Lucene search
K

20 matches found

RedhatCVE
RedhatCVE
added 2025/12/09 5:27 p.m.2 views

CVE-2025-48596

In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.7AI score0.00006EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/08 6:30 p.m.2 views

EUVD-2025-201762

In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.2AI score0.00006EPSS
Exploits0References3
NVD
NVD
added 2025/12/08 5:16 p.m.3 views

CVE-2025-48596

In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00006EPSS
Exploits0References2
OSV
OSV
added 2025/12/08 5:16 p.m.2 views

CVE-2025-48596

In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/12/08 4:57 p.m.1 views

CVE-2025-48596

In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.3AI score0.00006EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/12/08 4:57 p.m.15 views

CVE-2025-48596

In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00006EPSS
Exploits0References2
CVE
CVE
added 2025/12/08 4:57 p.m.8 views

CVE-2025-48596

CVE-2025-48596 is an Android/local privilege-escalation flaw caused by an out-of-bounds read in Parcel.cpp:appendFrom due to a missing bounds check. The issue allows local escalation without extra privileges or user interaction. Public references and Red Hat/EUVD/NVD entries describe the same aff...

7.8CVSS6.3AI score0.00006EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2025/12/01 12:0 a.m.3 views

ASB-A-438098181

In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.6AI score0.00006EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/23 12:0 a.m.2 views

PT-2025-43481

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems due to insufficient input validation. Exploitation of this issue may allow an attacker to escalate privileges. A potentia...

7.8CVSS6.6AI score0.00006EPSS
Exploits0References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-26839

Malicious code in bioql PyPI...

7.8CVSS6.5AI score0.00009EPSS
Exploits0References2
CNVD
CNVD
added 2025/09/08 12:0 a.m.3 views

Google Android elevation of privilege vulnerability (CNVD-2025-23034)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by an out-of-bounds write due to a heap-based buffer overflow in the appendFrom function in Parcel.cpp. An attacker can exploit the vulnerability to...

7.8CVSS8AI score0.00009EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/06 7:31 p.m.4 views

CVE-2025-32325

In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.2AI score0.00009EPSS
Exploits0References1
OSV
OSV
added 2025/09/04 7:15 p.m.0 views

CVE-2025-32325

In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.2AI score0.00009EPSS
Exploits0References2
NVD
NVD
added 2025/09/04 7:15 p.m.3 views

CVE-2025-32325

In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.00009EPSS
Exploits0References2
CVE
CVE
added 2025/09/04 6:33 p.m.20 views

CVE-2025-32325

CVE-2025-32325 is a local elevation-of-privilege vulnerability in Android’s Parcel.cpp: in appendFrom, a heap-based out-of-bounds write could occur, enabling local privilege escalation without extra execution privileges or user interaction. Multiple connected sources (NVD/NCSC/CNVD/CVELIST, OSV) ...

7.8CVSS6.7AI score0.00009EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/04 6:33 p.m.1 views

CVE-2025-32325

In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.6AI score0.00009EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/09/04 12:0 a.m.2 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by an out-of-bounds write due to a heap-based buffer overflow in the appendFrom function in Parcel.cpp. An attacker can exploit the vulnerability to...

7.8CVSS7.9AI score0.00009EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2015/10/01 12:59 a.m.27 views

CVE-2015-3845

The Parcel::appendFrom function in libs/binder/Parcel.cpp in Binder in Android before 5.1.1 LMY48M does not consider parcel boundaries during identification of binder objects in an append operation, which allows attackers to obtain a different application's privileges via a crafted application, a...

6.8CVSS5.9AI score0.00077EPSS
Exploits0References3
OSV
OSV
added 2015/10/01 12:59 a.m.1 views

UBUNTU-CVE-2015-3845

The Parcel::appendFrom function in libs/binder/Parcel.cpp in Binder in Android before 5.1.1 LMY48M does not consider parcel boundaries during identification of binder objects in an append operation, which allows attackers to obtain a different application's privileges via a crafted application, a...

6.8CVSS5.8AI score0.00077EPSS
Exploits0References4
CVE
CVE
added 2015/10/01 12:0 a.m.58 views

CVE-2015-3845

CVE-2015-3845 affects Android Binder’s Parcel handling: the Parcel::appendFrom function in libs/binder/Parcel.cpp does not consider parcel boundaries when identifying binder objects, in Android versions before 5.1.1 LMY48M. The underlying flaw can allow a crafted application to obtain privileges ...

6.8CVSS6.5AI score0.00077EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder