Lucene search
+L

97 matches found

Positive Technologies
Positive Technologies
•added 2025/10/23 12:00 a.m.•13 views

PT-2025-43505

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems due to insufficient input validation. This issue may allow an attacker to elevate their privileges. Specifically, the...

7.8CVSS6.9AI score0.00082EPSS
SaveExploits0References10
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2017-18645

Malware in sbrugna...

7.8CVSS7.7AI score0.00159EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-26827

Malicious code in bioql PyPI...

7.8CVSS6.5AI score0.00099EPSS
SaveExploits0References2
OSV
OSV
•added 2025/09/04 7:15 p.m.•12 views

CVE-2025-48522

In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00099EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/04 7:15 p.m.•16 views

CVE-2025-48522

In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00099EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/04 6:34 p.m.•9 views

CVE-2025-48522

In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.3AI score0.00099EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/04 6:34 p.m.•48 views

CVE-2025-48522

A logic error in the setDisplayName function within the AssociationRequest.java file of Google Android allows an application to retain a CDM association . An attacker can exploit this vulnerability to achieve local escalation of privilege without requiring additional execution privileges or user ...

7.8CVSS6.3AI score0.00099EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/09/04 12:00 a.m.•14 views

PT-2025-36049

Name of the Vulnerable Software and Affected Versions: AssociationRequest.java affected versions not specified Description: A logic error in the setDisplayName function within the AssociationRequest.java file may allow an application to retain CDM association. This could potentially lead to local...

7.8CVSS6.3AI score0.00099EPSS
SaveExploits0References4
OSV
OSV
•added 2025/09/01 12:00 a.m.•17 views

ASB-A-418773283

In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00099EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2024/09/28 2:51 a.m.•10 views

SUSE CVE-2024-46827

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware...

5.5CVSS7.2AI score0.00234EPSS
SaveExploits0References13
RedhatCVE
RedhatCVE
•added 2024/09/27 3:47 p.m.•17 views

CVE-2024-46827

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware...

5.5CVSS7.1AI score0.00234EPSS
SaveExploits0References4
OSV
OSV
•added 2024/09/27 1:15 p.m.•6 views

DEBIAN-CVE-2024-46827

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware...

5.5CVSS5.4AI score0.00234EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/27 1:15 p.m.•12 views

AZL-53274 CVE-2024-46827 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware...

5.5CVSS6.1AI score0.00234EPSS
SaveExploits0References1
OSV
OSV
•added 2024/09/27 1:15 p.m.•13 views

UBUNTU-CVE-2024-46827

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware...

5.5CVSS6.1AI score0.00234EPSS
SaveExploits0References11
Vulnrichment
Vulnrichment
•added 2024/09/27 12:39 p.m.•20 views

CVE-2024-46827 wifi: ath12k: fix firmware crash due to invalid peer nss

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware...

7AI score0.00234EPSS
SaveExploits0References3
CVE
CVE
•added 2024/09/27 12:39 p.m.•136 views

CVE-2024-46827

The CVE-2024-46827 entry describes a Linux kernel fix for ath12k Wi‑Fi: when an association request contains an Extended HE Capabilities Element with an invalid MCS-NSS, the driver passes a zero peer_nss to firmware, potentially crashing it. The remediation implements validation of peer_nss and f...

5.5CVSS5.2AI score0.00234EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2024/09/27 12:39 p.m.•19 views

CVE-2024-46827 wifi: ath12k: fix firmware crash due to invalid peer nss

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware...

6.1AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/27 12:00 a.m.•0 views

CVE-2024-46827: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix firmware crash due to invalid peer nss Currently, if the access point receives an association request containing an Extended HE Capabilities Information Element with an invalid MCS-NSS, it triggers a firmware...

5.5CVSS5.9AI score0.00234EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/09 9:15 p.m.•10 views

CVE-2024-31320

In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation due to CDM. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00259EPSS
SaveExploits0References3
NVD
NVD
•added 2024/07/09 9:15 p.m.•49 views

CVE-2024-31320

In setSkipPrompt of AssociationRequest.java , there is a possible way to establish a companion device association without any confirmation due to CDM. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00259EPSS
SaveExploits0References3
Rows per page
Query Builder