Lucene search
+L

215 matches found

CNVD
CNVD
•added 2021/07/09 12:00 a.m.•40 views

Huawei P30 Input Validation Error Vulnerability (CNVD-2021-51440)

Huawei P30 is a smartphone from Chinese company Huawei Huawei. An input validation error vulnerability exists in the Huawei P30, which stems from a vulnerability in the product's Bluetooth module's handling of broadcast data, and can be exploited by an attacker to install the app to send a specif...

5.5CVSS6.7AI score0.00166EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/07/07 12:00 a.m.•15 views

Huawei P30 输入验证错误漏洞

Huawei P30 is a smartphone from Chinese company Huawei Huawei. An input validation error vulnerability exists in the Huawei P30, which stems from a vulnerability in the product's Bluetooth module's handling of broadcast data, and can be exploited by an attacker to install the app to send a specif...

5.5CVSS5.6AI score0.00166EPSS
SaveExploits0References3
Prion
Prion
•added 2020/11/19 3:15 a.m.•30 views

Double free

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...

3.6CVSS6.1AI score0.00298EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2020/11/19 2:30 a.m.•68 views

CVE-2020-15710

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...

6.1CVSS6.1AI score0.00298EPSS
SaveExploits0
Cvelist
Cvelist
•added 2020/11/19 2:30 a.m.•40 views

CVE-2020-15710 Potential double-free in pulseaudio

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...

5.3CVSS6.1AI score0.00298EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/19 12:00 a.m.•2 views

CVE-2020-15710: Double Free

Potential double free in Bluez 5 module of PulseAudio could allow a local attacker to leak memory or crash the program. The modargs variable may be freed twice in the fail condition in src/modules/bluetooth/module-bluez5-device.c and src/modules/bluetooth/module-bluez5-device.c. Fixed in...

6.1CVSS6AI score0.00298EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/10/20 12:00 a.m.•12 views

HUAWEI Mate 20 Buffer Overflow Vulnerability

HUAWEI Mate 20 is a smartphone launched by Huawei. A buffer overflow vulnerability exists in the Bluetooth module in previous versions of HUAWEI Mate 20 10.0.0.188 C00E74R3P8. The vulnerability stems from insufficient input validation. An attacker can exploit the vulnerability to achieve code...

8CVSS7.9AI score0.00449EPSS
SaveExploits0References1
Prion
Prion
•added 2020/10/19 8:15 p.m.•26 views

Buffer overflow

HUAWEI Mate 20 versions earlier than 10.0.0.188C00E74R3P8 have a buffer overflow vulnerability in the Bluetooth module. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth messages after successful paring, causing buffer overflow. Successful exploit may cause cod...

5.4CVSS8.2AI score0.00449EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/10/19 12:00 a.m.•4 views

CVE-2020-9113: Buffer Copy without Checking Size of Input

HUAWEI Mate 20 versions earlier than 10.0.0.188C00E74R3P8 have a buffer overflow vulnerability in the Bluetooth module. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth messages after successful paring, causing buffer overflow. Successful exploit may cause cod...

8CVSS6.5AI score0.00449EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2020/08/24 7:33 p.m.•180 views

Exploit for Incorrect Calculation in Google Android

...

8.8CVSS8.8AI score0.06052EPSS
SaveExploits8
Pen Test Partners Blog
Pen Test Partners Blog
•added 2018/08/08 6:41 a.m.•56 views

Tamper proofing review: the iZettle card payment terminal

Tamper resistance is an increasingly important factor in smart devices. Together with secure hardware design and defensive coding, it can deliver a very secure device. One of the most common areas the average consumer will encounter tamper resistant devices is in payment terminals, or Pin Entry...

6.7AI score
SaveExploits0
OSV
OSV
•added 2018/02/15 4:29 p.m.•13 views

CVE-2017-17285

Bluetooth module in some Huawei mobile phones with software LON-AL00BC00B229 and earlier versions has a buffer overflow vulnerability. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth AVDTP/AVCTP messages after successful paring, causing buffer overflow...

8.8CVSS6.3AI score0.0056EPSS
SaveExploits0References1
Prion
Prion
•added 2018/02/15 4:29 p.m.•23 views

Buffer overflow

Bluetooth module in some Huawei mobile phones with software LON-AL00BC00B229 and earlier versions has a buffer overflow vulnerability. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth AVDTP/AVCTP messages after successful paring, causing buffer overflow...

5.8CVSS9AI score0.0056EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/02/15 12:00 a.m.•4 views

CVE-2017-17285: Improper Restriction of Operations within the Bounds of a Memory Buffer

Bluetooth module in some Huawei mobile phones with software LON-AL00BC00B229 and earlier versions has a buffer overflow vulnerability. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth AVDTP/AVCTP messages after successful paring, causing buffer overflow...

8.8CVSS8.4AI score0.0056EPSS
SaveExploits0References2
Huawei
Huawei
•added 2018/01/29 12:00 a.m.•28 views

Security Advisory - Buffer Overflow Vulnerability in the Bluetooth Module of Some Huawei Mobile Phones

There is a buffer overflow vulnerability in the Bluetooth module of some Huawei mobile phones. Due to insufficient input validation, an unauthenticated attacker may craft Bluetooth AVDTP/AVCTP messages after successful paring, causing buffer overflow. Successful exploit may cause code execution...

8.8CVSS9.1AI score0.0056EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder