Threats affecting pkg:generic/wolfssl

AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Read” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds read hits unmapped memory. It could also impact Confidentiality, and Availability.

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Out-of-Bound Read” by local access. Successful exploitation of this vulnerability may lead to a denial of service during firmware update processing, such as a crash or failed update if the out-of-bounds read hits unmapped memory. It could also potentially impact Confidentiality and Availability.

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to version 0.17.0, a heap buffer overflow exists in rabbitmq-c when the public amqp_send_frame() API is used to serialize an oversized AMQP_FRAME_BODY. The issue occurs because amqp_frame_to_bytes() copies frame.payload.body_fragment.len bytes into the connection outbound buffer without validating that the body fragment fits within the allocated frame buffer. An application that passes an oversized body frame to amqp_send_frame() can trigger a heap out-of-bounds write, resulting in process crash and memory corruption. This issue has been patched in version 0.17.0.

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to version 0.17.0, the bounds check (*offset = o + len) <= encoded.len overflows when o + len > SIZE_MAX on 32-bit systems. len is a uint32_t read from the AMQP wire as a BYTES/UTF8 field length. The overflow wraps the check to a small value that passes, producing a decoded amqp_bytes_t with a multi-GB .len pointing into a small frame buffer. This results in an out-of-bounds read of up to ~4GB of process memory on 32-bit systems (ARM, MIPS, x86 ILP32, embedded IoT AMQP clients). Enabling information disclosure or denial of service. Not exploitable on 64-bit systems where size_t is 64-bit. This issue has been patched in version 0.17.0.

Cross-Site Request Forgery (CSRF) vulnerability in XplodedThemes WPIDE – File Manager & Code Editor wpide allows Cross Site Request Forgery.This issue affects WPIDE – File Manager & Code Editor: from n/a through 3.6.4.

CVE-2026-83528 is a vulnerability in Ivanti Endpoint Manager Mobile that allows a remote authenticated attacker with admin privileges to expose private personal information protected under GDPR. The issue affects versions before 12.10.0.1, 12.9.0.3, and 12.8.0.5. The vulnerability has a medium severity with a CVSS score of 4.9.

CVE-2026-123180 is a missing authentication vulnerability in the NETGEAR RAX30 router models before version 1.0.15.110. An attacker who is adjacent on the network and has authenticated to the Wi-Fi network can access sensitive information and modify device configuration, including administrator credentials, without further authentication. This vulnerability impacts the confidentiality, integrity, and availability of the device.

CVE-2026-123178 is an input validation vulnerability in the NETGEAR Orbi RBR350 router that allows an authenticated administrator on the local network to execute unauthorized commands and modify the router's software and functionality. This flaw affects versions prior to 4.4.3.4 and could compromise the device's integrity. The vulnerability has a medium severity rating and a CVSS 4.3 score. A fix is available in version 4.4.3.4.

CVE-2026-107405 is a vulnerability in Ivanti Endpoint Manager Mobile versions prior to 12.10.0.1, 12.9.0.3, and 12.8.0.5. It involves an exposed dangerous method or function that allows a local authenticated attacker to cause a denial of service (DoS). The vulnerability does not impact confidentiality or integrity but affects availability.

CVE-2026-107404 is an argument injection vulnerability in Ivanti Endpoint Manager Mobile versions before 12.10.0.1, 12.9.0.3, and 12.8.0.5. It allows a remote authenticated attacker with administrative privileges to delete arbitrary files on the system. The vulnerability has a medium severity rating with a CVSS score of 4.9.

CVE-2026-105427 is an improper input validation vulnerability in Ivanti Endpoint Manager Mobile versions before 12.10.0.1, 12.9.0.3, and 12.8.0.5. It allows a remote authenticated attacker with administrative privileges to permanently disable all Apache HTTPS services, causing a denial of service condition.

Eclipse Kura versions 3.1.0 through 5.6.2 contain a vulnerability in the iBeacon and Eddystone advertisement decoders where the AD-structure length field of BLE advertising payloads is improperly parsed. An unauthenticated attacker within BLE range can send a crafted two-byte advertising payload that causes the beacon-scanner thread to enter an infinite loop, consuming a CPU core and halting beacon ingestion until the gateway is restarted. This attack requires the iBeacon/Eddystone scanner component to be installed and active, which is not the default configuration.

Improper input validation in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to set arbitrary Linux kernel parameters as root.

CVE-2026-123181 is a path traversal vulnerability in Ivanti Sentry versions before 10.7.4 and 10.8.3. It allows a remote authenticated attacker with administrative privileges to create arbitrary directories and files with root privileges on the affected system.

CVE-2026-123179 is a vulnerability in Ivanti Sentry before versions 10.7.4 and 10.8.3 involving insecure default initialization of a resource in the Tomcat shutdown listener. This flaw allows a local authenticated attacker to cause a denial of service. The vulnerability has a medium severity with a CVSS score of 5.5.

An uncontrolled XML entity expansion vulnerability in the Flock Installer app for Android before version 2.35.0 allows an attacker who has a valid technician account and controls or impersonates the camera being set up to crash the app, on devices running Android 10, 11 or 12, by returning a camera configuration response that contains nested XML entity declarations. The vulnerability does not allow the attacker to read or change data on the device, and no customer license plate, video or location data is exposed. Android 13 and later reject the response. The issue is fixed in version 2.35.0; update to 2.35.0 or later.

CVE-2026-105669 is an argument injection vulnerability in Ivanti Sentry versions prior to 10.8.3 and 10.7.4. It allows a remote authenticated attacker with administrative privileges to execute arbitrary binaries on the system. The vulnerability is classified under CWE-88 and has a CVSS 3.1 score of 6.7, indicating a medium severity level.

An information exposure flaw in the public access-list sign-up feature of the Flock Safety Platform, present from 2026-06-23 to 2026-10-22, allowed a remote, unauthenticated attacker who had a community's public sign-up link and a registered vehicle's license plate to retrieve that registrant's name, email address, home address and approval status. Each lookup required solving a CAPTCHA. No license plate reader detections, images or video were exposed. Flock remediated the issue in the hosted service on 2026-10-22; no customer action is required.

CVE-2026-105425 is an OS command injection vulnerability in Ivanti Sentry and Ivanti EPMM products. It affects versions prior to 10.7.4, 10.8.3, and 11.0.0 of Ivanti Sentry, and versions prior to 12.10.0.1, 12.9.0.3, and 12.8.0.5 of Ivanti EPMM. A remote attacker with administrative privileges can exploit this flaw to execute arbitrary commands on the affected system.

Missing authorization checks in the visual alert feature of FlockOS, Flock's hosted public safety platform, prior to 2026-09-28, allowed an authenticated user with permission to manage saved searches in their own organization to read, modify or delete another organization's saved-search alerts and change their recipients, given the alert's identifier, and to create alerts attributed to another organization. Flock remediated the issue in the hosted service on 2026-09-28; no customer action is required.