All versions of the package static-server are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js.
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
Cryptographic issue in Data Modem due to improper authentication during TLS handshake.
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.
Improper Access to the VM resource manager can lead to Memory Corruption.
Weak configuration in Automotive while VM is processing a listener request from TEE.
Memory Corruption in VR Service while sending data using Fast Message Queue (FMQ).
Memory Corruption in Data Modem while making a MO call or MT VOLTE call.
Transient DOS in Modem while triggering a camping on an 5G cell.
А вы часто читаете реализацию стандартной библиотеки своего любимого языка?..Меня зовут Константин Соколов, и мы с Сергеем Мачульскисом, моим коллегой из бэкенд-разработки в Positive Technologies, хотим с вами поделиться вдохновением. Давайте вместе посмотрим на пакет context с последними…