Lucene search
K

7 matches found

CVE
CVE
added 2025/01/03 3:28 a.m.76 views

CVE-2024-53838

CVE-2024-53838 stems from an incorrect bounds check in Exynos_parsing_user_data_registered_itu_t_t35 within VendorVideoAPI.cpp, causing an out-of-bounds write. The flaw enables local privilege escalation with no additional execution privileges required and does not require user interaction. Affec...

7.8CVSS7.2AI score0.00039EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/12/01 12:0 a.m.6 views

PUB-A-349130926

In Exynosparsinguserdataregistereditutt35 of VendorVideoAPI.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00039EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/05/31 12:0 a.m.10 views

PT-2024-36495 · WordPress · Html5 Video Player

Name of the Vulnerable Software and Affected Versions: HTML5 Video Player WordPress plugin versions prior to 2.5.27 Description: The issue concerns a failure to sanitize and escape a parameter from a REST route before using it in a SQL statement. This allows unauthenticated users to perform SQL...

6.5CVSS7.6AI score0.83843EPSS
Exploits6References13
CNNVD
CNNVD
added 2024/03/19 12:0 a.m.1 views

AXIS OS Security Vulnerability

AXIS Os is an edge device operating system from Axis Sweden. A security vulnerability exists in AXIS OS versions 6.50 through 11.8, which stems from the VAPIX APIs locallist.cgi, createoverlay.cgi, and irissetup.cgi being susceptible to a file globbing attack that can lead to resource exhaustion...

6.5CVSS6.7AI score0.00069EPSS
Exploits0References2
NVD
NVD
added 2023/07/04 5:15 a.m.15 views

CVE-2023-21638

Memory corruption in Video while calling APIs with different instance ID than the one received in initialization...

7.8CVSS7.4AI score0.0004EPSS
Exploits0References1
OSV
OSV
added 2023/06/28 6:15 p.m.0 views

CVE-2023-21182

In Exynosparsinguserdataregistereditutt35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

4.4CVSS5.9AI score0.00036EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/06/28 12:0 a.m.1 views

Google Pixel 缓冲区错误漏洞

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which originates in Exynosparsinguserdataregistereditutt35 in VendorVideoAPI.cpp, where due to a lack of bounds checking, out-of-bounds reads may be possible, which could lead to local...

4.4CVSS5AI score0.00036EPSS
Exploits0References2
Rows per page
Query Builder