CVE-2024-40659: Buffer Copy without Checking Size of Input

In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. in the United States. A security vulnerability exists in Google Android that stems from the getRegistration method in the RemoteProvisioningService.java file containing an improperly validated input, and there is a...

PT-2020-21611

Name of the Vulnerable Software and Affected Versions mumble versions prior to 1.3.2 Description The issue is related to a potential exploit in the OCB2 encryption. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where...