Lucene search
K

3774 matches found

Positive Technologies
Positive Technologies
added 2023/03/24 12:0 a.m.5 views

PT-2023-17859 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel affected versions not specified Description: The issue concerns the Android kernel. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents whe...

7.5CVSS7.5AI score0.00267EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2023/03/24 12:0 a.m.4 views

PT-2023-17867 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write due to a heap buffer overflow in the get svc hash function of nan.cpp. This could lead to local escalation of privilege with System execution privileges needed...

6.7CVSS6.8AI score0.00099EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/03/24 12:0 a.m.5 views

CVE-2022-42499

In smsSendMmCpErrMsg of smsMmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

9.4AI score0.00503EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/03/24 12:0 a.m.5 views

PT-2023-17845 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is caused by a logic error in the code of EUTRAN LCS ConvertLCS MOLRReq in LPP CommonUtil.c, leading to a possible out of bounds write. This could result in remote code execution with System execution...

7.2CVSS7.4AI score0.00539EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2023/03/24 12:0 a.m.6 views

CVE-2023-21069

In wlupdatehiddenapie of wlcfgscan.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID...

6.8AI score0.00095EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/03/24 12:0 a.m.4 views

PT-2023-17837 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds read in the ConvertToHalMetadata function of aidl utils.cc due to a missing bounds check. This could lead to local information disclosure, requiring System execution...

4.4CVSS4.3AI score0.00097EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/03/24 12:0 a.m.5 views

PT-2023-17847 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible memory corruption due to type confusion in the lwis slc buffer free function of lwis device slc.c. This could lead to local escalation of privilege with System execution privilege...

6.7CVSS6.9AI score0.00095EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/03/24 12:0 a.m.4 views

PT-2023-17871 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a heap buffer overflow in the rtt unpack xtlv cbfn function of dhd rtt.c, which could lead to a possible out of bounds write. This may result in local escalation of privilege, requiring Syst...

6.7CVSS7AI score0.00099EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/03/24 12:0 a.m.5 views

PT-2023-17861 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible out of bounds write in the wl update hidden ap ie function of wl cfgscan.c due to a missing bounds check. This could lead to local escalation of privilege with System execution...

6.7CVSS6.6AI score0.00095EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/03/03 3:55 a.m.1 views

SUSE CVE-2022-20567

In pppol2tpcreate of l2tpppp.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.4CVSS6.9AI score0.0011EPSS
Exploits0References8
OSV
OSV
added 2023/02/28 5:15 p.m.5 views

CVE-2023-20938

In bindertransactionbufferrelease of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.8CVSS7.7AI score
Exploits0References2
NVD
NVD
added 2023/02/28 5:15 p.m.18 views

CVE-2023-20938

In bindertransactionbufferrelease of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

8.1CVSS7.7AI score0.00332EPSS
Exploits1References1
OSV
OSV
added 2023/02/28 5:15 p.m.3 views

DEBIAN-CVE-2023-20938

In bindertransactionbufferrelease of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.8CVSS6.6AI score0.00332EPSS
Exploits1References1
Prion
Prion
added 2023/02/28 5:15 p.m.19 views

Input validation

In bindertransactionbufferrelease of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

4.3CVSS7.5AI score0.00332EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2023/02/28 5:15 p.m.74 views

CVE-2023-20938

In bindertransactionbufferrelease of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

8.1CVSS7AI score0.00332EPSS
Exploits1References13
OSV
OSV
added 2023/02/28 5:15 p.m.2 views

UBUNTU-CVE-2023-20937

In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.8CVSS5.9AI score0.00217EPSS
Exploits4References11
OSV
OSV
added 2023/02/28 5:15 p.m.0 views

UBUNTU-CVE-2023-20938

In bindertransactionbufferrelease of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

8.1CVSS6.8AI score0.00332EPSS
Exploits1References14
Vulnrichment
Vulnrichment
added 2023/02/28 12:0 a.m.6 views

CVE-2023-20937

In several functions of the Android Linux kernel, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.5AI score0.00217EPSS
Exploits4References2
Debian CVE
Debian CVE
added 2023/02/28 12:0 a.m.44 views

CVE-2023-20938

In bindertransactionbufferrelease of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

8.1CVSS6.6AI score0.00332EPSS
Exploits1
F5 Networks
F5 Networks
added 2023/02/21 6:53 p.m.39 views

K19473400: Linux Kernel vulnerability CVE-2018-9516

Security Advisory Description In hiddebugeventsread of drivers/hid/hid-debug.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product...

7.8CVSS7AI score0.00396EPSS
Exploits0
Rows per page
Query Builder