CVE-2018-20019

CVE-2018-20019 refers to LibVNC vulnerabilities where multiple heap out-of-bounds writes in the VNC client code can lead to remote code execution. Connected documents confirm an incomplete fix in the affected LibVNC components (e.g., “Incomplete fix for CVE-2018-20019”) and list LibVNCServer/LibV...

CVE-2018-20020

LibVNC before commit 7b1ef0ffc4815cab9a96c7278394152bdc89dc4d contains heap out-of-bound write vulnerability inside structure in VNC client code that can result remote code execution...

CVE-2018-9569

In impdinitdrcdecodepostconfig of impddrcgaindecoder.c there is a possible out-of-bound write due to incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9...

CVE-2018-9571

In impdparseloudeqinstructions of impddrcdynamicpayload.c there is a possible out-of-bound write due to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9...

CVE-2018-9570

In impdparsedrcextv1 of impddrcdynamicpayload.c there is a possible out-of-bound write due to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9. Android...

CVE-2018-9569

CVE-2018-9569 affects Android 9, involving an out-of-bounds write in impd_init_drc_decode_post_config within impd_drc_gain_decoder.c. The issue originates from an incorrect bounds check, enabling potential remote code execution with no extra privileges required, with user interaction needed for e...

CVE-2018-9570

CVE-2018-9570 affects Android 9 and involves an out-of-bounds write in impd_parse_drc_ext_v1 within impd_drc_dynamic_payload.c. The root cause is missing bounds checking in this function, which could allow remote code execution with a local attacker?no, this CVE entry states remote code execution...

CVE-2018-9571

CVE-2018-9571 affects Android 9, where impd_parse_loud_eq_instructions in impd_drc_dynamic_payload.c allows an out-of-bounds write due to missing bounds checks. This could enable remote code execution with no extra privileges, and exploitation requires user interaction. The vulnerability is docum...

CVE-2018-9571

In impdparseloudeqinstructions of impddrcdynamicpayload.c there is a possible out-of-bound write due to missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-9...

PT-2018-19056

Name of the Vulnerable Software and Affected Versions Android versions prior to Android-9 Description The issue is related to a possible out-of-bound write in the impd parse loud eq instructions function of impd drc dynamic payload.c. This could lead to remote code execution with no additional...

PT-2018-19055

Name of the Vulnerable Software and Affected Versions Android version 9 Description The issue is related to a possible out-of-bound write in the impd parse drc ext v1 function of impd drc dynamic payload.c. This could lead to remote code execution with no additional execution privileges needed...

PT-2018-19054

Name of the Vulnerable Software and Affected Versions Android versions prior to Android-9 Description The issue is related to a possible out-of-bound write in the impd init drc decode post config function of impd drc gain decoder.c. This could lead to remote code execution with no additional...

CVE-2018-9551

In CAacDecoderInit of aacdecoder.cpp, there is a possible out-of-bound write due to a missing bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:...

Out-of-bounds

In CAacDecoderInit of aacdecoder.cpp, there is a possible out-of-bound write due to a missing bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:...

CVE-2018-9551

In CAacDecoderInit of aacdecoder.cpp, there is a possible out-of-bound write due to a missing bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:...

CVE-2018-9551

In CAacDecoderInit of aacdecoder.cpp, there is a possible out-of-bound write due to a missing bounds check. This could lead to remote code execution in the media server with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions:...

CVE-2018-9545

In BTAHdRegisterApp of btahdapi.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Androi...

CVE-2018-9545

In BTAHdRegisterApp of btahdapi.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-9. Androi...

CVE-2018-9545

CVE-2018-9545 affects Android 9, with a local escalation of privilege due to an out-of-bounds write in BTA_HdRegisterApp (bta_hd_api.cc) caused by a missing bounds check. The issue enables a local attacker to potentially escalate privileges without user interaction. The vulnerability is documente...

PT-2018-19045

Name of the Vulnerable Software and Affected Versions Android versions prior to Android-9 Description The issue is related to a possible out-of-bound write in the BTA HdRegisterApp function of bta hd api.cc due to a missing bounds check. This could lead to local escalation of privilege with no...