CVE-2023-21014

In multiple locations of p2piface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

CVE-2023-20910

In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2023-17030 · Max Secure · Max Secure Anti Virus Plus

Name of the Vulnerable Software and Affected Versions: Max Secure Anti Virus Plus version 19.0.2.1 Description: A problem was found in the function 0x220019 in the library MaxProctetor64.sys of the component IoControlCode Handler. This issue leads to denial of service and can be launched on the...

PT-2023-16990 · Unknown · Watchdog Anti-Virus

Name of the Vulnerable Software and Affected Versions: Watchdog Anti-Virus version 1.4.214.0 Description: A problematic vulnerability was found in Watchdog Anti-Virus, affecting the function in the library wsdk-driver.sys of the component IoControlCode Handler. This leads to denial of service. Th...

CVE-2023-1369

CVE-2023-1369 affects TG Soft Vir.IT eXplorer 9.4.86.0. The vulnerability resides in the IoControlCode Handler, specifically function 0x82730088 within VIRAGTLT.sys, and leads to a denial of service. Exploitation is described as local, with public disclosure of the exploit noted. A fix is availab...

Hewlett Packard Enterprise Superdome Flex Server 信息泄露漏洞

Hewlett Packard Enterprise Superdome Flex Server is a modular server product from Hewlett Packard Enterprise USA. An information disclosure vulnerability exists in HPE Superdome Flex Servers prior to v3.65.8 and Superdome Flex 280 Servers prior to v1.45.8, which can be exploited by an attacker to...

CVE-2022-37939

CVE-2022-37939 affects HPE Superdome Flex Servers v3.65.8 and earlier, and Superdome Flex 280 Servers v1.45.8 and earlier. The issue is a local information disclosure vulnerability; exploitation is described as local, with no user interaction required. The Red Hat and NVD records align on the sam...

CVE-2023-20620

In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07554558; Issue ID: ALPS07554558...

CVE-2023-20625

In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628532; Issue ID: ALPS07628532...

PT-2023-17492 · Ion · Ion

Name of the Vulnerable Software and Affected Versions: ion affected versions not specified Description: The issue is related to a possible escalation of privilege due to improper locking in ion. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2023-20646

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628536; Issue ID: ALPS07628536...

PT-2023-16807 · Fabulatech · Fabulatech Webcam For Remote Desktop

Name of the Vulnerable Software and Affected Versions: FabulaTech Webcam for Remote Desktop version 2.8.42 Description: A vulnerability has been found in the library ftwebcam.sys of the component IOCTL Handler, affecting the function 0x222010/0x222018. The manipulation leads to null pointer...

PUB-A-243130078

In DoSetPinControl of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-239872581

In TBD of TBD, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

ASB-A-264209787

In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-230358834

In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

ASB-A-264149248

In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-238083570

In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-257289560

In rttunpackxtlvcbfn of dhdrtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

PUB-A-254028776

In addroamcachelist of wlroam.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...