Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
Unreviewed advisories have not been assessed by GitHub for quality and do not connect to the Dependabot service.
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
4,077
Erlang
29
GitHub Actions
19
Go
1,903
Maven
5,000+
npm
3,632
NuGet
638
pip
3,247
Pub
10
RubyGems
864
Rust
818
Swift
35
Unreviewed advisories
All unreviewed
5,000+

107 advisories

Loading
Transient DOS due to buffer over-read in WLAN while sending a packet to device. High Unreviewed
CVE-2022-40535 was published Mar 10, 2023
Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element. High Unreviewed
CVE-2023-33112 was published Jan 2, 2024
Transient DOS in WLAN Firmware while processing a FTMR frame. High Unreviewed
CVE-2023-33097 was published Dec 5, 2023
Transient DOS in WLAN Firmware while parsing WLAN beacon or probe-response frame. High Unreviewed
CVE-2023-33061 was published Nov 14, 2023
Transient DOS in WLAN Firmware while parsing no-inherit IES. High Unreviewed
CVE-2023-33047 was published Nov 14, 2023
Transient DOS in WLAN Firmware while parsing a NAN management frame. High Unreviewed
CVE-2023-33026 was published Oct 3, 2023
Information Disclosure in data Modem while parsing an FMTP line in an SDP message. High Unreviewed
CVE-2023-24849 was published Oct 3, 2023
Transient DOS in WLAN firmware while parsing MLO (multi-link operation). High Unreviewed
CVE-2023-33016 was published Sep 5, 2023
Memory Corruption in WLAN HOST while fetching TX status information. High Unreviewed
CVE-2023-28542 was published Jul 4, 2023
Information disclosure sue to buffer over-read in modem while processing ipv6 packet with hop-by... High Unreviewed
CVE-2022-33228 was published Apr 13, 2023
Windows Kernel Elevation of Privilege Vulnerability High Unreviewed
CVE-2024-26176 was published Mar 12, 2024
Transient DOS in Core when DDR memory check is called while DDR is not initialized. High Unreviewed
CVE-2023-33060 was published Feb 6, 2024
Information disclosure in Modem while processing SIB5. High Unreviewed
CVE-2023-33058 was published Feb 6, 2024
Transient DOS while parsing GATT service data when the total amount of memory that is required by... High Unreviewed
CVE-2023-43512 was published Jan 2, 2024
Transient DOS in Data Modem during DTLS handshake. High Unreviewed
CVE-2023-33040 was published Jan 2, 2024
Transient DOS in WLAN Firmware while parsing t2lm buffers. High Unreviewed
CVE-2023-33048 was published Nov 14, 2023
Memory corruption in WLAN HOST while processing the WLAN scan descriptor list. High Unreviewed
CVE-2023-28572 was published Nov 14, 2023
Information Disclosure in Data Modem while performing a VoLTE call with an undefined RTCP FB line... High Unreviewed
CVE-2023-24848 was published Oct 3, 2023
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. High Unreviewed
CVE-2023-33015 was published Sep 5, 2023
Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service. High Unreviewed
CVE-2022-40524 was published Sep 5, 2023
Transient DOS in Audio while remapping channel buffer in media codec decoding. High Unreviewed
CVE-2023-28555 was published Aug 8, 2023
Information disclosure in Network Services due to buffer over-read while the device receives DNS... High Unreviewed
CVE-2023-21625 was published Aug 8, 2023
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data. High Unreviewed
CVE-2023-28541 was published Jul 4, 2023
Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source... High Unreviewed
CVE-2023-21669 was published Jun 6, 2023
Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. High Unreviewed
CVE-2023-21658 was published Jun 6, 2023
ProTip! Advisories are also available from the GraphQL API