19 matches found
EUVD-2022-47501
Malicious code in bioql PyPI...
EUVD-2021-3540
Malicious code in bioql PyPI...
CVE-2025-31175
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2025-31175
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2025-31175
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity...
CVE-2025-31175
CVE-2025-31175 is a deserialization mismatch vulnerability in the DSoftBus module used by Huawei HarmonyOS and EMUI. Root cause: deserialization mismatch. Impact: could affect service integrity. Public assessments: CVSSv3.1 base score 7.5 ( NETWORK, NONE privileges, I HIGH) and Huawei CNA score 8...
CVE-2025-31175: Deserialization of Untrusted Data
Deserialization mismatch vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect service integrity...
PT-2024-10709 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version affected versions not specified Description: The issue is related to a possible serialization/deserialization mismatch in the writeToParcel method of MediaPlayer.java due to improper input validatio...
PT-2024-28613
Name of the Vulnerable Software and Affected Versions iAware module affected versions not specified Description The issue is related to a serialisation/deserialisation mismatch in the iAware module. Successful exploitation of this issue may affect service confidentiality. Recommendations At the...
CVE-2023-52357
Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability...
CVE-2023-26547: Deserialization of Untrusted Data
The InputMethod module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation...
CVE-2022-44558
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation...
CVE-2022-44559: Deserialization of Untrusted Data
The AMS module has a vulnerability of serialization/deserialization mismatch. Successful exploitation of this vulnerability may cause privilege escalation...
Huawei HarmonyOS security vulnerabilities
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from a serialization and deserialization mismatch in the system framework layer. An attacke...
Huawei HarmonyOS code-related vulnerabilities
Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an elevation of privilege vulnerability, which stems from a serialization and deserialization mismatch in the AMS module. An...
Huawei HarmonyOS code-related vulnerabilities
Huawei HarmonyOS is an operating system from Huawei China. Huawei HarmonyOS is vulnerable to an elevation of privilege vulnerability caused by a serialization/deserialization mismatch in the AMS module. An attacker could exploit this vulnerability to elevate privileges...
Input validation
In createFromParcel of OutputConfiguration.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
ASB-A-196970023
In createFromParcel of GpsNavigationMessage.java, there is a possible Parcel serialization/deserialization mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2021-0685
In ParsedIntentInfo of ParsedIntentInfo.java, there is a possible parcel serialization/deserialization mismatch due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...