CVE-2024-42159

HIGH Year: 2024
CVSS v3 Score
7.8
High
Weakness Type
CWE-754
View all →

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Sanitise num_phys Information is stored in mr_sas_port->phy_mask, values larger then size of this field shouldn't be allowed.

Related Vulnerabilities

CVE-2018-13013

HIGH
CVSS:7.8(High)

Improper check of unusual conditions when launching msiexec.exe in safensec.com (SysWatch service) in SAFE'N'SEC SoftControl/SafenSoft SysWatch, SoftControl/SafenSoft TPSecure, and SoftControl/SafenSo...

CWE-7542018

CVE-2020-1122

HIGH
CVSS:7.8(High)

<p>An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations. An attacker who successfully exploited this vulnerability could run proce...

CWE-7542020

CVE-2020-24450

HIGH
CVSS:7.8(High)

Improper conditions check in some Intel(R) Graphics Drivers before versions 26.20.100.8141, 15.45.32.5145 and 15.40.46.5144 may allow an authenticated user to potentially enable escalation of privileg...

CWE-7542020

CVE-2020-35931

HIGH
CVSS:7.8(High)

An issue was discovered in Foxit Reader before 10.1.1 (and before 4.1.1 on macOS) and PhantomPDF before 9.7.5 and 10.x before 10.1.1 (and before 4.1.1 on macOS). An attacker can spoof a certified PDF ...

CWE-7542020

CVE-2021-0339

HIGH
CVSS:7.8(High)

In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground. This could lead to local escalation of privilege w...

CWE-7542021

CVE-2021-29607

HIGH
CVSS:7.8(High)

TensorFlow is an end-to-end open source platform for machine learning. Incomplete validation in `SparseAdd` results in allowing attackers to exploit undefined behavior (dereferencing null pointers) as...

CWE-7542021