CVE-2024-20036

In vdec, there is a possible permission bypass due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08509508; Issue ID: ALPS08509508...

CVE-2024-20036

CVE-2024-20036 describes a permission bypass in the vdec component that may allow local information disclosure with System privileges. Affected: vdec (details across Red Hat, NVD/NIST records). Impact per metrics: confidentiality impact High; integrity/availability not affected; attack vector Loc...

CVE-2024-20030

In da, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541741...

CVE-2024-20020

In OPTEE, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08522504; Issue ID: ALPS08522504...

PT-2024-18519 · Nvram · Nvram

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to a missing bounds check in nvram, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user interaction is...

PT-2024-18521 · Vdec · Vdec

Name of the Vulnerable Software and Affected Versions: vdec affected versions not specified Description: The issue is related to a permission bypass in vdec, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user interaction is not...

PT-2024-18511 · Mediatek +1 · Mt6739 +1

Name of the Vulnerable Software and Affected Versions: In da affected versions not specified Description: The issue is related to improper input validation, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user interaction is not...

PT-2024-18516 · Mediatek +1 · Mt6739 +1

Name of the Vulnerable Software and Affected Versions: In da affected versions not specified Description: The issue is related to improper input validation, which could lead to local information disclosure with System execution privileges needed. User interaction is not required for exploitation...

PUB-A-298264460

In gpuslclivenessupdate of pixelgpuslc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-284297452

In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PUB-A-305099745

In wipensmemory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android Information Disclosure Vulnerability (CNVD-2024-49507)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to cause local information leakage...

Google Android Out-of-Bounds Read Vulnerability (CNVD-2026-11758)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an out-of-bounds read vulnerability that stems from incorrect boundary checking in the btiftobtaresponse method of the btifgattutil.cc file, which can be exploited by an attacker to cause a local...

ASB-A-303871379

In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CentOS 9 : flac-1.3.3-10.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the flac-1.3.3-10.el9 build changelog. - In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local...

CVE-2024-0017

In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2024-0020

In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a different user due to a confused deputy. This could lead to local information disclosure across users of a device with no additional execution privileges needed. User interaction is...

CVE-2024-0017

In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2024-0020

In onActivityResult of NotificationSoundPreference.java, there is a possible way to hear audio files belonging to a different user due to a confused deputy. This could lead to local information disclosure across users of a device with no additional execution privileges needed. User interaction is...

Design/Logic Flaw

In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...