Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority LOW 34

Insufficient verification of missing size check in 'LoadModule' may lead to an out-of-bounds write potentially allowing an attacker with privileges to gain code execution of the OS/kernel by loading a malicious TA.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00295 Published 2022-11-09 Fixed in 22.5.2, 22.Q2 +1 CWE-787
Priority LOW 25

Insufficient memory cleanup in the AMD Secure Processor (ASP) Trusted Execution Environment (TEE) may allow an authenticated attacker with privileges to generate a valid signed TA and potentially poison the contents of t…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0028 Published 2022-11-09 Fixed in 22.5.2, 22.Q2 +1 CWE-401
Priority LOW 35

Insufficient verification of multiple header signatures while loading a Trusted Application (TA) may allow an attacker with privileges to gain code execution in that TA or the OS/kernel.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0019 Published 2022-11-09 Fixed in 22.5.2, 22.Q2 +1 CWE-347