CVE-2018-20823

The CVE-2018-20823 issue affects the gyroscope on Xiaomi Mi 5s devices, where a 20.4 kHz MEMS ultrasonic signal can cause resonance, producing false data and a denial-of-service condition. This vulnerability is documented across multiple sources (NVD, Red Hat, CVE listings, PT-Security, etc.), id...

CVE-2018-20823

The gyroscope on Xiaomi Mi 5s devices allows attackers to cause a denial of service resonance and false data via a 20.4 kHz audio signal, aka a MEMS ultrasound attack...

PT-2019-10262 · Xiaomi · Xiaomi Mi 5S

Name of the Vulnerable Software and Affected Versions: Xiaomi Mi 5s affected versions not specified Description: The issue concerns the gyroscope on Xiaomi Mi 5s devices, which can be exploited by attackers to cause a denial of service. This can be achieved by using a 20.4 kHz audio signal, also...

CVE-2014-9689

content/renderer/devicesensors/deviceorientationeventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that...

UBUNTU-CVE-2014-9689

content/renderer/devicesensors/deviceorientationeventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that...

CVE-2014-9689

content/renderer/devicesensors/deviceorientationeventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that...

Design/Logic Flaw

content/renderer/devicesensors/deviceorientationeventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that...

CVE-2014-9689

content/renderer/devicesensors/deviceorientationeventpump.cc in Google Chrome before 41.0.2272.76 does not properly restrict access to high-rate gyroscope data, which makes it easier for remote attackers to obtain speech signals from a device's physical environment via a crafted web site that...

CVE-2014-9689

Removed by vendor...

CVE-2014-9689

CVE-2014-9689 : Chrome up to 41.0.2272.76 may expose high‑rate gyroscope data via content/renderer/device_sensors/device_orientation_event_pump.cc, enabling remote sites to infer ambient speech signals through ondeviceorientation events. The vulnerability stems from insufficient restriction of de...

Mouse-Box — An Entire Computer inside a Mouse

Smartphones in our pockets are exponentially smaller and more powerful that they don't realize the need to carry laptops with us everywhere. Now imagine if a small mouse meets the need of the entire PC? Not just imagination, it has been proved and done by the engineers at a Polish startup...

Android Update Adds Protections For Mobile Clickjacking

Google released the latest version of its Android mobile operating system on Monday, adding security features that it says will make it tougher for mobile device users to be subjected to “clickjacking” attacks that trick them into clicking on hidden or disguised user interface elements. The compa...