# Vulnerabilities published in 2024


- [CVE-2024-58106](https://insights.sbomify.com/CVE-2024-58106/): Memory corruption in HarmonyOS (medium 4.6)
- [CVE-2024-58105](https://insights.sbomify.com/CVE-2024-58105/): Security feature bypass in Trend Micro Apex One (high 7.3)
- [CVE-2024-58104](https://insights.sbomify.com/CVE-2024-58104/): Privilege escalation in Trend Micro Apex One (high 7.3)
- [CVE-2024-58103](https://insights.sbomify.com/CVE-2024-58103/): Wire has Uncontrolled Recursion on Nested Groups (medium 5.8)
- [CVE-2024-58102](https://insights.sbomify.com/CVE-2024-58102/): Denial of service in Seq (medium 5.7)
- [CVE-2024-58101](https://insights.sbomify.com/CVE-2024-58101/): Samsung Galaxy Buds and Galaxy Buds 2 audio devices are Bluetooth pairable by default without user input nor a way to stop this mode. (high 8.1)
- [CVE-2024-58100](https://insights.sbomify.com/CVE-2024-58100/): bpf: check changes_pkt_data property for extension programs (high 7.8)
- [CVE-2024-5810](https://insights.sbomify.com/CVE-2024-5810/): Hardcoded credentials in WP2Speed Faster – Optimize PageSpeed Insights Score 90-100 (medium 5.3)
- [CVE-2024-58099](https://insights.sbomify.com/CVE-2024-58099/): vmxnet3: Fix packet corruption in vmxnet3_xdp_xmit_frame (high 8.6)
- [CVE-2024-58098](https://insights.sbomify.com/CVE-2024-58098/): bpf: track changes_pkt_data property for global functions (high 7.8)
- [CVE-2024-58097](https://insights.sbomify.com/CVE-2024-58097/): wifi: ath11k: fix RCU stall while reaping monitor destination ring (medium 5.5)
- [CVE-2024-58096](https://insights.sbomify.com/CVE-2024-58096/): wifi: ath11k: add srng->lock for ath11k_hal_srng_* in monitor mode (high 8.8)
- [CVE-2024-58095](https://insights.sbomify.com/CVE-2024-58095/): jfs: add check read-only before txBeginAnon() call (medium 5.5)
- [CVE-2024-58094](https://insights.sbomify.com/CVE-2024-58094/): jfs: add check read-only before truncation in jfs_truncate_nolock() (high 7.8)
- [CVE-2024-58093](https://insights.sbomify.com/CVE-2024-58093/): PCI/ASPM: Fix link state exit during switch upstream function removal (high 7.8)
- [CVE-2024-58092](https://insights.sbomify.com/CVE-2024-58092/): nfsd: fix legacy client tracking initialization (medium 5.5)
- [CVE-2024-58091](https://insights.sbomify.com/CVE-2024-58091/): drm/fbdev-dma: Add shadow buffering for deferred I/O (high 7.8)
- [CVE-2024-58090](https://insights.sbomify.com/CVE-2024-58090/): sched/core: Prevent rescheduling when interrupts are disabled (medium 5.5)
- [CVE-2024-5809](https://insights.sbomify.com/CVE-2024-5809/): WP Ajax Contact Form <= 2.2.2 - Reflected Cross-Site Scripting (medium 6.1)
- [CVE-2024-58089](https://insights.sbomify.com/CVE-2024-58089/): btrfs: fix double accounting race when btrfs_run_delalloc_range() failed (high 7.8)
- [CVE-2024-58088](https://insights.sbomify.com/CVE-2024-58088/): bpf: Fix deadlock when freeing cgroup storage (medium 5.5)
- [CVE-2024-58087](https://insights.sbomify.com/CVE-2024-58087/): ksmbd: fix racy issue from session lookup and expire (critical 9.8)
- [CVE-2024-58086](https://insights.sbomify.com/CVE-2024-58086/): drm/v3d: Stop active perfmon if it is being destroyed (high 7.8)
- [CVE-2024-58085](https://insights.sbomify.com/CVE-2024-58085/): tomoyo: don't emit warning in tomoyo_write_control() (medium 5.5)
- [CVE-2024-58084](https://insights.sbomify.com/CVE-2024-58084/): firmware: qcom: scm: Fix missing read barrier in qcom_scm_get_tzmem_pool() (medium 5.5)
- [CVE-2024-58083](https://insights.sbomify.com/CVE-2024-58083/): KVM: Explicitly verify target vCPU is online in kvm_get_vcpu() (high 7.8)
- [CVE-2024-58082](https://insights.sbomify.com/CVE-2024-58082/): media: nuvoton: Fix an error check in npcm_video_ece_init() (medium 5.5)
- [CVE-2024-58081](https://insights.sbomify.com/CVE-2024-58081/): clk: mmp2: call pm_genpd_init() only after genpd.name is set (medium 5.5)
- [CVE-2024-58080](https://insights.sbomify.com/CVE-2024-58080/): clk: qcom: dispcc-sm6350: Add missing parent_map for a clock (medium 5.5)
- [CVE-2024-5808](https://insights.sbomify.com/CVE-2024-5808/): WP Ajax Contact Form <= 2.2.2 - Arbitrary Email Deletion via CSRF (medium 4.3)
- [CVE-2024-58079](https://insights.sbomify.com/CVE-2024-58079/): media: uvcvideo: Fix crash during unbind if gpio unit is in use (high 7.8)
- [CVE-2024-58078](https://insights.sbomify.com/CVE-2024-58078/): misc: misc_minor_alloc to use ida for all dynamic/misc dynamic minors (medium 5.5)
- [CVE-2024-58077](https://insights.sbomify.com/CVE-2024-58077/): ASoC: soc-pcm: don't use soc_pcm_ret() on .prepare callback (medium 5.5)
- [CVE-2024-58076](https://insights.sbomify.com/CVE-2024-58076/): clk: qcom: gcc-sm6350: Add missing parent_map for two clocks (medium 5.5)
- [CVE-2024-58075](https://insights.sbomify.com/CVE-2024-58075/): crypto: tegra - do not transfer req when tegra init fails (high 7.8)
- [CVE-2024-58074](https://insights.sbomify.com/CVE-2024-58074/): drm/i915: Grab intel_display from the encoder to avoid potential oopsies (medium 5.5)
- [CVE-2024-58073](https://insights.sbomify.com/CVE-2024-58073/): drm/msm/dpu: check dpu_plane_atomic_print_state() for valid sspp (medium 5.5)
- [CVE-2024-58072](https://insights.sbomify.com/CVE-2024-58072/): wifi: rtlwifi: remove unused check_buddy_priv (high 7.8)
- [CVE-2024-58071](https://insights.sbomify.com/CVE-2024-58071/): team: prevent adding a device which is already a team device lower (medium 5.5)
- [CVE-2024-58070](https://insights.sbomify.com/CVE-2024-58070/): bpf: bpf_local_storage: Always use bpf_mem_alloc in PREEMPT_RT (high 7.8)
- [CVE-2024-5807](https://insights.sbomify.com/CVE-2024-5807/): Business Card <= 1.0.0 - Admin+ File Upload (high 7.2)
- [CVE-2024-58069](https://insights.sbomify.com/CVE-2024-58069/): rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read (high 7.8)
- [CVE-2024-58068](https://insights.sbomify.com/CVE-2024-58068/): OPP: fix dev_pm_opp_find_bw_*() when bandwidth table not initialized (medium 5.5)
- [CVE-2024-58067](https://insights.sbomify.com/CVE-2024-58067/): clk: mmp: pxa1908-mpmu: Fix a NULL vs IS_ERR() check (medium 5.5)
- [CVE-2024-58066](https://insights.sbomify.com/CVE-2024-58066/): clk: mmp: pxa1908-apbcp: Fix a NULL vs IS_ERR() check (medium 5.5)
- [CVE-2024-58065](https://insights.sbomify.com/CVE-2024-58065/): clk: mmp: pxa1908-apbc: Fix NULL vs IS_ERR() check (medium 5.5)
- [CVE-2024-58064](https://insights.sbomify.com/CVE-2024-58064/): wifi: cfg80211: tests: Fix potential NULL dereference in test_cfg80211_parse_colocated_ap() (medium 5.5)
- [CVE-2024-58063](https://insights.sbomify.com/CVE-2024-58063/): wifi: rtlwifi: fix memory leaks and invalid access at probe error path (medium 5.5)
- [CVE-2024-58062](https://insights.sbomify.com/CVE-2024-58062/): wifi: iwlwifi: mvm: avoid NULL pointer dereference (medium 5.5)
- [CVE-2024-58061](https://insights.sbomify.com/CVE-2024-58061/): wifi: mac80211: prohibit deactivating all links (medium 5.5)
- [CVE-2024-58060](https://insights.sbomify.com/CVE-2024-58060/): bpf: Reject struct_ops registration that uses module ptr and the module btf_id is missing (high 7.8)
- [CVE-2024-5806](https://insights.sbomify.com/CVE-2024-5806/): MOVEit Transfer Authentication Bypass Vulnerability (critical 9.1)
- [CVE-2024-58059](https://insights.sbomify.com/CVE-2024-58059/): media: uvcvideo: Fix deadlock during uvc_probe (medium 5.5)
- [CVE-2024-58058](https://insights.sbomify.com/CVE-2024-58058/): ubifs: skip dumping tnc tree when zroot is null (medium 5.5)
- [CVE-2024-58057](https://insights.sbomify.com/CVE-2024-58057/): idpf: convert workqueues to unbound (medium 5.5)
- [CVE-2024-58056](https://insights.sbomify.com/CVE-2024-58056/): remoteproc: core: Fix ida_free call while not allocated (medium 5.5)
- [CVE-2024-58055](https://insights.sbomify.com/CVE-2024-58055/): usb: gadget: f_tcm: Don't free command immediately (high 7.8)
- [CVE-2024-58054](https://insights.sbomify.com/CVE-2024-58054/): staging: media: max96712: fix kernel oops when removing module (high 7.1)
- [CVE-2024-58053](https://insights.sbomify.com/CVE-2024-58053/): rxrpc: Fix handling of received connection abort (high 7.5)
- [CVE-2024-58052](https://insights.sbomify.com/CVE-2024-58052/): drm/amdgpu: Fix potential NULL pointer dereference in atomctrl_get_smc_sclk_range_table (medium 5.5)
- [CVE-2024-58051](https://insights.sbomify.com/CVE-2024-58051/): ipmi: ipmb: Add check devm_kasprintf() returned value (medium 5.5)
- [CVE-2024-58050](https://insights.sbomify.com/CVE-2024-58050/): Missing authorization in HarmonyOS (medium 6.2)
- [CVE-2024-5805](https://insights.sbomify.com/CVE-2024-5805/): MOVEit Gateway Authentication Bypass Vulnerability (critical 9.1)
- [CVE-2024-58049](https://insights.sbomify.com/CVE-2024-58049/): Missing authorization in HarmonyOS (medium 5.0)
- [CVE-2024-58048](https://insights.sbomify.com/CVE-2024-58048/): Race condition in HarmonyOS (medium 6.7)
- [CVE-2024-58047](https://insights.sbomify.com/CVE-2024-58047/): Missing authorization in HarmonyOS (medium 5.0)
- [CVE-2024-58046](https://insights.sbomify.com/CVE-2024-58046/): Missing authorization in HarmonyOS (medium 6.2)
- [CVE-2024-58045](https://insights.sbomify.com/CVE-2024-58045/): Race condition in HarmonyOS (high 8.6)
- [CVE-2024-58044](https://insights.sbomify.com/CVE-2024-58044/): Missing authorization in EMUI (high 8.4)
- [CVE-2024-58043](https://insights.sbomify.com/CVE-2024-58043/): Security feature bypass in EMUI (high 7.3)
- [CVE-2024-58042](https://insights.sbomify.com/CVE-2024-58042/): rhashtable: Fix potential deadlock by moving schedule_work outside lock (medium 5.5)
- [CVE-2024-58041](https://insights.sbomify.com/CVE-2024-58041/): Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions (critical 9.1)
- [CVE-2024-58040](https://insights.sbomify.com/CVE-2024-58040/): Crypt::RandomEncryption for Perl uses insecure rand() function during encryption (critical 9.1)
- [CVE-2024-5804](https://insights.sbomify.com/CVE-2024-5804/): Conditional Fields for Contact Form 7 <= 2.4.13 - Cross-Site Request Forgery to Plugin Setting Reset (medium 4.3)
- [CVE-2024-58036](https://insights.sbomify.com/CVE-2024-58036/): Net::Dropbox::API 1.9 and earlier for Perl uses insecure rand() function for cryptographic functions (medium 5.5)
- [CVE-2024-58034](https://insights.sbomify.com/CVE-2024-58034/): memory: tegra20-emc: fix an OF node reference bug in tegra_emc_find_node_by_ram_code() (high 7.8)
- [CVE-2024-5803](https://insights.sbomify.com/CVE-2024-5803/): Local privelage escalation via COM hijacking (high 7.5)
- [CVE-2024-58023](https://insights.sbomify.com/CVE-2024-58023/): Information disclosure in Bosch Configuration Manager (high 8.4)
- [CVE-2024-58022](https://insights.sbomify.com/CVE-2024-58022/): mailbox: th1520: Fix a NULL vs IS_ERR() bug (medium 5.5)
- [CVE-2024-58021](https://insights.sbomify.com/CVE-2024-58021/): HID: winwing: Add NULL check in winwing_init_led() (medium 5.5)
- [CVE-2024-58020](https://insights.sbomify.com/CVE-2024-58020/): HID: multitouch: Add NULL check in mt_input_configured (medium 5.5)
- [CVE-2024-5802](https://insights.sbomify.com/CVE-2024-5802/): URL Shortener by MyThemeShop <= 1.0.17 - Admin+ Stored XSS (medium 6.1)
- [CVE-2024-58019](https://insights.sbomify.com/CVE-2024-58019/): nvkm/gsp: correctly advance the read pointer of GSP message queue (high 7.8)
- [CVE-2024-58018](https://insights.sbomify.com/CVE-2024-58018/): nvkm: correctly calculate the available space of the GSP cmdq buffer (medium 5.5)
- [CVE-2024-58017](https://insights.sbomify.com/CVE-2024-58017/): printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX (medium 5.5)
- [CVE-2024-58016](https://insights.sbomify.com/CVE-2024-58016/): safesetid: check size of policy writes (medium 5.5)
- [CVE-2024-58015](https://insights.sbomify.com/CVE-2024-58015/): wifi: ath12k: Fix for out-of bound access error (high 7.1)
- [CVE-2024-58014](https://insights.sbomify.com/CVE-2024-58014/): wifi: brcmsmac: add gain range check to wlc_phy_iqcal_gainparams_nphy() (high 7.1)
- [CVE-2024-58013](https://insights.sbomify.com/CVE-2024-58013/): Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync (high 7.8)
- [CVE-2024-58012](https://insights.sbomify.com/CVE-2024-58012/): ASoC: SOF: Intel: hda-dai: Ensure DAI widget is valid during params (medium 5.5)
- [CVE-2024-58011](https://insights.sbomify.com/CVE-2024-58011/): platform/x86: int3472: Check for adev == NULL (medium 5.5)
- [CVE-2024-58010](https://insights.sbomify.com/CVE-2024-58010/): binfmt_flat: Fix integer overflow bug on 32 bit systems (high 7.8)
- [CVE-2024-5801](https://insights.sbomify.com/CVE-2024-5801/): IP Forwarding enabled in B&R Automation Runtime (medium 5.3)
- [CVE-2024-58009](https://insights.sbomify.com/CVE-2024-58009/): Bluetooth: L2CAP: handle NULL sock pointer in l2cap_sock_alloc (medium 5.5)
- [CVE-2024-58008](https://insights.sbomify.com/CVE-2024-58008/): KEYS: trusted: dcp: fix improper sg use with CONFIG_VMAP_STACK=y (high 7.8)
- [CVE-2024-58007](https://insights.sbomify.com/CVE-2024-58007/): soc: qcom: socinfo: Avoid out of bounds read of serial number (high 7.1)
- [CVE-2024-58006](https://insights.sbomify.com/CVE-2024-58006/): PCI: dwc: ep: Prevent changing BAR size/flags in pci_epc_set_bar() (critical 9.6)
- [CVE-2024-58005](https://insights.sbomify.com/CVE-2024-58005/): tpm: Change to kvalloc() in eventlog/acpi.c (medium 5.5)
- [CVE-2024-58004](https://insights.sbomify.com/CVE-2024-58004/): media: intel/ipu6: remove cpu latency qos request on error (high 7.8)
- [CVE-2024-58003](https://insights.sbomify.com/CVE-2024-58003/): media: i2c: ds90ub9x3: Fix extra fwnode_handle_put() (high 7.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2024/page/177/