CVE-2026-54436

Heap-based Buffer Overflow in the io-char library's DCMDCHRWAITINFO devctl handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver...

CVE-2026-54437

Improper Input Validation in the io-char library's DCMDCHRTCINJECTC devctl handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver...

EUVD-2026-122791

Heap-based Buffer Overflow in the io-char library's DCMDCHRWAITINFO devctl handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver...

CVE-2026-54436

A Heap-based Buffer Overflow exists in the io-char library 's DCMD_CHR_WAITINFO devctl() handler within the QNX Software Development Platform . This vulnerability could allow a local attacker to cause data tampering, a system crash, or achieve arbitrary code execution in the Character I/O device ...

CVE-2026-54437 Vulnerabilities in the QNX io-char library Impacts QNX Software Development Platform

Improper Input Validation in the io-char library's DCMDCHRTCINJECTC devctl handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver...

EUVD-2026-122788

Improper Input Validation in the io-char library's DCMDCHRTCINJECTC devctl handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver...

CVE-2026-54437

The io-char library contains an Improper Input Validation vulnerability in the DCMD_CHR_TCINJECTC devctl() handler . This flaw could allow an attacker with local access to perform data tampering within the memory input buffer of the Character I/O device driver . No specific remediation or exploit...

PT-2026-144416

Heap-based Buffer Overflow in the io-char library's DCMD CHR WAITINFO devctl handler could allow an attacker with local access to cause data tampering, arbitrary code execution, or a crash in the Character I/O device driver...

PT-2026-144417

Improper Input Validation in the io-char library's DCMD CHR TCINJECTC devctl handler could allow an attacker with local access to cause data tampering in the memory input buffer of the Character I/O device driver...

CVE-2023-20972

In btmvendorspecificevt of btmdevctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

Google Pixel buffer error vulnerability

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from a possible out-of-bounds read due to a lack of bounds checking in btmdevctl.cc's btmdeletestoredlinkkeycomplete, which could lead to the disclosure of local informatio...

CVE-2023-20972

In btmvendorspecificevt of btmdevctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

PT-2023-17760 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: In the btm vendor specific evt function of btm devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution...