Lucene search
+L

64 matches found

Prion
Prion
added 2023/02/28 5:15 p.m.20 views

Input validation

In bindertransactionbufferrelease of binder.c, there is a possible use after free due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

4.3CVSS7.5AI score0.00332EPSS
Exploits1References1
SUSE CVE
SUSE CVE
added 2023/02/15 4:19 a.m.5 views

SUSE CVE-2019-2214

In bindertransaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid...

7.8CVSS8.7AI score0.00333EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/01/16 12:0 a.m.8 views

The vulnerability of the binder.c component in the Linux operating system’s kernel allows a hacker to increase their privileges.

The vulnerability of the binder.c component in Linux operating systems is related to errors during multi-threaded tasks race conditions. Exploiting this vulnerability can allow an attacker to gain increased privileges...

7.8CVSS6.3AI score0.0018EPSS
Exploits0References20Affected Software3
Debian CVE
Debian CVE
added 2022/10/11 12:0 a.m.96 views

CVE-2022-20421

In binderincreffornode of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid I...

7.8CVSS6.1AI score0.00645EPSS
Exploits1
OpenVAS
OpenVAS
added 2022/08/18 12:0 a.m.29 views

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-2257)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.4AI score0.02976EPSS
Exploits7References2
ATTACKERKB
ATTACKERKB
added 2022/03/16 3:15 p.m.4 views

CVE-2021-39686

In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7CVSS7.3AI score0.00148EPSS
Exploits0References2
NVD
NVD
added 2022/03/16 3:15 p.m.18 views

CVE-2021-39686

In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7CVSS0.00148EPSS
Exploits0References1
Prion
Prion
added 2022/03/16 3:15 p.m.23 views

Race condition

In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

6.9CVSS6.7AI score0.00148EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2022/03/16 3:15 p.m.32 views

CVE-2021-39686

In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7CVSS7.3AI score0.00148EPSS
Exploits0References6
OSV
OSV
added 2022/03/16 3:15 p.m.4 views

UBUNTU-CVE-2021-39686

In several functions of binder.c, there is a possible way to represent the wrong domain to SELinux due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7CVSS7.3AI score0.00148EPSS
Exploits0References7
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.54 views

Android Kernel Use-After-Free Vulnerability

Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain "AbstractEmu."...

7.8CVSS7.2AI score0.72105EPSS
In wildExploits28
RedhatCVE
RedhatCVE
added 2021/03/04 2:5 p.m.35 views

CVE-2020-0423

A use-after-free flaw was found in the binderreleasework of binder.c due to improper locking. This flaw can lead to the local escalation of privileges in the kernel where no additional execution privileges are needed. User interaction is not needed for exploitation. The highest threat to this...

7.8CVSS2.8AI score0.00507EPSS
Exploits2References4
OSV
OSV
added 2020/10/01 12:0 a.m.38 views

ASB-A-161151868

In binderreleasework of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.5AI score0.00507EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2020/04/08 5:19 a.m.31 views

CVE-2018-20510

The printbindertransactionilocked function in drivers/android/binder.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "from code flags" lines in a debugfs file...

5.5CVSS2.8AI score0.0041EPSS
Exploits0References3
NVD
NVD
added 2020/03/10 8:15 p.m.21 views

CVE-2020-0041

In bindertransaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.8CVSS7.7AI score0.03246EPSS
Exploits6References2
OSV
OSV
added 2020/03/10 8:15 p.m.1 views

DEBIAN-CVE-2020-0041

In bindertransaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.8CVSS8AI score0.03246EPSS
Exploits6References1
UbuntuCve
UbuntuCve
added 2020/03/10 8:15 p.m.34 views

CVE-2020-0041

In bindertransaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.8CVSS7.4AI score0.03246EPSS
Exploits6References3
Vulnrichment
Vulnrichment
added 2020/03/10 7:56 p.m.10 views

CVE-2020-0041

In bindertransaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

7.1AI score0.03246EPSS
Exploits6References1
CVE
CVE
added 2020/02/13 2:22 p.m.79 views

CVE-2020-0030

CVE-2020-0030 describes a race condition in binder_thread_release within binder.c, leading to a use-after-free that can enable local privilege escalation without additional privileges or user interaction. Affected component is the Android/Linux kernel (binder subsystem). The provided connected do...

7CVSS6.9AI score0.00152EPSS
Exploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2019/11/13 6:15 p.m.21 views

CVE-2019-2213

In binderfreetransaction of binder.c, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.4CVSS7.3AI score0.00146EPSS
Exploits0References2
Rows per page
Query Builder