Lucene search
+L

4934 matches found

Vulnrichment
Vulnrichment
•added 2021/12/15 6:05 p.m.•11 views

CVE-2021-0920

In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.1AI score0.00867EPSS
SaveExploits0References2
Mend
Mend
•added 2021/12/15 6:05 p.m.•6 views

CVE-2021-0920

In unixscmtoskb of afunix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.1CVSS0.00867EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2021/12/15 6:05 p.m.•48 views

CVE-2021-0924

In xhcivendorgetops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.8AI score0.00159EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2021/12/15 6:05 p.m.•69 views

CVE-2021-0924

In xhcivendorgetops of xhci.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.8CVSS7.6AI score0.00159EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/12/15 6:05 p.m.•74 views

CVE-2021-0929

In iondmabufendcpuaccess and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS7.6AI score0.00163EPSS
SaveExploits0
Cvelist
Cvelist
•added 2021/12/15 6:05 p.m.•67 views

CVE-2021-0929

In iondmabufendcpuaccess and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.9AI score0.00163EPSS
SaveExploits0References1
Mend
Mend
•added 2021/12/15 6:05 p.m.•4 views

CVE-2021-0929

In iondmabufendcpuaccess and related functions of ion.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

8.5CVSS0.00163EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•7 views

PT-2021-13445

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to a possible out of bounds write in the eicOpsDecryptAes128Gcm function of acropora/app/identity/identity support.c due to a missing bounds check. This could lead to local escalation of privileg...

7.8CVSS0.0013EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•7 views

PT-2021-22682

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a possible out of bounds write due to a use after free in the periodic io work func of lwis periodic io.c. This could lead to local escalation of...

6.7CVSS0.00122EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/15 12:00 a.m.•8 views

CVE-2021-39652: Out-of-bounds Write

In sectsparsingcmds of TBD, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.7CVSS5.9AI score0.00127EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•4 views

PT-2021-22680

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to the do ipt get ctl and do ipt set ctl functions in ip tables.c, where uninitialized data can lead to a leak of kernel information. This could result in local information disclosure, requirin...

4.4CVSS0.00227EPSS
SaveExploits0References23
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•26 views

PT-2021-22697 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue allows for local escalation of privilege due to a missing warning to the user, enabling a possible way to boot with a hidden debug policy. This could be exploited by preparing the device, hiding the...

7.8CVSS7.5AI score0.00123EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/15 12:00 a.m.•9 views

CVE-2021-39637: Out-of-bounds Read

In CreateDeviceInfo of trustyremoteprovisioningcontext.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

4.4CVSS5.8AI score0.00123EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•5 views

PT-2021-22692

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible reinitialization of TEE due to improper locking in the mon smc load sp function of gs101-sc/plat/samsung/exynos/soc/exynos9845/smc booting.S. This could lead to local information...

4.4CVSS0.00097EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/15 12:00 a.m.•5 views

CVE-2021-39642: Concurrent Execution using Shared Resource with Improper Synchronization

In synchronousprocessioentries of lwisioctl.c, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...

6.4CVSS5.8AI score0.00089EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•10 views

PT-2021-22695

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue allows access to PIN protected settings without PIN confirmation due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User...

7.8CVSS0.00113EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/15 12:00 a.m.•7 views

CVE-2021-39638: Use After Free

In periodicioworkfunc of lwisperiodicio.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

6.7CVSS5.9AI score0.00122EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•6 views

PT-2021-13447

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to an out of bounds read in the lwis dpm update clock function of lwis device dpm.c due to an incorrect bounds check. This could lead to local information disclosure, requiring System execution...

4.4CVSS0.00123EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•6 views

PT-2021-22694

Name of the Vulnerable Software and Affected Versions: Android kernel versions affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges neede...

6.7CVSS0.00122EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•17 views

PT-2021-22693 · Google · Android Kernel

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to a possible use-after-free in the regmap exit function of regmap.c due to improper locking. This could lead to local escalation of privilege in the kernel, with System execution privileges...

6.7CVSS6.5AI score0.00097EPSS
SaveExploits0References2
Rows per page
Query Builder