Lucene search
+L

111 matches found

CVE
CVE
•added 2023/12/04 10:40 p.m.•148 views

CVE-2023-40075

CVE-2023-40075 affects Android and is caused by a missing bounds check in the forceReplaceShortcutInner method of ShortcutPackage.java, allowing registration of unlimited packages. This leads to a local denial-of-service condition and a boot loop, with no additional execution privileges required....

5.5CVSS5.3AI score0.00115EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2023/12/04 10:40 p.m.•3 views

CVE-2023-40075

In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check. This could lead to local denial of service which results in a boot loop with no additional execution privileges needed. User interaction is not needed for...

6.8CVSS0.00115EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/04 12:00 a.m.•4 views

CVE-2023-40075: Undefined Security Weakness

In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check. This could lead to local denial of service which results in a boot loop with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6.1AI score0.00115EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2023/12/01 12:00 a.m.•54 views

ASB-A-281061287

In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check. This could lead to local denial of service which results in a boot loop with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6.1AI score0.00115EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/01 12:00 a.m.•3 views

PT-2023-27251

Name of the Vulnerable Software and Affected Versions No specific software name or versions are mentioned in the provided descriptions. Description The issue is related to a missing bounds check in the forceReplaceShortcutInner function of ShortcutPackage.java, allowing for the registration of...

5.5CVSS5.9AI score0.00115EPSS
SaveExploits0References7
NVD
NVD
•added 2023/10/06 7:15 p.m.•42 views

CVE-2023-21252

In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.4AI score0.00106EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2023/10/06 7:15 p.m.•26 views

CVE-2023-21252

In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00106EPSS
SaveExploits0References3
Mend
Mend
•added 2023/10/06 6:48 p.m.•6 views

CVE-2023-21252

In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.8CVSS0.00106EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/10/06 6:48 p.m.•14 views

CVE-2023-21252

In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.9AI score0.00106EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/10/06 6:48 p.m.•48 views

CVE-2023-21252

In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.7AI score0.00106EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/10/06 12:00 a.m.•12 views

PT-2023-18038 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to improper input validation in the validatePassword function of WifiConfigurationUtil.java. This could lead to a local denial of service, causing the device to enter a...

5.5CVSS5.3AI score0.00106EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2023/10/06 12:00 a.m.•23 views

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android that stems from a method in validatePassword in WifiConfigurationUtil.java that may cause the device to enter a boot loop due to improper input...

5.5CVSS6.4AI score0.00106EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/06 12:00 a.m.•3 views

CVE-2023-21252: Undefined Security Weakness

In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00106EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2023/10/01 12:00 a.m.•66 views

ASB-A-275339978

In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00106EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2023/07/13 12:15 a.m.•18 views

CVE-2023-21240

In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00091EPSS
SaveExploits0References2
Prion
Prion
•added 2023/07/13 12:15 a.m.•33 views

Code injection

In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

1.7CVSS5.4AI score0.00091EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/12 11:23 p.m.•15 views

CVE-2023-21240

In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.7AI score0.00091EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/07/12 12:00 a.m.•13 views

PT-2023-18026 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: In the Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional...

5.5CVSS5.3AI score0.00091EPSS
SaveExploits0References5
osv_asb
osv_asb
•added 2023/07/01 12:00 a.m.•50 views

ASB-A-275340417

In Policy of Policy.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00091EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2023/07/01 12:00 a.m.•63 views

ASB-A-261723753

In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop. This could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.0009EPSS
SaveExploits0References2
Rows per page
Query Builder