Lucene search
+L

563 matches found

CNNVD
CNNVD
•added 2023/06/28 12:00 a.m.•21 views

Google Pixel security vulnerabilities

Google Pixel is a smartphone from Google, Inc. in the United States. Google Pixel suffers from a security vulnerability that originates in requestAppKeyboardShortcuts in WindowManagerService.java, where a lack of permission checking allows users to interact with the application, which could lead ...

5.5CVSS5.8AI score0.00087EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/06/28 12:00 a.m.•19 views

Google Pixel competition condition issue vulnerabilities

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that originates in installKey in KeyUtil.cpp, where file encryption may fail due to a competitive condition, which could lead to local information disclosure...

4.1CVSS5.1AI score0.00054EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/06/28 12:00 a.m.•22 views

PT-2023-17983 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a possible out of bounds read in the btm ble periodic adv sync tx rcvd function of btm ble gap.cc. This could lead to local information disclosure over Bluetooth if the...

4.5CVSS4.3AI score0.00138EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/06/28 12:00 a.m.•22 views

Google Pixel security vulnerabilities

Google Pixel is a smartphone from Google, Inc USA. A security vulnerability exists in Google Pixel, which originates in parseSecurityParamsFromXml in XmlUtil.java, where file encryption may fail due to a competitive condition, which could lead to local information disclosure...

7.8CVSS7.3AI score0.00076EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/06/15 7:15 p.m.•20 views

CVE-2023-21141

In several functions of several files, there is a possible way to access developer mode traces due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

5.5CVSS6.2AI score0.00083EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2023/06/15 7:15 p.m.•13 views

CVE-2023-21142

In multiple files, there is a possible way to access traces in the dev mode due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...

5.5CVSS6.1AI score0.00083EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/06/06 12:00 a.m.•17 views

PT-2023-17588 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: Wlan affected versions not specified Description: The issue is related to a possible out of bounds read in wlan due to a missing bounds check. This could lead to local information disclosure, requiring System execution privileges for...

4.4CVSS6.7AI score0.00093EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2023/05/15 10:15 p.m.•14 views

CVE-2023-20704

In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767826; Issue ID: ALPS07767826...

5.5CVSS6.2AI score0.0009EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/05/04 12:00 a.m.•22 views

Samsung Mobile Devices security vulnerabilities

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices SMR May-2023 Release 1 version, which originated when SemShareFileProvider allowe...

6.8CVSS5.7AI score0.00151EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/04/06 12:00 a.m.•22 views

MediaTek chip buffer error vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking, which could lead to out-of-bounds reads. An attacker could exploit this vulnerability to disclose local information. The...

4.4CVSS5.1AI score0.00093EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/04/06 12:00 a.m.•21 views

MediaTek chip buffer error vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips that stems from a lack of boundary checking, which could lead to out-of-bounds reads. An attacker could exploit this vulnerability to disclose local information. The...

4.4CVSS5.1AI score0.00093EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2023/04/01 5:15 a.m.•20 views

DEBIAN-CVE-2023-0195

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, which may lead to hypothetical Information leak of unimportant data such as local variable data of the driver...

2.4CVSS5.9AI score0.00308EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/03/24 8:15 p.m.•16 views

CVE-2023-21011

In multiple locations of p2piface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

4.4CVSS5.9AI score0.00096EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/03/24 8:15 p.m.•18 views

CVE-2023-21009

In multiple locations of p2piface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

4.4CVSS5.9AI score0.00096EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/03/24 8:15 p.m.•13 views

CVE-2023-20973

In btmcreateconncancelcomplete of btmsec.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

5.5CVSS5.9AI score0.00094EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/03/24 12:00 a.m.•11 views

PT-2023-17756 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to Android-13 Description: The issue is related to a possible out of bounds read in the p2p iface.cpp file due to a missing bounds check. This could lead to local information disclosure, with System execution privileges...

4.4CVSS4.7AI score0.00096EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/03/24 12:00 a.m.•18 views

PT-2023-17774 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the btm ble clear resolving list complete function of btm ble privacy.cc due to a missing bounds check. This could lead to local information...

4.4CVSS4.2AI score0.00096EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/03/24 12:00 a.m.•17 views

PT-2023-17779 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a possible out of bounds read in the btm ble rand enc complete function of btm ble.cc due to a missing bounds check. This could lead to local information disclosure, requiring...

4.4CVSS4.3AI score0.00096EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/03/24 12:00 a.m.•11 views

PT-2023-17744 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-12 through Android-13 Description: The issue is related to a possible out of bounds write in the C2SurfaceSyncObj.cpp import due to a missing bounds check. This could lead to local information disclosure, requiring...

4.4CVSS4.4AI score0.00094EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/03/24 12:00 a.m.•16 views

PT-2023-17741 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a possible out of bounds write due to a missing bounds check in the A2DP BuildCodecHeaderSbc function of a2dp sbc.cc. This could lead to local information...

5.5CVSS6.5AI score0.00091EPSS
SaveExploits0References5
Rows per page
Query Builder