CVE-2021-0618

CVE-2021-0618 affects MediaTek’s ape extractor. The vulnerability is a heap buffer overflow that can enable a local out-of-bounds read leading to information disclosure, with no user interaction required. Patch ID ALPS05561394 addresses the issue. Exploitation details are not provided in the acce...

CVE-2021-0617

In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561391; Issue ID: ALPS05561391...

CVE-2021-0617

CVE-2021-0617 affects MediaTek’s ape extractor. The issue is a heap-buffer-overflow–induced out-of-bounds read in the extractor, leading to local information disclosure without privilege or user interaction. Patch ALPS05561391/ALPS05561391 is referenced as remediation. No exploitation details are...

CVE-2021-0616

In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561389; Issue ID: ALPS05561389...

CVE-2021-0616

CVE-2021-0616 affects the MediaTek ape extractor. The issue is a heap buffer overflow causing an out-of-bounds read, leading to local information disclosure without extra privileges or user interaction. Affected component is the ape extractor (buffer handling) and the documents consistently descr...

MediaTek ape extractor 缓冲区错误漏洞

MediaTek ape extractor is a chipset from China's MediaTek Mediatek. MediaTek ape extractor suffers from a buffer error vulnerability that stems from a heap buffer overflow, where an out-of-bounds read may occur. This could result in the disclosure of local information without additional execute...

MediaTek ape extractor 缓冲区错误漏洞

MediaTek ape extractor is a chipset from China's MediaTek Mediatek. MediaTek ape extractor suffers from a buffer error vulnerability that stems from a heap buffer overflow, where an out-of-bounds read may occur. This could result in the disclosure of local information without additional execute...

MediaTek ape extractor 缓冲区错误漏洞

MediaTek ape extractor is a chipset from China's MediaTek Mediatek. MediaTek ape extractor suffers from a buffer error vulnerability that stems from a heap buffer overflow, where an out-of-bounds read may occur. This could result in the disclosure of local information without additional execute...

Ape Programming client software suffers from a DLL hijacking vulnerability

Ape Programming is a children's programming learning tool with a beautiful interface, practical functions and convenient operation. Ape Programming client software has a DLL hijacking vulnerability, which can be exploited by an attacker to inject an executable DLL file into the client process to...

Ape Tutoring (Windows client) suffers from a dll hijacking vulnerability

Ape Tutoring is online tutoring software for all subjects in elementary, middle and high school. Ape Tutoring Windows client suffers from a dll hijacking vulnerability. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

CVE-2020-11135

u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, Kamorta, MSM8917, MSM8953, Nicobar, QCM2150, QCS605, QM215, Rennell, SA6155P, SA8155P, Saipan, SDM429, SDM439,...

Code injection

u'Reachable assertion when wrong data size is returned by parser for ape clips' in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in APQ8098, Kamorta, MSM8917, MSM8953, Nicobar, QCM2150, QCS605, QM215, Rennell, SA6155P, SA8155P, Saipan, SDM429, SDM439,...

Command Execution Vulnerability in Ape Tutoring Client for Windows

Ape Tutoring is online tutoring software for all subjects in elementary, middle and high school. A command execution vulnerability exists in the Windows version of the Ape Tutoring client, which can be exploited by attackers to execute malicious code...

Code execution vulnerability in Ape Programming client

Ape Programming Client is a platform under Ape Tutoring that specializes in online education for youth programming. A code execution vulnerability exists in Ape Programming Client, which can be exploited by attackers to execute malicious code...

WordPress Photo Gallery – Image Gallery by Ape plugin <= 2.0.6 - Authenticated Arbitrary plugin deactivation

Authenticated Arbitrary plugin deactivation found by Jerome Bruandet in WordPress Photo Gallery – Image Gallery by Ape plugin versions = 2.0.6. Solution Update the WordPress Photo Gallery – Image Gallery by Ape plugin to the latest available version at least 2.0.7...

Photo Gallery – Image Gallery by Ape <= 2.0.6 - Authenticated Arbitrary Plugin Deactivation

The Photo Gallery – Image Gallery by Ape WordPress plugin was affected by an Authenticated Arbitrary Plugin Deactivation security vulnerability...

CVE-2019-11899

An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition APE 3.8, client installations need to be authorized by the APE administrator...

CVE-2019-11898

Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The service tool is discontinued with Bosch Access Professional Edition APE 3.8...

Code injection

Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The service tool is discontinued with Bosch Access Professional Edition APE 3.8...

Information disclosure

An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition APE 3.8, client installations need to be authorized by the APE administrator...