Lucene search
K

40 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:38 p.m.5 views

CVE-2023-50430

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

6.4CVSS7.3AI score0.0001EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2017-0976

Malware in sbrugna...

7.6CVSS7.2AI score0.00174EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-11610

Malware in sbrugna...

7.5CVSS7.5AI score0.00281EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2013-4590

Malware in sbrugna...

6.9CVSS6.4AI score0.00123EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2013-5951

Malware in sbrugna...

6.9CVSS6.4AI score0.00055EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-30662

Malicious code in bioql PyPI...

7.8CVSS6.6AI score0.00028EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:19 a.m.3 views

CVE-2024-32892

In handleinit of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7AI score0.00028EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/13 9:1 p.m.19 views

CVE-2024-32892

In handleinit of goodix/main/main.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

0.00028EPSS
Exploits0References1
Lenovo
Lenovo
added 2024/03/12 4:32 p.m.4 views

Fingerprint Reader Vulnerabilities - Lenovo Support US

No description provided...

7.3AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 2023/12/09 10:15 p.m.0 views

CVE-2023-50430

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

6.4CVSS6.6AI score0.0001EPSS
Exploits1References2
NVD
NVD
added 2023/12/09 10:15 p.m.12 views

CVE-2023-50430

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

6.4CVSS0.0001EPSS
Exploits1References1
Prion
Prion
added 2023/12/09 10:15 p.m.12 views

Authentication flaw

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

3.7CVSS7.5AI score0.0001EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/12/09 12:0 a.m.1 views

Dell Inspiron Security Breach

The Dell Inspiron is a line of laptop computers from Dell Inc. in the United States. The Dell Inspiron 15 suffers from a security vulnerability that stems from the Goodix fingerprinting device shipped with the computer not following the Secure Device Connection Protocol SDCP when enrolling via...

6.4CVSS6.9AI score0.0001EPSS
Exploits1References2
CVE
CVE
added 2023/12/09 12:0 a.m.35 views

CVE-2023-50430

The CVE-2023-50430 entry describes a vulnerability in the Goodix fingerprint device shipped with Dell Inspiron 15 laptops. The issue is that the device does not follow the Secure Device Connection Protocol (SDCP) during Linux enrollment and accepts an unauthenticated configuration packet to selec...

6.4CVSS6.6AI score0.0001EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/12/09 12:0 a.m.13 views

CVE-2023-50430

The Goodix Fingerprint Device, as shipped in Dell Inspiron 15 computers, does not follow the Secure Device Connection Protocol SDCP when enrolling via Linux, and accepts an unauthenticated configuration packet to select the Windows template database, which allows bypass of Windows Hello...

6.8AI score0.0001EPSS
Exploits1References1
The Hacker News
The Hacker News
added 2023/11/22 3:23 p.m.96 views

New Flaws in Fingerprint Sensors Let Attackers Bypass Windows Hello Login

A new research has uncovered multiple vulnerabilities that could be exploited to bypass Windows Hello authentication on Dell Inspiron 15, Lenovo ThinkPad T14, and Microsoft Surface Pro X laptops. The flaws were discovered by researchers at hardware and software product security and offensive...

6.1CVSS7AI score0.00442EPSS
Exploits0
CNVD
CNVD
added 2018/12/11 12:0 a.m.2 views

Xiaomi Mi A2 Lite and RedMi6 pro Goodix GT9xx Touchscreen Driver Code Issue Vulnerability

The Xiaomi Mi A2 Lite and RedMi6 pro are both smartphones from Chinese company Xiaomi Technology Xiaomi. A code issue vulnerability exists in the Goodix GT9xx touchscreen driver used to customize the Goodix GT9xx in the Xiaomi Mi A2 Lite and RedMi6 pro 2018-08-27 and prior versions. The...

7.5CVSS7AI score0.00281EPSS
Exploits0References1
OSV
OSV
added 2018/12/07 9:29 a.m.2 views

CVE-2018-19939

The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtpreadColor in drivers/input/touchscreen/gt917d/gt9xx.c...

7.5CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2018/12/07 9:29 a.m.13 views

Null pointer dereference

The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtpreadColor in drivers/input/touchscreen/gt917d/gt9xx.c...

5CVSS7.6AI score0.00281EPSS
Exploits0References1Affected Software2
NVD
NVD
added 2018/12/07 9:29 a.m.8 views

CVE-2018-19939

The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtpreadColor in drivers/input/touchscreen/gt917d/gt9xx.c...

7.5CVSS7.6AI score0.00281EPSS
Exploits0References1
Rows per page
Query Builder