_Info function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-63458 1 Tenda 2 Ax1803, Ax1803 Firmware 2025-11-05 7.5 High
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the form_fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
CVE-2025-27070 1 Qualcomm 351 Ar8035, Ar8035 Firmware, Fastconnect 6200 and 348 more 2025-11-05 7.8 High
Memory corruption while performing encryption and decryption commands.
CVE-2025-27074 1 Qualcomm 191 Apq8064au, Apq8064au Firmware, Csr8811 and 188 more 2025-11-05 8.8 High
Memory corruption while processing a GP command response.
CVE-2025-47352 1 Qualcomm 29 Fastconnect 7800, Fastconnect 7800 Firmware, Qcc2072 and 26 more 2025-11-05 7.8 High
Memory corruption while processing audio streaming operations.
CVE-2025-47353 1 Qualcomm 37 Qam8255p, Qam8255p Firmware, Qam8650p and 34 more 2025-11-05 7.8 High
Memory corruption while processing request sent from GVM.
CVE-2025-47357 1 Qualcomm 49 Qam8255p, Qam8255p Firmware, Qam8620p and 46 more 2025-11-05 8 High
Information Disclosure when a user-level driver performs QFPROM read or write operations on Fuse regions.
CVE-2025-47360 2 Qnx, Qualcomm 72 Qnx, Qam8255p, Qam8255p Firmware and 69 more 2025-11-05 7.8 High
Memory corruption while processing client message during device management.
CVE-2025-47361 2 Qnx, Qualcomm 58 Qnx, Qam8255p, Qam8255p Firmware and 55 more 2025-11-05 7.8 High
Memory corruption when triggering a subsystem crash with an out-of-range identifier.
CVE-2025-47365 1 Qualcomm 71 Qam8255p, Qam8255p Firmware, Qam8295p and 68 more 2025-11-05 7.8 High
Memory corruption while processing large input data from a remote source via a communication interface.
CVE-2025-47367 1 Qualcomm 63 Fastconnect 6700, Fastconnect 6700 Firmware, Fastconnect 6900 and 60 more 2025-11-05 7.8 High
Memory corruption while accessing a buffer during IOCTL processing.
CVE-2025-47368 1 Qualcomm 17 Fastconnect 6900, Fastconnect 6900 Firmware, Fastconnect 7800 and 14 more 2025-11-05 7.8 High
Memory corruption when dereferencing an invalid userspace address in a user buffer during MCDM IOCTL processing.
CVE-2025-20725 2 Mediatek, Mediatk 141 Lr12a, Mt2735, Mt2737 and 138 more 2025-11-05 7.5 High
In ims service, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01671924; Issue ID: MSV-4620.
CVE-2025-20726 1 Mediatek 90 Lr12a, Modem, Mt2735 and 87 more 2025-11-05 7.5 High
In Modem, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01672598; Issue ID: MSV-4622.
CVE-2025-20728 1 Mediatek 7 Mt7902, Mt7920, Mt7921 and 4 more 2025-11-05 7.8 High
In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issue ID: MSV-4276.
CVE-2025-20733 2 Mediatek, Openwrt 10 Mt6890, Mt7615, Mt7622 and 7 more 2025-11-05 7.8 High
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00441509; Issue ID: MSV-4138.
CVE-2025-20735 2 Mediatek, Openwrt 10 Mt6890, Mt7615, Mt7622 and 7 more 2025-11-05 7.8 High
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435349; Issue ID: MSV-4051.
CVE-2025-20737 2 Mediatek, Openwrt 10 Mt6890, Mt7615, Mt7622 and 7 more 2025-11-05 7.8 High
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435343; Issue ID: MSV-4040.