5279 matches found
CVE-2023-20700
CVE-2023-20700 affects Widevine in MediaTek chips. The vulnerability is described as an out-of-bounds write caused by a logic error, enabling local escalation of privilege with System execution privileges required; user interaction is not needed. Patch ID ALPS07643304 (Issue ALPS07643304) is refe...
CVE-2023-20721
In isp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07162155; Issue ID: ALPS07162155...
CVE-2023-20718
In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645181; Issue ID: ALPS07645181...
PT-2023-17909 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to a permissions bypass in the registerReceiverWithFeature method of ActivityManagerService.java. This could allow isolated processes to register a broadcast receiver, potentially...
CVE-2023-21106
In adrenosetparam of adrenogpu.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2023-21102
In efirtasmwrapper of efi-rt-wrapper.S, there is a possible bypass of shadow stack protection due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions...
PT-2023-17566 · Google · Widevine
Name of the Vulnerable Software and Affected Versions: Widevine affected versions not specified Description: The issue is caused by a logic error, leading to a possible out of bounds write. This could result in local escalation of privilege, with System execution privileges needed. User interacti...
CVE-2023-20701
In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643270; Issue ID: ALPS07643270...
CVE-2023-20695
CVE-2023-20695 concerns MediaTek preloader on MT6880/6890/6980/6990 devices. The issue is an out-of-bounds write caused by a missing bounds check in the preloader, enabling local escalation of privilege with System execution privileges required; exploitation does not require user interaction. Pub...
PT-2023-13081 · Intel · Intel Unite Plugin Sdk
Name of the Vulnerable Software and Affected Versions: IntelR UniteR Plugin SDK versions prior to 4.2 Description: The issue is related to an uncontrolled search path in the IntelR UniteR Plugin SDK, which may allow an authenticated user to potentially enable escalation of privilege via local...
Intel Server Board 安全漏洞
Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in Intel Server Board BMC firmware versions prior to 2.90, which stems from the presence of a buffer overflow issue. An attacker could exploit the vulnerability to enable privilege escalation vi...
PT-2023-3613 · Netskope · Netskope Client Service
Name of the Vulnerable Software and Affected Versions: Netskope client service versions prior to R96 Description: The issue is related to a synchronization error when using a shared resource, which can be exploited by a malicious local user to elevate privileges. The Netskope client service runs ...
CVE-2022-48369
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...
CVE-2022-48383
.In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...
CVE-2022-48368
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...
CVE-2022-48247
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...
CVE-2022-48245
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...
CVE-2022-48248
In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...