Design/Logic Flaw

Incorrect default permissions in some IntelR SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-31246

CVE-2023-31246 : Intel SDP Tool software prior to version 1.4 build 5 contains incorrect default permissions that may allow an authenticated, locally privileged user to escalate privileges. Affected product: Intel® Server Debug and Provisioning (SDP) Tool (Windows) prior to 1.4 build 5. Root caus...

CVE-2023-31246

Incorrect default permissions in some IntelR SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-31246

Incorrect default permissions in some IntelR SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-31246: Incorrect Default Permissions

Incorrect default permissions in some IntelR SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel SDP Tool Security Vulnerability

Intel SDP Tool is a server debugging and configuration tool from Intel Corporation USA. A security vulnerability exists in IntelR SDP Tool versions prior to 1.4, which stems from incorrect default privileges. An attacker can exploit the vulnerability to elevate privileges...

PT-2023-18053 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: In the SDP AddAttribute function of sdp db.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead t...

Intel® SDP Tool Software Advisory

Summary: A potential security vulnerability in some Intel® Server Debug and Provisioning SDP Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-31246 Description: Incorrect default...

ASB-A-272783039

In SDPAddAttribute of sdpdb.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the MP4SdpAtom::Read() function in the atom_sdp.cpp component of the library for creating, modifying, and reading MP4 files, mp4v2, allows a malicious actor to cause a service failure.

The vulnerability of the MP4SdpAtom::Read function in the atomsdp.cpp component of the library for creating, modifying, and reading MP4 files in mp4v2 is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2023-21198

In removesdprecord of btifsdpserver.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android...

CVE-2023-21201

In oncreaterecordevent of btifsdpserver.cc, there is a possible out of bounds read due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

CVE-2023-21198

In removesdprecord of btifsdpserver.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android...

CVE-2023-21201

In oncreaterecordevent of btifsdpserver.cc, there is a possible out of bounds read due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

Out-of-bounds

In oncreaterecordevent of btifsdpserver.cc, there is a possible out of bounds read due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that originates in oncreaterecordevent in btifsdpserver.cc, where an out-of-bounds read is possible due to a missing null check, which could lead to a remote denial of service...

PT-2023-17990 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a possible out of bounds read in the on create record event function of btif sdp server.cc due to a missing null check. This could lead to a remote denial of...

CVE-2023-21108

In sdpubuilduuidseq of sdpdiscovery.cc, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if HFP support is enabled, with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

PT-2023-17901 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: In the sdpu build uuid seq function of sdp discovery.cc, there is a possible out of bounds write due to a use after free. This could lead to remote code execution over Bluetooth, if...

MP4v2 安全漏洞

MP4v2 is a library for creating, modifying and reading MP4 files by the individual developer enzo1982. A security vulnerability exists in MP4v2 version v2.1.3, which stems from the discovery of a contained memory leak via the MP4SdpAtom::Read function of atomsdp.cpp...