CVE-2020-36423

CVE-2020-36423 affects Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext due to a Lucky 13 timing side-channel not properly handling the case of a hardware accelerator. This is documented in multiple sources referencing Mbed TLS 2.23.0 fixes. Impact is plaintext exposure via net...

CVE-2020-36423

An issue was discovered in Arm Mbed TLS before 2.23.0. A remote attacker can recover plaintext because a certain Lucky 13 countermeasure doesn't properly consider the case of a hardware accelerator...

CVE-2021-0518

In Wi-Fi, there is a possible leak of location-sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-176541...

Information disclosure

In Wi-Fi, there is a possible leak of location-sensitive data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-176541...

CVE-2021-31217

creationtimestamp| type| source ---|---|--- 2021-07-13 22:19:25+00:00| seen| https://t.me/cibsecurity/26123...

CVE-2021-20366

creationtimestamp| type| source ---|---|--- 2021-07-13 20:19:21+00:00| seen| https://t.me/cibsecurity/26119...

CVE-2021-20362

creationtimestamp| type| source ---|---|--- 2021-07-13 20:19:20+00:00| seen| https://t.me/cibsecurity/26118...

CVE-2020-22875

creationtimestamp| type| source ---|---|--- 2021-07-13 18:19:21+00:00| seen| https://t.me/cibsecurity/26114...

CVE-2021-34321

creationtimestamp| type| source ---|---|--- 2021-07-13 14:25:07+00:00| seen| https://t.me/cibsecurity/26099...

CVE-2021-31893

creationtimestamp| type| source ---|---|--- 2021-07-13 14:25:06+00:00| seen| https://t.me/cibsecurity/26098...

CVE-2021-33713

creationtimestamp| type| source ---|---|--- 2021-07-13 14:25:05+00:00| seen| https://t.me/cibsecurity/26097...

CVE-2021-34327

creationtimestamp| type| source ---|---|--- 2021-07-13 14:19:10+00:00| seen| https://t.me/cibsecurity/26094...

CVE-2021-34308

creationtimestamp| type| source ---|---|--- 2021-07-13 14:19:10+00:00| seen| https://t.me/cibsecurity/26095...

CVE-2021-31895

creationtimestamp| type| source ---|---|--- 2021-07-13 14:19:05+00:00| seen| https://t.me/cibsecurity/26092...

CVE-2018-7078

creationtimestamp| type| source ---|---|--- 2021-07-13 08:42:36+00:00| seen| https://t.me/icscert/458...

CVE-2021-24421

creationtimestamp| type| source ---|---|--- 2021-07-13 00:18:15+00:00| seen| https://t.me/cibsecurity/26081...

July 13, 2021 Security Update (KB5004235)

None None...

KB5004748: Servicing stack update for Windows 10, version 1909: July 13, 2021

None None...

Heap-based Buffer Overflow in squell/id3

✍️ Description Hello! We compiled id3 from commit 857ac8 with Clang-13 + ASan, and we discovered a crafted file which triggers a heap-buffer-overflow, WRITE of size 1. This and the previous bug were discovered with the help of honggfuzz. 🕵️‍♂️ Proof of Concept echo...

Heap-based Buffer Overflow in squell/id3

✍️ Description Hello! We compiled id3 from commit 857ac8 with Clang-13 + ASan, and we discovered a crafted file which triggers a negative-size-param and a heap-buffer-overflow with a READ of size 40987248. But for the purposes of this report, we are going to look at the heap-buffer-overflow, as it...