Lucene search
+L

798 matches found

Prion
Prion
•added 2022/04/12 5:15 p.m.•24 views

Design/Logic Flaw

In ionioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.2CVSS7.7AI score0.00122EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2022/04/12 5:15 p.m.•56 views

CVE-2021-39801

In ionioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.8CVSS7.6AI score0.00122EPSS
SaveExploits0References2
OSV
OSV
•added 2022/04/12 5:15 p.m.•17 views

UBUNTU-CVE-2021-39800

In ionioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

5.5CVSS5.9AI score0.00149EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2022/04/12 4:11 p.m.•33 views

CVE-2021-39801

In ionioctl of ion-ioctl.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.9AI score0.00122EPSS
SaveExploits0References1
CVE
CVE
•added 2022/04/12 4:11 p.m.•188 views

CVE-2021-39800

CVE-2021-39800 affects the Android kernel ION component (ion_ioctl.c) where a use-after-free can leak kernel head data, enabling local information disclosure without extra privileges or user interaction. Exploitation details are not provided in the supplied documents. Impact is limited to local d...

5.5CVSS4.9AI score0.00149EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•2 views

PT-2022-11075

Name of the Vulnerable Software and Affected Versions Android kernel versions affected versions not specified Description The issue is related to a use after free in the ion ioctl function of ion-ioctl.c, which could lead to local information disclosure. No additional execution privileges are...

5.5CVSS6.2AI score0.00149EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•3 views

CVE-2021-39800: Use After Free

In ionioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

5.5CVSS5.9AI score0.00149EPSS
SaveExploits0References2
OSV
OSV
•added 2022/04/01 12:00 a.m.•48 views

ASB-A-208277166

In ionioctl of ion-ioctl.c, there is a possible way to leak kernel head data due to a use after free. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00149EPSS
SaveExploits0References4
OSV
OSV
•added 2022/03/16 3:15 p.m.•8 views

DEBIAN-CVE-2021-39714

In ionbufferkmapget of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.8CVSS6.8AI score0.00229EPSS
SaveExploits0References1
OSV
OSV
•added 2022/03/16 3:15 p.m.•12 views

UBUNTU-CVE-2021-39714

In ionbufferkmapget of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.8CVSS6.9AI score0.00229EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
•added 2022/03/16 3:15 p.m.•52 views

CVE-2021-39714

In ionbufferkmapget of ion.c, there is a possible use-after-free due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.8CVSS7AI score0.00229EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/03/09 12:00 a.m.•31 views

PT-2022-10993 · Google +1 · Android Kernel +1

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a possible use-after-free due to an integer overflow in the ion buffer kmap get function of ion.c. This could lead to local escalation of privilege...

9CVSS7.2AI score0.6777EPSS
SaveExploits31References152
OSV
OSV
•added 2022/02/09 11:15 p.m.•15 views

CVE-2022-20037

In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171705; Issue ID: ALPS06171705...

5.5CVSS6.2AI score0.00118EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/02/09 11:15 p.m.•11 views

CVE-2022-20037

In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171705; Issue ID: ALPS06171705...

5.5CVSS6.1AI score0.00118EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/02/09 11:15 p.m.•20 views

CVE-2022-20036

In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171689; Issue ID: ALPS06171689...

5.5CVSS6.1AI score0.00118EPSS
SaveExploits0References2
OSV
OSV
•added 2022/02/09 11:15 p.m.•19 views

CVE-2022-20036

In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171689; Issue ID: ALPS06171689...

5.5CVSS6.2AI score0.00118EPSS
SaveExploits0References1
NVD
NVD
•added 2022/02/09 11:15 p.m.•41 views

CVE-2022-20036

In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171689; Issue ID: ALPS06171689...

5.5CVSS0.00118EPSS
SaveExploits0References1
NVD
NVD
•added 2022/02/09 11:15 p.m.•31 views

CVE-2022-20037

In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06171705; Issue ID: ALPS06171705...

5.5CVSS0.00118EPSS
SaveExploits0References1
OSV
OSV
•added 2022/02/09 11:15 p.m.•11 views

CVE-2022-20017

In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862991; Issue ID: ALPS05862991...

5.5CVSS6.2AI score0.00118EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/02/09 11:15 p.m.•12 views

CVE-2022-20017

In ion driver, there is a possible information disclosure due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05862991; Issue ID: ALPS05862991...

5.5CVSS6.1AI score0.00118EPSS
SaveExploits0References2
Rows per page
Query Builder