4960 matches found
SUSE-SU-2019:1601-1 Security update for sqlite3
This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2019-8457: Fixed a Heap out-of-bound read in rtreenode when handling invalid rtree tables bsc1136976...
CVE-2019-2020
In llcpdlcprocrrrnrpdu of llcpdlc.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1...
CVE-2019-2017
In rwt2thandletlvdetectrsp of rwt2tndef.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...
CVE-2018-9564
In llcputilparselinkparams of llcputil.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...
CVE-2019-2019
In cet4tdatacback of cet4t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1...
CVE-2018-9561
In llcputilparseconnect of llcputil.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...
CVE-2019-2022
In rwt3tacthandlefmtrsp and rwt3tacthandlesrorsp of rwt3t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...
Out-of-bounds
In cet4tdatacback of cet4t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1...
Out-of-bounds
In rwt3tacthandlendefdetectrsp of rwt3t.cc, there is a possible out-of-bound read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...
CVE-2019-2014
In rwt3thandlegetscpollrsp of rwt3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...
CVE-2019-2010
In phNxpNciHalprocessextrsp of phNxpNciHalext.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2019-2012
In rwt3tacthandlefmtrsp of rwt3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1...
CVE-2019-2015
In rwt3tacthandlecheckrsp of rwt3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...
CVE-2019-2013
In rwt3tacthandlesrorsp of rwt3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1...
CVE-2019-2016
In NFASendRawFrame of nfadmapi.cc, there is a possible out-of-bound write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...
Input validation
In NFASendRawFrame of nfadmapi.cc, there is a possible out-of-bound write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...
Out-of-bounds
In rwt3thandlegetscpollrsp of rwt3t.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0...
Out-of-bounds
In phNxpNciHalprocessextrsp of phNxpNciHalext.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
CVE-2018-9561
CVE-2018-9561 affects Android components: in llcp_util_parse_connect of llcp_util.cc there is a missing bounds check that enables an out-of-bounds read leading to local information disclosure. Affected products include Android 7.0 through 9 (per NVD/Red Hat/CVE listings); exploitation requires us...
CVE-2019-2021
CVE-2019-2021 describes an information-disclosure flaw in the Android rw_t3t.cc component: in rw_t3t_act_handle_ndef_detect_rsp there is a missing bounds check that allows an out-of-bounds read. This could enable local information disclosure with no execution privileges required, and exploitation...