532 matches found
Mediatek 芯片代码问题漏洞
The Mediatek chip is a smartphone chipset from China's MediaTek Mediatek. A security vulnerability exists in the Mediatek chip, which stems from an incorrect boundary check by asf extractor, which may allow out-of-bounds reads...
CVE-2021-0573
In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187231635...
CVE-2021-0574
In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187234876...
Out-of-bounds
In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187234876...
Out-of-bounds
In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187231635...
CVE-2021-0574
The vulnerability CVE-2021-0574 affects the asf extractor in Android (MediaTek components) where an out-of-bounds write occurs due to a missing bounds check. This can lead to local elevation of privilege with no user interaction required; exploitation details are not provided in the documents. Re...
CVE-2021-0574
In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-187234876...
CVE-2021-0573
Summary: CVE-2021-0573 affects the asf extractor on Android (notably MediaTek components). The root cause is an out-of-bounds write due to a missing bounds check, enabling local escalation of privilege with no user interaction. Impact (as stated): local privilege escalation with partial confident...
Google Android asf extractor elevation of privilege vulnerability (CNVD-2021-63788)
Google Android is a Linux-based open-source operating system from the US company Google. Google Android asf extractor has an elevation of privilege vulnerability that can be exploited by attackers to escalate privileges...
Google Android asf extractor elevation of privilege vulnerability
Google Android is a Linux-based open-source operating system from the US company Google. Google Android asf extractor has an elevation of privilege vulnerability that can be exploited by attackers to escalate privileges...
Google Android 缓冲区错误漏洞
Google Android is a Linux-based open-source operating system from the US company Google. Google Android asf extractor has an elevation of privilege vulnerability that can be exploited by attackers to escalate privileges...
ASB-A-187231635
In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-187234876
In asf extractor, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2021-32794
ArchiSteamFarm is a C application with primary purpose of idling Steam cards from multiple accounts simultaneously. Due to a bug in ASF code POST /Api/ASF ASF API endpoint responsible for updating global ASF config incorrectly removed IPCPassword from the resulting config when the caller did not...
CVE-2021-32794 Accidental removal of IPCPassword (< 5.1.2.4)
ArchiSteamFarm is a C application with primary purpose of idling Steam cards from multiple accounts simultaneously. Due to a bug in ASF code POST /Api/ASF ASF API endpoint responsible for updating global ASF config incorrectly removed IPCPassword from the resulting config when the caller did not...
CVE-2021-32794
ArchiSteamFarm (ASF) is affected by a bug in the POST /Api/ASF endpoint that updates the global ASF config and incorrectly removes IPCPassword when the caller does not specify it. This can allow unauthorized IPC interface access after a config update. The issue has been fixed in ASF v5.1.2.4 and ...
Integer overflow
u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W,...
CVE-2020-11196
u'Integer overflow to buffer overflow occurs while playback of ASF clip having unexpected number of codec entries' in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables in APQ8009, APQ8009W,...