PT-2024-7324 · Intel · Intel Uefi Firmware

Name of the Vulnerable Software and Affected Versions: Intel UEFI Firmware affected versions not specified Description: The issue is related to improper input validation in UEFI firmware for some Intel processors, which may allow a privileged user to enable information disclosure or denial of...

PT-2024-18574 · Mediatek · Mediatek

Name of the Vulnerable Software and Affected Versions: MediaTek products affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check in keyinstall. This could lead to local information disclosure with System execution privileges...

CVE-2024-1545

Fault Injection vulnerability in RsaPrivateDecryption function in wolfssl/wolfcrypt/src/rsa.c in WolfSSL wolfssl5.6.6 on Linux/Windows allows remote attacker co-resides in the same system with a victim process to disclose information and escalate privileges via Rowhammer fault injection to the...

PT-2024-8890 · Intel · Intel Csme

Name of the Vulnerable Software and Affected Versions: IntelR CSME affected versions not specified Description: The issue is related to improper initialization in the firmware of some IntelR CSME, which may allow a privileged user to potentially enable information disclosure via local access. Thi...

CVE-2024-34721

In ensureFileColumns of MediaProvider.java, there is a possible disclosure of files owned by another user due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-31312

In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local information disclosure exposing played media with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-31312

In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local information disclosure exposing played media with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32916

In fvpfreqhistograminit of fvp.c, there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-29785

In aurgetstate of aurora.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-24957 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or version is mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds read in the ProtocolVsimOperationAdapter function due to a missing bounds check. This could lead to local...

PT-2024-23028 · Aurora · Aurora

Name of the Vulnerable Software and Affected Versions: Aurora affected versions not specified Description: The issue is related to an information disclosure due to uninitialized data in the aur get state function of aurora.c. This could lead to local information disclosure without requiring...

PT-2024-6022 · Dell +1 · Dell Poweredge Platform +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Platform, 14G Intel BIOS versions prior to 2.22.x Description: The issue is related to an Access of Memory Location After End of Buffer vulnerability in the Dell PowerEdge Platform's 14G Intel BIOS. This vulnerability could be...

ASB-A-314333719

In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local information disclosure exposing played media with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-15299 · Unknown · Companiondevicemanagerservice

Name of the Vulnerable Software and Affected Versions: CompanionDeviceManagerService.java affected versions not specified Description: The issue is related to improper input validation in multiple functions of CompanionDeviceManagerService.java. This could lead to the launch of...

rubygem-activesupport: File Disclosure of Locally Encrypted Files

An insecure temporary file vulnerability was found in activesupport rubygem. Contents that will be encrypted are written to a temporary file that has the user’s current umask settings, possibly leading to information disclosure by other users on the same system...

PT-2024-14536 · Unknown · Modem Driver

Name of the Vulnerable Software and Affected Versions: Modem driver affected versions not specified Description: The issue is related to a possible system crash in the modem driver due to improper input validation. This could lead to local information disclosure, with System execution privileges...

CVE-2024-29745

there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-23025 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in the tmu get tr num thresholds function of tmu.c, which could lead to a possible out of bounds read. Th...

CVE-2024-29745

there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...

CVE-2024-20049

In flashc, there is a possible information disclosure due to an uncaught exception. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541765; Issue ID: ALPS08541765...