Google Android Buffer Overflow Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. An out-of-bounds read vulnerability exists in Google Android, which can be exploited by attackers to disclose local information that requires system execution privileges...

Google Android Information Leakage Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that can be exploited by attackers to cause local information disclosure without additional execution privileges...

Google Android Information Leakage Vulnerability

Google Android is a Linux-based open-source operating system from the U.S. company Google Google. information disclosure vulnerabilities exist in Google Android 9, 10 and 11. The vulnerability arises from the retrieval of accounts in devices with permissions due to permission bypass in the...

Google Android log information leakage vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. A log information disclosure vulnerability exists in Google Android, which can be exploited by attackers to disclose local information that requires system execution privileges...

Google Android Information Leakage Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that can be exploited by attackers to cause local information disclosure without additional execution privileges...

Google Android Information Leakage Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that can be exploited by attackers to cause local information disclosure without additional execution privileges...

Google Android Information Leakage Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. An information disclosure vulnerability exists in Google Android, which can be exploited by attackers to cause local information disclosure without additional execution privileges...

Google Android Information Leakage Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that can be exploited by attackers to cause local information disclosure without additional execution privileges...

PUB-A-185591180

In getDeviceId of PhoneSubInfoController.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction ...

MediaTek chip buffer error vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek Mediatek. A security vulnerability exists in MediaTek chips that stems from a possible read out-of-bounds due to a heap buffer overflow in the asf extractor. This could result in the disclosure of local...

MediaTek chip buffer error vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek Mediatek. A security vulnerability exists in MediaTek chips that stems from a possible read out-of-bounds due to a heap buffer overflow in the asf extractor. This could result in the disclosure of local...

MediaTek chip input verification error vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek Mediatek. A security vulnerability exists in MediaTek chips that stems from a possible read out-of-bounds due to a heap buffer overflow in the asf extractor. This could result in the disclosure of local...

UBUNTU-CVE-2021-0938

In memzeroexplicit of compiler-clang.h, there is a possible bypass of defense in depth due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

MediaTek flv extractor buffer error vulnerability

MediaTek flv extractor is a chipset from Mediatek, a Chinese company. MediaTek flv extractor suffers from a buffer error vulnerability that stems from a lack of bounds checking, which could result in an out-of-bounds read. This could lead to the disclosure of local information without additional...

Mediatek chip security vulnerabilities

Mediatek chips are smartphone chipsets from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek chip, which originates in the memory management driver and could lead to information disclosure due to a loss of boundary checks. This could result in the disclosure of local...

jersey: Local information disclosure via system temporary directory

Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the File.createTempFile which creates a file inside of the system temporary directory with the permissions: -rw-r--r--. Thus the contents of this file are...

CVE-2021-0584

In verifyBufferObject of Parcel.cpp, there is a possible out of bounds read due to an improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

HPE OneView Global Dashboard and HPE OneView security vulnerabilities

HPE OneView Global Dashboard OVGD and HPE OneView are both products of Hewlett Packard Enterprise hpe. hpe OneView Global Dashboard is a suite of dashboard solutions. hpe OneView is software that facilitates automated device management for IT departments. A security vulnerability exists in HPE...

CVE-2021-0541

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0552

In getEndItemSliceAction of MediaOutputSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Andro...