CWE-1250 vulnerabilities

In KDE Connect before 1.33.0 on Android, a packet can be crafted that causes two paired devices to unpair. Specifically, it is an invalid discovery packet sent over broadcast UDP.

CVE-2024-10976 is a vulnerability in PostgreSQL affecting versions prior to 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21. It involves improper preservation of consistency between independent representations of shared state related to row-level security policies. Specifically, reused queries may apply incorrect row security policies when executed under different roles than those used during query planning, potentially allowing unauthorized reads or modifications. This issue affects databases using CREATE POLICY to define row security and requires an attacker to tailor the attack to specific application query patterns and role changes.