CVE-2026-20638

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3. A user with Live Caller ID app extensions turned off could have identifying information leaked to the extensions...

CVE-2026-20638

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.3 and iPadOS 26.3. A user with Live Caller ID app extensions turned off could have identifying information leaked to the extensions...

CVE-2023-20638

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628537; Issue ID: ALPS07628537...

CVE-2021-20638

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2025-20638

In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2025-20638

In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2025-20638

In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2025-20638

In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID:...

CVE-2025-20638

CVE-2025-20638 concerns MediaTek chipsets where the DA module exposes a read of uninitialized heap data, enabling local information disclosure. Root cause: uninitialized data in the DA module. Impact: potential leakage of heap contents if an attacker gains physical access; exploitation requires u...

CVE-2023-20638

creationtimestamp| type| source ---|---|--- 2023-03-08 00:23:56+00:00| seen| https://t.me/cibsecurity/59635 2025-03-08 04:34:11+00:00| seen| Telegram/T2cnQANWePBrZnVKRt12XkRVWP7RcnLLGsjHXhVSzoNsTEXN...

CVE-2023-20638

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628537; Issue ID: ALPS07628537...

CVE-2023-20638

CVE-2023-20638 affects the ril component of MediaTek chips, caused by a missing bounds check that enables an out-of-bounds write. This could lead to local escalation of privilege with System execution privileges required. User interaction is not needed for exploitation. A patch is available: ALPS...

CVE-2022-20638

CVE-2022-20638 affects the web-based management interface of Cisco Security Manager. The issue is cross-site scripting due to insufficient validation of user-supplied input, allowing an unauthenticated, remote attacker to induce a user to click a crafted link and potentially execute arbitrary scr...

CVE-2021-20638

creationtimestamp| type| source ---|---|--- 2021-02-12 12:43:25+00:00| seen| https://t.me/cibsecurity/23520...

CVE-2021-20638

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2021-20638

CVE-2021-20638 affects LOGITEC LAN-W300N/PGRB. The vulnerability is an OS command injection that allows an attacker with administrative privileges to execute arbitrary commands on the device via unspecified vectors. The CVSSv3 base score is 6.8 (MEDIUM ), with attack vector Adjacent, high privile...

CVE-2021-20638

LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors...

CVE-2019-20638

creationtimestamp| type| source ---|---|--- 2020-04-16 00:14:26+00:00| seen| https://t.me/cibsecurity/11311...

CVE-2019-20638

NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials...

CVE-2019-20638

The CVE-2019-20638 entry concerns NETGEAR MR1100 devices with firmware versions prior to 12.06.08.00, where there is disclosure of administrative credentials. The connected documents consistently reference the affected product (NETGEAR MR1100) and the vulnerable version threshold (before 12.06.08...