PT-2023-28507 · Wifi · Wifi

Name of the Vulnerable Software and Affected Versions: Wifi service affected versions not specified Description: The issue is related to a possible missing permission check in the wifi service. This could lead to local escalation of privilege with no additional execution privileges needed...

PT-2023-24178 · Core · Core

Name of the Vulnerable Software and Affected Versions: Core affected versions not specified Description: The issue is related to memory corruption in Core when processing RX intent requests. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2023-28561 · Unknown · Telecom Service

Name of the Vulnerable Software and Affected Versions: telocom service affected versions not specified Description: The issue is related to a possible missing permission check in the telocom service. This could lead to local escalation of privilege with no additional execution privileges needed...

PT-2023-27267 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a missing check in the createDontSendToRestrictedAppsBundle function of PendingIntentUtils.java, which could lead to a possible background activity launch. This migh...

PT-2023-28508 · Wifi · Wifi

Name of the Vulnerable Software and Affected Versions: Wifi service affected versions not specified Description: The issue is related to a possible missing permission check in the wifi service, which could lead to local escalation of privilege without requiring additional execution privileges...

PT-2023-18615 · Qualcomm · Qualcomm Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm Chipsets affected versions not specified Description: The issue is related to memory corruption in audio when invoking IOCTLs calls from the user-space. This can potentially lead to code execution. Recommendations: At the moment, the...

PT-2023-28560 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Telecom service affected versions not specified Description: The issue concerns a missing permission check that could allow writing permission usage records of an app. This may lead to local information disclosure without requiring additional...

PT-2023-24169 · Unknown · Automotive Os

Name of the Vulnerable Software and Affected Versions: Automotive OS affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in the Automotive OS, caused by improper authentication to the secure IO calls. Recommendations: At the moment, there is no...

PT-2023-21829 · Qualcomm · Qualcomm Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm Chipsets affected versions not specified Description: The issue is related to memory corruption in the WLAN Host while setting the PMK length in the internal cache. Recommendations: At the moment, there is no information about a newe...

PT-2023-28513 · Wifi · Wifi

Name of the Vulnerable Software and Affected Versions: Wifi service affected versions not specified Description: The issue is related to a possible missing permission check in the wifi service, which could lead to local escalation of privilege without requiring additional execution privileges...

PT-2023-28668 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 affected versions not specified Description: A denial of service issue has been identified. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2023-35625 · Hdf5 · Hdf5

Name of the Vulnerable Software and Affected Versions: HDF5 affected versions not specified Description: A heap buffer overflow read issue has been identified, which can cause a crash. The crash occurs in the H5T bit copy, H5T bit get d, and H5T conv f f functions. Recommendations: At the moment,...

PT-2023-24078 · Aee · Aee

Name of the Vulnerable Software and Affected Versions: aee affected versions not specified Description: The issue is related to a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2023-24080 · Mediatek · Mediatek Chipset

Name of the Vulnerable Software and Affected Versions: MediaTek Chipset affected versions not specified Description: In display, there is a possible out of bounds read due to an incorrect status check. This could lead to local information disclosure with System execution privileges needed. User...

PT-2023-9405

Name of the Vulnerable Software and Affected Versions WolfSSL affected versions not specified Description The issue is related to the generation of the ECDSA nonce k, where a random number r is selected and then reduced modulo n, the order of the elliptic curve. The division used during the...

PT-2023-7919 · Sierra Wireless · Aleos

Name of the Vulnerable Software and Affected Versions: Sierra Wireless, Inc ALEOS affected versions not specified Description: The issue is related to a Loop with Unreachable Exit Condition, also known as an 'Infinite Loop', which could potentially allow a remote attacker to trigger a Denial of...

PT-2023-32939 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It mentions a CVE ID that was unused by the CNA and provides a date of publication...

PT-2023-30750 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost affected versions not specified Description: The issue allows an attacker to consume excessive resources, possibly leading to Denial of Service, by importing a board using a specially crafted zip zip bomb in Mattermost Boards. This...

PT-2023-36292 · Unknown · Fdo-Client

Name of the Vulnerable Software and Affected Versions: fdo-client affected versions not specified Description: The issue concerns the removal of a build key via utils/keys gen.sh. No information is provided about the estimated number of potentially affected devices or real-world incidents where...

PT-2023-7525 · Axis Communications · Axis Os

Name of the Vulnerable Software and Affected Versions: AXIS OS affected versions not specified Description: A flaw was found in the protection for device tampering, commonly known as Secure Boot, in AXIS OS, making it vulnerable to a sophisticated attack to bypass this protection. There are no...