6424 matches found
CVE-2022-26462
CVE-2022-26462 describes an out-of-bounds read in the MediaTek vow component caused by an incorrect bounds check. The vulnerability could lead to local information disclosure with system-level execution privileges required, and exploitation reportedly does not require user interaction. Public ref...
CVE-2022-26463
The CVE-2022-26463 issue affects vow (MediaTek vow) and involves an out-of-bounds read caused by an incorrect bounds check. The vulnerability could lead to local information disclosure with System execution privileges required, and no user interaction is needed to exploit. Public references in th...
CVE-2022-26462
In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032660; Issue ID: ALPS07032660...
CVE-2022-26459
In vow, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07032634; Issue ID: ALPS07032634...
CVE-2022-26459
The CVE-2022-26459 issue affects MediaTek vow. An integer overflow can cause an out-of-bounds read, leading to local information disclosure with System execution privileges required. No user interaction is needed. A patch is referenced as ALPS07032634 (Issue ALPS07032634). Exploitation details ar...
PT-2022-17875 · Vow · Vow
Name of the Vulnerable Software and Affected Versions: vow affected versions not specified Description: The issue is related to an incorrect bounds check, leading to a possible out of bounds read. This could result in local information disclosure, requiring System execution privileges for...
MediaTek vow 缓冲区错误漏洞
MediaTek vow is an application chip from MediaTek, China. It provides optimized platform size and power consumption. A security vulnerability exists in MediaTek vow, which is caused by an incorrect boundary check that reads outside the boundaries. This could lead to the disclosure of local...
MediaTek vow 缓冲区错误漏洞
MediaTek vow is an application chip from MediaTek, China. It provides optimized platform size and power consumption. A security vulnerability exists in MediaTek vow, which is caused by an incorrect boundary check that reads outside the boundaries. This could lead to the disclosure of local...
MediaTek vow 后置链接漏洞
MediaTek vow is an application chip from MediaTek, China. It provides optimized platform size and power consumption. A security vulnerability exists in the MediaTek Chip vow module, which is caused by the following symbolic link. This could result in the disclosure of local information that...
PT-2022-17870 · Vow · Vow
Name of the Vulnerable Software and Affected Versions: vow affected versions not specified Description: The issue is related to an integer overflow that can cause an out of bounds read. This could potentially lead to local information disclosure, with the requirement of System execution privilege...
MediaTek vow 输入验证错误漏洞
MediaTek vow is an application chip from MediaTek, China. It provides optimized platform size and power consumption. A security vulnerability exists in MediaTek vow, which arises from an integer overflow, read out of bounds. This could lead to the disclosure of local information that requires...
PT-2022-17867 · Vow · Vow
Name of the Vulnerable Software and Affected Versions: vow affected versions not specified Description: The issue is related to a symbolic link following, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user interaction is not require...
Debian dla-3094 : flac - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3094 advisory. - ----------------------------------------------------------------------- Debian LTS Advisory DLA-3094-1 [email protected] https://www.debian.org/lts/security/...
CVE-2021-39045
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 could allow a local attacker to obtain information due to the autocomplete feature on password input fields. IBM X-Force ID: 214345...
ASB-A-154913391
In startInputUncheckedLocked of InputMethodManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...
ASB-A-233735886
In extract3GPPGlobalDescriptions of TextDescriptions.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure from the media server with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2022-28625
A local disclosure of sensitive information vulnerability was discovered in HPE OneView versions: Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability...
CVE-2021-0887
In PVRSRVBridgeHeapCfgHeapConfigName, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...
CVE-2021-0698
In PVRSRVBridgeHeapCfgHeapDetails, there is a possible leak of kernel heap content due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroi...