How severe is CVE-2024-49928?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.1 out of 10.

What type of vulnerability is CVE-2024-49928?

This is classified as CWE-125, which is a common weakness in software security.

CVE-2024-49928 - HIGH Severity | CVSS 7.1

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: avoid reading out of bounds when loading TX power FW elements Because the loop-expression will do one more time before getting false from cond-expression, the original code copied one more entry size beyond valid region. Fix it by moving the entry copy to loop-body.

Related Vulnerabilities

CVE-2015-8743

HIGH

CVSS:7.1(High)

QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing 'ioport' r/w operations. A privileged (CAP_SYS_RAWIO)...

CWE-1252015

CVE-2016-10165

HIGH

CVSS:7.1(High)

The Type_MLU_Read function in cmstypes.c in Little CMS (aka lcms2) allows remote attackers to obtain sensitive information or cause a denial of service via an image with a crafted ICC profile, which t...

CWE-1252016

CVE-2016-4682

HIGH

CVSS:7.1(High)

An issue was discovered in certain Apple products. macOS before 10.12 is affected. macOS before 10.12.1 is affected. The issue involves the "ImageIO" component. It allows remote attackers to obtain se...

CWE-1252016

CVE-2016-4773

HIGH

CVSS:7.1(High)

The kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows attackers to obtain sensitive memory-layout information or cause a denial of service (out-of-bounds re...

CWE-1252016

CVE-2016-4774

HIGH

CVSS:7.1(High)

CWE-1252016

CVE-2016-4776

HIGH

CVSS:7.1(High)

CWE-1252016