CVE-2023-48407

CVE-2023-48407 affects Google Pixel bootloader: a logic error may prevent the DCK from being deleted after factory reset, enabling local elevation of privilege with no user interaction. Exploitation details are not provided in the documents; the Pixel update bulletin lists CVE-2023-48407 as a boo...

CVE-2023-48407: Undefined Security Weakness

there is a possible DCK won't be deleted after factory reset due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-282081424

there is a possible DCK won't be deleted after factory reset due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-24400: Reliance on Untrusted Inputs in a Security Decision

A flaw in the TETRA authentication procecure allows a MITM adversary that can predict the MS challenge RAND2 to set session key DCK to zero...