PT-2023-18108 · Unknown · Text Services

Name of the Vulnerable Software and Affected Versions: Text Services affected versions not specified Description: In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local...

PT-2023-18149 · Systemui · Systemui

Name of the Vulnerable Software and Affected Versions: System UI affected versions not specified Description: The issue is related to a logic error in the code of System UI, which could allow a factory reset protection bypass. This bypass could lead to local escalation of privilege without...

PT-2023-18076 · Sepolicy · Sepolicy

Name of the Vulnerable Software and Affected Versions: SEPolicy affected versions not specified Description: The issue is related to a permissions bypass in SEPolicy, allowing access to the factory MAC address. This could lead to local information disclosure, with System execution privileges...

PT-2023-18112 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: In the Input Method, there is a possible way to determine whether an app is installed without query permissions due to side channel information disclosure. This could lead to local...

PT-2023-18146 · Unknown · Secure Element

Name of the Vulnerable Software and Affected Versions: Secure Element affected versions not specified Description: In Secure Element, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User...

PT-2023-18101 · Google · Android

Name of the Vulnerable Software and Affected Versions: Settings affected versions not specified Description: The issue allows determining whether an app is installed without query permissions due to side channel information disclosure. This could lead to local information disclosure with no...

PT-2023-18109 · Unknown · Text Services

Name of the Vulnerable Software and Affected Versions: In Text Services affected versions not specified Description: The issue allows determining whether an app is installed without query permissions due to side channel information disclosure. This could lead to local information disclosure with ...

PT-2023-18123 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to a missing bounds check in Bluetooth, which could lead to a possible out of bounds read. This may result in remote information disclosure without requiring addition...

PT-2023-18133 · Nfc · Nfc

Name of the Vulnerable Software and Affected Versions: NFC affected versions not specified Description: The issue is related to a missing bounds check in NFC, which could lead to an out of bounds read. This might result in local information disclosure, requiring System execution privileges for...

PT-2023-18092 · Google · Android

Name of the Vulnerable Software and Affected Versions: In Content affected versions not specified Description: The issue allows determining whether an app is installed without query permissions due to side channel information disclosure. This could lead to local information disclosure with no...

PT-2023-35552 · Apache · Arrow::Ipc::Arrayloader

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow error, which occurs when writing 8 bytes. The error is observed in the arrow::ipc::ArrayLoader component,...

PT-2023-18110 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a logic error in the code of the App Ops Service, which could lead to the disclosure of information about installed packages. This results in local information...

PT-2023-27271 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in the collapse of canonicalize md.c, which could lead to a possible out of bounds read. This may result ...

PT-2023-18084 · Unknown · Content Service

Name of the Vulnerable Software and Affected Versions: Content Service affected versions not specified Description: The issue allows an attacker to determine whether an app is installed without requiring query permissions, due to side channel information disclosure. This could lead to local...

PT-2023-29690 · Unknown · Print Service

Name of the Vulnerable Software and Affected Versions: Print Service affected versions not specified Description: The issue is caused by a logic error in the code of Print Service, allowing for a possible background activity launch. This could lead to local escalation of privilege with no...

PT-2023-18083 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows determining whether an app is installed without query permissions, due to side channel information disclosure. This could lead to local information disclosure with ...

PT-2023-18129 · Nfa · Nfa

Name of the Vulnerable Software and Affected Versions: NFA affected versions not specified Description: The issue is related to a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User...

PT-2023-18073 · Slice · Slice

Name of the Vulnerable Software and Affected Versions: Slice affected versions not specified Description: The issue is related to a missing permission check, which could lead to local information disclosure. No additional execution privileges are needed for exploitation, and user interaction is n...

PT-2023-18154 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth affected versions not specified Description: The issue is related to a possible out of bounds read in Bluetooth due to a missing bounds check. This could lead to local information disclosure in the Bluetooth server, with System...

PT-2023-12075 · Unknown · Kube-Proxy

Name of the Vulnerable Software and Affected Versions: Kube-proxy versions affected versions not specified Description: The issue concerns Kube-proxy on Windows, which can unintentionally forward traffic to local processes listening on the same port spec.ports.port as a LoadBalancer Service. This...