CVE-2025-4975

When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device...

CVE-2025-4975 Tapo privilege escalation on shared devices using notifications

When a notification relating to low battery appears for a user with whom the device has been shared, tapping the notification grants full access to the power settings of that device...

CVE-2025-4975

CVE-2025-4975 affects TP-Link TP-LINK Tapo devices. A low-battery notification on a shared device, once tapped, grants full access to the device’s power settings. The vulnerability is linked to notification handling in shared sessions, enabling local access with low privileges and no user interac...

CVE-2021-25471

A lack of replay attack protection in Security Mode Command process prior to SMR Oct-2021 Release 1 can lead to denial of service on mobile network connection and battery depletion...

CVE-2021-23243

In Oppo's battery application, the third-party SDK provides the function of loading a third-party Provider, which can be used...

CVE-2020-0312

In Battery Saver, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153879099...

CVE-2020-12346

Improper permissions in the installer for the IntelR Battery Life Diagnostic Tool before version 1.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-13425

TrackR devices through 2020-05-06 allow attackers to trigger the Beep aka alarm feature, which will eventually cause a denial of service when battery capacity is exhausted...

TP-LINK Tapo 安全漏洞

TP-LINK Tapo is a series of secure WiFi cameras from China P&L TP-LINK. A security vulnerability exists in TP-LINK Tapo versions prior to 3.10.513, which stems from a low battery notification that could lead to a user of a shared device gaining full power settings access...

EnerSys AMPA 安全漏洞

EnerSys AMPA is an industrial-grade battery management system from EnerSys, Inc. designed as an intelligent monitoring platform for power equipment. A security vulnerability exists in EnerSys AMPA versions 24.04 through 24.16 that stems from a command injection issue that could lead to privileged...

EnerSys AMPA 安全漏洞

EnerSys AMPA is an industrial-grade battery management system from EnerSys, Inc. designed as an intelligent monitoring platform for power equipment. A security vulnerability exists in EnerSys AMPA version 22.09 and earlier, which stems from a command injection issue that could lead to privileged...

High Battery usage for Wireless Bluetooth Headset with Citrix HDX RTOP Media Engine version 2.3

After migrating from Lync VDI Plugin RTOP 2.0 to RTOP 2.3, the overall battery usage of wireless bluetooth model Jabra Pro 930 headsets is increased by 50%...

SUSE CVE-2025-21952

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Update power supply values with a unified work handler corsairvoidprocessreceiver can be called from an interrupt context, locking batterymutex in it was causing a kernel panic. Fix it by moving the critical...

UBUNTU-CVE-2025-21952

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Update power supply values with a unified work handler corsairvoidprocessreceiver can be called from an interrupt context, locking batterymutex in it was causing a kernel panic. Fix it by moving the critical...

CVE-2025-21952 HID: corsair-void: Update power supply values with a unified work handler

In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Update power supply values with a unified work handler corsairvoidprocessreceiver can be called from an interrupt context, locking batterymutex in it was causing a kernel panic. Fix it by moving the critical...

PT-2025-14333 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been resolved, related to the HID corsair-void component. The corsair void process receiver function can be called from an interrupt context, and lockin...

The vulnerability of the bq27xxx_battery_i2c_remove() function in the drivers/power/supply/bq27xxx_battery_i2c.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the bq27xxxbatteryi2cremove function in the drivers/power/supply/bq27xxxbatteryi2c.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-30117

An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. After bypassing the device pairing, an attacker can obtain sensitive user and vehicle information...

CVE-2025-30107

On IROAD V9 devices, Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. A vulnerability in the dashcam's configuration management allows unauthorized users to modify settings, disable critical functions, and turn off battery...

CVE-2025-30138

An issue was discovered on G-Net Dashcam BB GONX devices. Managing Settings and Obtaining Sensitive Data and Sabotaging Car Battery can be performed by unauthorized persons. It allows unauthorized users to modify critical system settings once connected to its network. Attackers can extract...