Lucene search
+L

235 matches found

BDU FSTEC
BDU FSTEC
added 2020/04/10 12:0 a.m.11 views

The vulnerability of the Google Chrome browser’s Bluetooth service, related to writing beyond the buffer size of memory, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s Bluetooth service is related to memory buffer overflow attacks. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.3AI score0.01444EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/04/10 12:0 a.m.10 views

The vulnerability of the Google Chrome browser’s Bluetooth service, related to memory usage after deallocation, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s Bluetooth service is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.3AI score0.0149EPSS
Exploits0References11Affected Software5
Tenable Nessus
Tenable Nessus
added 2019/11/25 12:0 a.m.45 views

Debian DSA-4575-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2019-13723 Yuxiang Li discovered a use-after-free issue in the bluetooth service. - CVE-2019-13724 Yuxiang Li discovered an out-of-bounds read issue in the bluetooth service. C Tenable Network Security, Inc. The...

8.8CVSS7.5AI score0.0149EPSS
Exploits0References7
OSV
OSV
added 2019/05/08 5:29 p.m.5 views

CVE-2019-2049

In SendMediaUpdate and SendFolderUpdate of avrcpservice.cc, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.2AI score0.0017EPSS
Exploits0References1
Prion
Prion
added 2019/05/08 5:29 p.m.17 views

Memory corruption

In SendMediaUpdate and SendFolderUpdate of avrcpservice.cc, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...

7.2CVSS7.8AI score0.0017EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2019/05/08 4:27 p.m.22 views

CVE-2019-2049

In SendMediaUpdate and SendFolderUpdate of avrcpservice.cc, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation...

7.9AI score0.0017EPSS
Exploits0References1
NVD
NVD
added 2019/02/11 11:29 p.m.23 views

CVE-2018-9590

In addattr of sdpdiscovery.c in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interactio...

7.5CVSS7.1AI score0.01335EPSS
Exploits0References2
OSV
OSV
added 2018/12/06 2:29 p.m.4 views

CVE-2018-9560

In HIDDevAddRecord of hiddapi.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth service with User execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

7.8CVSS5.9AI score0.0016EPSS
Exploits0References2
OSV
OSV
added 2018/12/06 2:29 p.m.4 views

CVE-2018-9562

In btaagdodisc of btaagsdp.cc, there is a possible out-of-bound read due to an incorrect parameter size. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Android...

7.5CVSS5.9AI score0.01089EPSS
Exploits0References2
NVD
NVD
added 2018/12/06 2:29 p.m.22 views

CVE-2018-9560

In HIDDevAddRecord of hiddapi.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth service with User execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

7.8CVSS8.3AI score0.0016EPSS
Exploits0References2
Cvelist
Cvelist
added 2018/12/06 2:0 p.m.22 views

CVE-2018-9566

In processservicesearchrsp of sdpdiscovery.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure when connecting to a malicious Bluetooth device with no additional execution privileges needed. User interaction is needed for...

5.4AI score0.00376EPSS
Exploits0References2
Cvelist
Cvelist
added 2018/12/06 2:0 p.m.20 views

CVE-2018-9560

In HIDDevAddRecord of hiddapi.cc, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth service with User execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

7.8AI score0.0016EPSS
Exploits0References2
CVE
CVE
added 2018/12/06 2:0 p.m.50 views

CVE-2018-9560

CVE-2018-9560 affects Android 9, in the HID stack. The issue is an out-of-bounds write in HID_DevAddRecord of hidd_api.cc caused by a missing bounds check, enabling local elevation of privilege in the Bluetooth service with no user interaction required. Impact is described as high (local EoP with...

7.8CVSS7.7AI score0.0016EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2018/11/14 6:29 p.m.6 views

CVE-2018-9541

In avrcparsvendorrsp of avcrparsct.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

7.5CVSS5.9AI score0.01109EPSS
Exploits0References2
NVD
NVD
added 2018/11/14 6:29 p.m.17 views

CVE-2018-9541

In avrcparsvendorrsp of avcrparsct.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

7.5CVSS7.4AI score0.01109EPSS
Exploits0References2
NVD
NVD
added 2018/11/14 6:29 p.m.14 views

CVE-2018-9544

In registerapp of btifhd.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

5.5CVSS5.8AI score0.00164EPSS
Exploits0References2
Prion
Prion
added 2018/11/14 6:29 p.m.13 views

Out-of-bounds

In avrcparsvendorrsp of avcrparsct.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android...

5CVSS7AI score0.01109EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2018/11/14 6:29 p.m.13 views

Out-of-bounds

In registerapp of btifhd.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions:...

2.1CVSS5.1AI score0.00164EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2018/10/11 12:0 a.m.7 views

The vulnerability of the `rfc_process_mx_message` function in the Android operating system’s Bluetooth service allows a hacker to disclose protected information.

The vulnerability of the rfcprocessmxmessage function in the Bluetooth service of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to disclose information...

7.8CVSS5.7AI score0.01208EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2018/10/02 7:29 p.m.6 views

CVE-2018-9502

In rfcprocessmxmessage of rfctsframes.cc, there is a possible out-of-bounds read due to a missing bounds check. This could lead to remote information disclosure in the Bluetooth service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Andro...

6.5CVSS5.9AI score0.01208EPSS
Exploits0References8
Rows per page
Query Builder