Lucene search
+L

4934 matches found

Prion
Prion
•added 2020/12/14 10:15 p.m.•29 views

Out-of-bounds

In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.2CVSS6.9AI score0.00276EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/12/14 10:15 p.m.•12 views

CVE-2020-0444

In auditfreelsmfield of auditfilter.c, there is a possible bad kfree due to a logic error in auditdatatoentry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.8CVSS8.6AI score0.00219EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2020/12/14 10:15 p.m.•10 views

CVE-2020-0465

In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.2CVSS7.7AI score0.00276EPSS
SaveExploits0References2
CVE
CVE
•added 2020/12/14 9:51 p.m.•416 views

CVE-2020-0465

CVE-2020-0465 refers to the Android kernel HID multitouch vulnerability. In hid-multitouch.c, there is an out-of-bounds write due to a missing bounds check, which could enable local privilege escalation with no additional privileges and no user interaction required. The description confirms affec...

7.2CVSS7.6AI score0.00276EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2020/12/14 9:51 p.m.•2 views

CVE-2020-0465

In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.2CVSS0.00276EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2020/12/14 9:50 p.m.•47 views

CVE-2020-0444

In auditfreelsmfield of auditfilter.c, there is a possible bad kfree due to a logic error in auditdatatoentry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

8.3AI score0.00219EPSS
SaveExploits0References1
CVE
CVE
•added 2020/12/14 9:50 p.m.•476 views

CVE-2020-0444

CVE-2020-0444 affects the Android kernel. The issue is in audit_free_lsm_field in auditfilter.c, caused by a logic error in audit_data_to_entry that may allow local escalation of privilege with no extra privileges or user interaction. The connected Nessus advisories (Unity Linux UTSA-2026-004184/...

7.8CVSS8AI score0.00219EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2020/12/14 9:50 p.m.•5 views

CVE-2020-0444

In auditfreelsmfield of auditfilter.c, there is a possible bad kfree due to a logic error in auditdatatoentry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

8.5CVSS0.00219EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2020/12/14 9:50 p.m.•69 views

CVE-2020-0444

In auditfreelsmfield of auditfilter.c, there is a possible bad kfree due to a logic error in auditdatatoentry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.8CVSS6.5AI score0.00219EPSS
SaveExploits0
Mend
Mend
•added 2020/12/14 9:50 p.m.•1 views

CVE-2020-0466

In doepollctl and eploopcheckproc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

8.5CVSS0.00278EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2020/12/14 9:50 p.m.•67 views

CVE-2020-0466

In doepollctl and eploopcheckproc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

7.8CVSS6.8AI score0.00278EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•7 views

CVE-2020-0444: Release of Invalid Pointer or Reference

In auditfreelsmfield of auditfilter.c, there is a possible bad kfree due to a logic error in auditdatatoentry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.8CVSS5.8AI score0.00219EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•5 views

CVE-2020-0466: Use After Free

In doepollctl and eploopcheckproc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...

7.8CVSS6.1AI score0.00278EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•6 views

CVE-2020-0465: Out-of-bounds Write

In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.2CVSS5.8AI score0.00276EPSS
SaveExploits0References2
Gitee
Gitee
•added 2020/12/02 12:19 a.m.•49 views

Exploit for CVE-2015-3636

PoC exploit for CVE-2015-3636, a vulnerability in the Linux kernel affecting 32-bit Android OS. The exploit targets the Linux kernel's socket timestamping functionality, specifically the SIOCGSTAMPNS ioctl command. The vulnerability allows an attacker to execute arbitrary code with elevated...

4.9CVSS8.4AI score0.02472EPSS
SaveExploits6
Positive Technologies
Positive Technologies
•added 2020/12/01 12:00 a.m.•2 views

PT-2020-1252

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a possible out of bounds write in various methods of hid-multitouch.c due to a missing bounds check. This could lead to local escalation of privilege...

7.2CVSS0.00276EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/12/01 12:00 a.m.•0 views

PT-2020-1244

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description In the do epoll ctl and ep loop check proc functions of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege...

7.8CVSS0.00278EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/11/13 12:00 a.m.•1 views

PT-2020-7003

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to the use of uninitialized data in the memzero explicit function of compiler-clang.h, which could lead to a bypass of defense in depth. This might result in local information disclosure without...

5.5CVSS0.00155EPSS
SaveExploits0References15
Amazon
Amazon
•added 2020/11/11 12:00 a.m.•115 views

Important: kernel

Issue Overview: In binderreleasework of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

8.8CVSS7.8AI score0.07693EPSS
SaveExploits9
Positive Technologies
Positive Technologies
•added 2020/11/03 12:00 a.m.•3 views

PT-2020-1245

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a logic error in audit data to entry within auditfilter.c, specifically in the audit free lsm field function. This could lead to a bad kfree operation,...

7.8CVSS0.00219EPSS
SaveExploits0
Rows per page
Query Builder