Lucene search
+L

1313 matches found

NVD
NVD
•added 2023/08/07 4:15 a.m.•31 views

CVE-2023-20786

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767811; Issue ID: ALPS07767811...

6.7CVSS6.8AI score0.00095EPSS
SaveExploits0References1
Prion
Prion
•added 2023/08/07 4:15 a.m.•36 views

Out-of-bounds

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767811; Issue ID: ALPS07767811...

4CVSS6.7AI score0.00095EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/07 3:21 a.m.•13 views

CVE-2023-20786

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767811; Issue ID: ALPS07767811...

7.4AI score0.00095EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/08/07 3:21 a.m.•40 views

CVE-2023-20786

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767811; Issue ID: ALPS07767811...

7AI score0.00095EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/07 3:21 a.m.•71 views

CVE-2023-20786

The CVE-2023-20786 entry concerns the MediaTek GPS component. A missing bounds check enables an out-of-bounds write, leading to local escalation of privilege with System execution privileges required. Exploitation does not require user interaction. A patch entry is noted as ALPS07767811 (Issue AL...

6.7CVSS6.7AI score0.00095EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/07 12:00 a.m.•4 views

CVE-2023-20786: Out-of-bounds Write

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767811; Issue ID: ALPS07767811...

6.7CVSS6.9AI score0.00095EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/08/07 12:00 a.m.•19 views

PT-2023-5593 · Mediatek · Mediatek Gps

Name of the Vulnerable Software and Affected Versions: MediaTek GPS component affected versions not specified Description: The issue is related to insufficient input validation in the MediaTek GPS component's firmware, which can lead to a potential out of bounds write due to a missing bounds chec...

6.8CVSS6.5AI score0.00095EPSS
SaveExploits0References4
NVD
NVD
•added 2023/07/04 2:15 a.m.•40 views

CVE-2023-20766

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573202...

6.7CVSS6.8AI score0.00114EPSS
SaveExploits0References1
Prion
Prion
•added 2023/07/04 2:15 a.m.•33 views

Out-of-bounds

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573202...

4CVSS6.7AI score0.00114EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/07/04 1:44 a.m.•14 views

CVE-2023-20766

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573202...

7.4AI score0.00114EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/07/04 1:44 a.m.•52 views

CVE-2023-20766

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573202...

7AI score0.00114EPSS
SaveExploits0References1
CVE
CVE
•added 2023/07/04 1:44 a.m.•57 views

CVE-2023-20766

CVE-2023-20766 describes a local out-of-bounds write in the gps component caused by a missing bounds check, enabling local privilege escalation with system-level execution privileges, and no user interaction required. A patch is available (Patch ID ALPS07573237; Issue ID ALPS07573202). No exploit...

6.7CVSS6.7AI score0.00114EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/07/04 12:00 a.m.•16 views

PT-2023-17627 · Gps · Gps

Name of the Vulnerable Software and Affected Versions: gps affected versions not specified Description: The issue is related to a possible out of bounds write due to a missing bounds check in gps. This could lead to local escalation of privilege with System execution privileges needed. User...

6.7CVSS6.5AI score0.00114EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/07/04 12:00 a.m.•16 views

部分MediaTek芯片 缓冲区错误漏洞

MediaTek chips are various chips from MediaTek, a Chinese company MediaTek. A security vulnerability exists in some MediaTek chips, which stems from a possible out-of-bounds write in GPS due to a lack of boundary checking, resulting in local privilege escalation. The following products are...

6.7CVSS6.6AI score0.00114EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/04 12:00 a.m.•6 views

CVE-2023-20766: Out-of-bounds Write

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573202...

6.7CVSS6.9AI score0.00114EPSS
SaveExploits0References2
Pen Test Partners Blog
Pen Test Partners Blog
•added 2023/06/12 5:13 a.m.•20 views

WhosHere Plus. Trilateration vulnerability

WhosHere Plus is a dating app that uses GPS data to recommend users near to each other, based on similar interests. PTP constantly researches the state of privacy and security in apps that use GPS data, because the consequences of poor security and privacy are alarming: Tracking and snooping on a...

6.4AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/06/02 12:00 a.m.•30 views

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current ntp Multiple Vulnerabilities (SSA:2023-153-02)

The version of ntp installed on the remote host is prior to 4.2.8p16. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2023-153-02 advisory. - mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cpcpdec while loop. An adversary may be able ...

6.4CVSS6.5AI score0.00697EPSS
SaveExploits0References6
OSV
OSV
•added 2023/05/23 8:15 p.m.•19 views

CVE-2023-23299

The permission system implemented and enforced by the GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 can be bypassed entirely. A malicious application with specially crafted code and data sections could access restricted CIQ modules, call their functions and disclose sensitive data...

7.5CVSS5.7AI score0.0081EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/05/23 12:00 a.m.•13 views

CVE-2023-23299

The permission system implemented and enforced by the GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 can be bypassed entirely. A malicious application with specially crafted code and data sections could access restricted CIQ modules, call their functions and disclose sensitive data...

7.4AI score0.0081EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/05/23 12:00 a.m.•44 views

CVE-2023-23299

The permission system implemented and enforced by the GarminOS TVM component in CIQ API version 1.0.0 through 4.1.7 can be bypassed entirely. A malicious application with specially crafted code and data sections could access restricted CIQ modules, call their functions and disclose sensitive data...

7.6AI score0.0081EPSS
SaveExploits1References2
Rows per page
Query Builder