CVE-2021-43997

FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...

Privilege escalation

FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...

CVE-2021-43997

FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...

CVE-2021-43997

FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...

CVE-2021-43997: Undefined Security Weakness

FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 do not prevent a third party that has already independently gained the ability to execute injected code to achieve...

CVE-2021-43997

CVE-2021-43997 affects FreeRTOS ARMv7-M and ARMv8-M MPU ports. Versions 10.2.0–10.4.5 allow non‑kernel code to call the internal xPortRaisePrivilege function to raise privilege; versions up to 10.4.6 can enable a second‑stage privilege escalation if injected code branches inside an MPU API wrappe...

CVE-2018-11259

Due to Improper Access Control of NAND-based EFS in Snapdragon Automobile, Snapdragon Mobile and Snapdragon Wear, From fastboot on a NAND-based device, the EFS partition can be erased. Apps processor then has non-secure world full read/write access to the partition until the modem boots and...

mpu-fux.de XSS vulnerability

Open Bug Bounty ID: OBB-619995 Description| Value ---|--- Affected Website:| mpu-fux.de Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-10446: Undefined Security Weakness

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 820, SD 820A, and SD 835, incorrect configuration of the OCIMEM MPU may provide NonSecure Software access to OCIMEM...

PT-2018-4677

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue is related to the incorrect configuration of the OCIMEM MPU, which may allow NonSecure Software access to OCIMEM memory used by TZ. This could potentially lead to...

Improper access control

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, improper access control while configuring MPU protecting error correction registers may potentially lead to exposure of related secured data...

CVE-2017-18128

CVE-2017-18128 affects Android on Qualcomm Snapdragon Mobile platforms (SD 845/850) prior to the 2018-04-05 security patch level. Root cause: improper access control when configuring the MPU protecting error-correction registers, which may lead to exposure of related secured data. Impact stated i...

CVE-2017-18128: Undefined Security Weakness

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, improper access control while configuring MPU protecting error correction registers may potentially lead to exposure of related secured data...

CVE-2017-18128

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Mobile SD 845, SD 850, improper access control while configuring MPU protecting error correction registers may potentially lead to exposure of related secured data...

MPU-Profi Free - External URLs, MIT license, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application MPU-Profi Free published at the 'play' market has multiple vulnerabilities...

Security Advisory-Memory Leak Vulnerability on USG products

The HUAWEI USG9560/9520/9580 is a high-end 10-Gigabit Firewall. The USG9560/9520/9580 applies to Internet backbone networks, IP dedicated backbone networks, IP metropolitan area networks MANs, Internet data center IDC egress. This security gateway provides multiple powerful and all-round security...