PT-2023-17648 · Cta · Cta

Name of the Vulnerable Software and Affected Versions: cta affected versions not specified Description: The issue is related to a missing permission check, which could lead to local information disclosure without requiring additional execution privileges. User interaction is not necessary for...

PT-2023-24040 · Unknown · Bluetooth Driver

Name of the Vulnerable Software and Affected Versions: Bluetooth driver affected versions not specified Description: The issue is related to improper access control of the register interface in the Bluetooth driver, allowing possible read and write access to registers. This could lead to a local...

PT-2023-17644 · Netdagent · Netdagent

Name of the Vulnerable Software and Affected Versions: netdagent affected versions not specified Description: The issue is related to a possible out of bounds write in netdagent due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed...

PT-2023-17656 · Unknown · Keyinstall

Name of the Vulnerable Software and Affected Versions: keyinstall affected versions not specified Description: The issue is related to a missing bounds check in keyinstall, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user...

PT-2023-17655 · Gps · Gps

Name of the Vulnerable Software and Affected Versions: gps affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in gps. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2023-24038 · Unknown · Wlan Service

Name of the Vulnerable Software and Affected Versions: wlan service affected versions not specified Description: In the wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed...

PT-2023-17647 · Duraspeed · Duraspeed

Name of the Vulnerable Software and Affected Versions: duraspeed affected versions not specified Description: The issue is related to a missing permission check in duraspeed, which could lead to local information disclosure without requiring additional execution privileges. User interaction is no...

PT-2023-17649 · Unknown · Imsservice

Name of the Vulnerable Software and Affected Versions: No specific software name or version is mentioned in the provided descriptions, except for references to 'ims service'. Therefore, the information about affected versions cannot be determined based on the given data. Description: In the ims...

PT-2023-17657 · Pda · Pda

Name of the Vulnerable Software and Affected Versions: pda affected versions not specified Description: The issue is related to a possible use after free due to a race condition in pda. This could lead to local escalation of privilege, with System execution privileges needed. User interaction is...

PT-2023-17653 · Gps · Gps

Name of the Vulnerable Software and Affected Versions: gps affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in gps. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2023-17660 · Seninf · Seninf

Name of the Vulnerable Software and Affected Versions: seninf affected versions not specified Description: In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction i...

PT-2023-17650 · Gps · Gps

Name of the Vulnerable Software and Affected Versions: gps affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in gps. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2023-24041 · Unknown · Connectivity System Driver

Name of the Vulnerable Software and Affected Versions: connectivity system driver affected versions not specified Description: In the connectivity system driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System...

ASB-A-280633699

In avdtmsgasmbl of avdtmsg.cc, there is a possible out of bounds write due to an integer overflow. This could lead to paired device escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

VulnCheck KEV: CVE-2023-38204

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction...

SUSE CVE-2023-21264

In multiple functions of memprotect.c, there is a possible way to access hypervisor memory due to a memory access check in the wrong place. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21289

In multiple locations, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21284

In multiple functions of DevicePolicyManager.java, there is a possible way to prevent enabling the Find my Device feature due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21287

In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21278

In multiple locations, there is a possible way to obscure the microphone privacy indicator due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...