CVE-2018-9388

CVE-2018-9388 affects the Linux touchscreen driver component ftm4_pdc.c (functions store_upgrade and store_cmd). The issue is out-of-bounds writes caused by missing bounds checks or integer underflows, leading to potential elevation of privilege. Documentation across sources (NVD, Red Hat, CVE li...

CVE-2018-9386

CVE-2018-9386 concerns the HTC reboot_block driver. The reboot_block_command may trigger a stack buffer overflow due to a missing bounds check, enabling local privilege escalation to SYSTEM with no user interaction required. Connected sources (NVD, Red Hat, CVE lists) confirm the issue descriptio...

CVE-2018-9462

CVE-2018-9462 describes an out-of-bounds write in the Android kernel component ftm4_pdc.c, within the store_cmd function, caused by an incorrect bounds check. This can enable local escalation of privilege to system execution privileges, with no user interaction required. The description specifies...

CVE-2018-9430

CVE-2018-9430 is an out-of-bounds write in btif_storage.cc (prop2cfg) that can lead to remote code execution without user interaction. Affected: Android Pixel/Nexus devices; root cause described as incorrect bounds check triggering a write beyond limits. Impact: high (RCE), network attack vector ...

CVE-2018-9413

CVE-2018-9413 affects Google Pixel devices (and Android components) via an out-of-bounds write in the function handling Bluetooth notifications: btif_rc.cc handle_notification_response. The issue enables remote code execution with no extra privileges, requiring user interaction for exploitation. ...

CVE-2018-9376

CVE-2018-9376 affects the Mediatek ECCCI Port RPC kernel code (drivers/misc/mediatek/eccci/port_rpc.c). The root cause is an incorrect bounds check that can lead to an out-of-bounds write. This may allow local escalation of privilege with System execution privileges, and exploitation does not req...

PT-2024-35779 · Sangoma · Asterisk

Name of the Vulnerable Software and Affected Versions: Sangoma Asterisk versions 22.0.0-pre1 through 22.0.0-rc2 Description: The issue is related to the action listcategories function, which allows attackers to execute a path traversal. This could potentially lead to unauthorized access to...

CVE-2017-13320

CVE-2017-13320 affects libmpeg2dec, specifically the impeg2d_bit_stream_flush() function, where a missing bounds check can cause an out-of-bounds read. This leads to a remote denial-of-service possibility with no different privileges required; exploitation requires user interaction. Public source...

CVE-2018-5852

CVE-2018-5852 describes an unsigned integer underflow in the Qualcomm IPA driver that results in a buffer over-read when reading NAT entries via the debugfs path /sys/kernel/debug/ipa/ip4_nat. The vulnerability is tied to the IPA driver component and affects Qualcomm chipsets; the underlying issu...

CVE-2017-18307

CVE-2017-18307 is linked to Qualcomm chipsets (notably qcacld-3.0) and is described as an information-disclosure vulnerability that can occur during audio playback. The Red Hat and CVE listings corroborate an information leak, with Qualcomm’s product-security notes showing a local attack vector a...

CVE-2017-18306

CVE-2017-18306 refers to an information disclosure in Qualcomm’s camera subsystem (v4l2) within the Snapdragon/Qualcomm components due to an uninitialized variable. The Red Hat and NVD records confirm a local-access information exposure with a high confidentiality impact; the CVE is cataloged und...

CVE-2017-17772

CVE-2017-17772 concerns multiple buffer overread vulnerabilities in WLAN-related code. Across sources, the issue is described as out-of-bounds reads occurring in functions that process 802.11 frames due to insufficient validation, with Qualcomm components (WLAN HOST) explicitly listed in the 2017...

PT-2024-16748 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A vulnerability was reported, but the details were removed due to an error in the candidate number issuance. No information is available about the severity, affected products...

PT-2024-16744 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It mentions a rejected CVE candidate due to an error, with all references and descriptions...

CVE-2018-9456

CVE-2018-9456 affects Google Android components, specifically the SDP utility: sdpu_extract_attr_seq in sdp_utils.cc. The issue is a possible out-of-bounds read due to an incorrect bounds check, enabling remote denial-of-service without extra privileges or user interaction. Connected sources (Red...

CVE-2018-9433

CVE-2018-9433 affects Android’s Framework via the ArrayConcatVisitor in builtins-array.cc, where improper input validation can cause a type confusion vulnerability. The issue could allow remote code execution without extra privileges, with exploitation requiring user interaction per the primary d...

CVE-2018-9419

CVE-2018-9419 describes an information-disclosure flaw: an out-of-bounds read in the BLE path (l2cble_process_sig_cmd in l2c_ble.cc) that can leak remote data without extra privileges or user interaction. Public documents consistently state the impact as information disclosure with no exploitatio...

CVE-2024-53252

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-53251

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-53250

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...