PT-2023-15265 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to 13.0 Description: The issue is related to a missing bounds check in the camera driver, which could lead to a local denial of service. System execution privileges are needed to exploit this issue. Recommendations: For...

UNISOC Chipsets Buffer Error Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets due to a lack of boundary checking in the camera driver module, which may result in out-of-bounds reads...

MediaTek Chip Buffer Error Vulnerability

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips due to a lack of boundary checking in the camera middleware module, which may result in out-of-bounds writes...

PT-2023-5569 · Mediatek · Mediatek Microprogram

Name of the Vulnerable Software and Affected Versions: MediaTek affected versions not specified Description: The issue is related to a buffer overflow in the MediaTek microprogram, which can lead to local escalation of privilege. In the camera middleware, there is a possible out of bounds write d...

CVE-2022-47351: Out-of-bounds Read

In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

UNISOC Chipsets Buffer Error Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets due to a lack of boundary checking in the camera driver module, which may result in out-of-bounds reads...

CVE-2023-30146

Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauthenticated attackers to download a copy of the camera's settings and the administrator credentials...

CVE-2023-30146

Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauthenticated attackers to download a copy of the camera's settings and the administrator credentials...

CVE-2023-30146

Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauthenticated attackers to download a copy of the camera's settings and the administrator credentials...

Command injection

Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauthenticated attackers to download a copy of the camera's settings and the administrator credentials...

CVE-2023-30146

CVE-2023-30146 affects the Assmann Digitus Plug&View IP Camera HT-IP211HDP (firmware 2.000.022). The vulnerability allows unauthenticated remote retrieval of the device settings and administrator credentials via a backup/restore mechanism. Related evidence in public sources describes a plaintext-...

PT-2023-22555

Name of the Vulnerable Software and Affected Versions Assmann Digitus Plug&View IP Camera HT-IP211HDP version 2.000.022 Assmann Digitus Plug&View IP Camera family affected versions not specified, except for version 2.000.022 Description The issue allows unauthenticated attackers to download a cop...

ASSMANN Electronic Digitus Plug&View IP Camera Security Breach

ASSMANN Electronic Digitus Plug&View IP Camera is a plug-and-play camera from ASSMANN Electronic. A security vulnerability exists in the ASSMANN Electronic Digitus Plug&View IP Camera that originates from allowing an unauthenticated attacker to download a copy of the camera settings and...

CVE-2023-30146: Cleartext Storage of Sensitive Information

Assmann Digitus Plug&View IP Camera HT-IP211HDP, version 2.000.022 allows unauthenticated attackers to download a copy of the camera's settings and the administrator credentials...

GHSA-99P5-QPQX-MHWC Code injection in BoofCV

BoofCV 0.42 was discovered to contain a code injection vulnerability via the component boofcv.io.calibration.CalibrationIO.load. This vulnerability is exploited by loading a crafted camera calibration file...

CVE-2023-39010

BoofCV 0.42 was discovered to contain a code injection vulnerability via the component boofcv.io.calibration.CalibrationIO.load. This vulnerability is exploited by loading a crafted camera calibration file...

CVE-2023-39010

BoofCV 0.42 was discovered to contain a code injection vulnerability via the component boofcv.io.calibration.CalibrationIO.load. This vulnerability is exploited by loading a crafted camera calibration file...

CVE-2023-39010

BoofCV 0.42 was discovered to contain a code injection vulnerability via the component boofcv.io.calibration.CalibrationIO.load. This vulnerability is exploited by loading a crafted camera calibration file...

CVE-2023-39010: Improper Control of Generation of Code

BoofCV 0.42 was discovered to contain a code injection vulnerability via the component boofcv.io.calibration.CalibrationIO.load. This vulnerability is exploited by loading a crafted camera calibration file...

TTP-Link EC-70 Camera Code Execution

The vulnerability of the tpsocketbase64decode function in the TTP-Link EC-70 camera’s software lies in the writing of data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...