Lucene search
+L

67 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/25 12:00 a.m.•2 views

CVE-2026-64274: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer u8 pointdata2 + GOODIXMAXCONTACTSIZE GOODIXMAXCONTACTS; which is siz...

7.8CVSS5.9AI score0.00169EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2026/07/25 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-64274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: goodix - clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer...

7.8CVSS6AI score0.00169EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/07/25 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-64367

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow...

7.8CVSS6.2AI score0.00142EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/25 12:00 a.m.•1 views

CVE-2026-64367: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: HID: hid-goodix-spi: validate report size to prevent stack buffer overflow goodixhidsetrawreport builds a protocol frame in a 128-byte stack buffer tmpbuf, writing an 11-12 byte header followed by the caller-supplied report data...

7.8CVSS6.1AI score0.00142EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/01/09 12:38 p.m.•12 views

CVE-2023-50430

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

6.4CVSS7.3AI score0.00412EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2018-11610

Malware in sbrugna...

7.5CVSS7.5AI score0.01278EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2013-5951

Malware in sbrugna...

6.9CVSS6.4AI score0.00297EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2017-0976

Malware in sbrugna...

7.6CVSS7.2AI score0.01436EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2013-4590

Malware in sbrugna...

6.9CVSS6.4AI score0.00237EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-30662

Malicious code in bioql PyPI...

7.8CVSS6.6AI score0.00105EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:19 a.m.•17 views

CVE-2024-32892

In handleinit of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7AI score0.00105EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/13 9:01 p.m.•47 views

CVE-2024-32892

In handleinit of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00105EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/13 12:00 a.m.•1 views

CVE-2024-32892: Access of Resource Using Incompatible Type

In handleinit of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.1AI score0.00105EPSS
SaveExploits0References1
Lenovo
Lenovo
•added 2024/03/12 4:32 p.m.•15 views

Fingerprint Reader Vulnerabilities - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
NVD
NVD
•added 2023/12/09 10:15 p.m.•47 views

CVE-2023-50430

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

6.4CVSS0.00412EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/12/09 10:15 p.m.•6 views

CVE-2023-50430

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

6.4CVSS6.6AI score0.00412EPSS
SaveExploits1References2
Prion
Prion
•added 2023/12/09 10:15 p.m.•26 views

Authentication flaw

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

3.7CVSS7.5AI score0.00412EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/12/09 12:00 a.m.•49 views

CVE-2023-50430

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

6.8AI score0.00412EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/12/09 12:00 a.m.•10 views

Dell Inspiron Security Breach

The Dell Inspiron is a line of laptop computers from Dell Inc. in the United States. The Dell Inspiron 15 suffers from a security vulnerability that stems from the Goodix fingerprinting device shipped with the computer not following the Secure Device Connection Protocol SDCP when enrolling via...

6.4CVSS6.9AI score0.00412EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/09 12:00 a.m.•2 views

CVE-2023-50430: Improper Authentication

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

6.4CVSS6.7AI score0.00412EPSS
SaveExploits1References2
Rows per page
Query Builder