20568 matches found
CVE-2023-21032
CVE-2023-21032 affects Android 13; the issue is in the function _ufdt_output_node_to_fdt of ufdt_convert.c, causing a possible out-of-bounds read via a heap buffer overflow. The impact is local information disclosure with System privileges required; exploitation does not require user interaction....
CVE-2023-21076
CVE-2023-21076 involves a possible out-of-bounds write due to a heap buffer overflow in the function createTransmitFollowupRequest within nan.cpp. The underlying issue is a heap buffer overflow that could enable a local escalation of privilege with System execution privileges required. Exploitati...
SUSE SLES15: qemu / qemu-arm / qemu-audio-alsa / qemu-audio-pa / qemu-block-curl / etc (SUSE-SU-2023:0878-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0878-1 advisory. - CVE-2022-4144: Fixed unsafe address translation can lead to out-of-bounds read in qxlphys2virt bsc1205808. -...
Google Pixel 缓冲区错误漏洞
Google Pixel is a smartphone from Google Inc USA. Google Pixel suffers from a security vulnerability that stems from a heap buffer overflow with possible out-of-bounds reads...
PT-2023-17753 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a heap buffer overflow in the inflate function of inflate.c, which could lead to a local escalation of privilege without requiring additional execution...
CVE-2023-21032
In ufdtoutputnodetofdt of ufdtconvert.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...
PT-2023-12430 · Upx +1 · Upx +1
Name of the Vulnerable Software and Affected Versions: upx affected versions not specified Description: A heap-based buffer overflow issue was found in upx. The problem occurs when the variable bucket points to an inaccessible address, triggered in the function PackLinuxElf32::invert pt dynamic a...
CVE-2023-21032
In ufdtoutputnodetofdt of ufdtconvert.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...
CVE-2023-20958
In readpaint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-2548031...
CVE-2023-20966
In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...
CVE-2023-20958
CVE-2023-20958 affects the Qt5 QtBase package (qt5-qtbase) used on Android 13. The issue arises in read_paint of ttcolr.c, where a heap buffer overflow can cause an out-of-bounds read, enabling local information disclosure without user interaction. The CVE is referenced in Android’s March 2023 bu...
CVE-2023-21075
In getsvchash of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...
CVE-2023-21075
CVE-2023-21075 affects the Android kernel; the vulnerability is in get_svc_hash inside nan.cpp, caused by an out-of-bounds write due to a heap buffer overflow. The impact is local elevation of privilege with System-level execution privileges required; exploitation is possible without user interac...
CVE-2022-42499
CVE-2022-42499 affects the Android modem component sms_MmConManagement.c, where a heap buffer overflow can cause an out-of-bounds write. This vulnerability could enable remote code execution with no privileges and no user interaction required. Publicly available details in the Red Hat, NVD, and C...
CVE-2022-42499
In smsSendMmCpErrMsg of smsMmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...
CVE-2022-42499
In smsSendMmCpErrMsg of smsMmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...
CVE-2021-43315
A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func getle32. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5349...
CVE-2023-21019
CVE-2023-21019 affects Android 13 components, specifically a heap buffer overflow in ih264e_init_proc_ctxt within ih264e_process.c that can cause an out-of-bounds read and local information disclosure without requiring user interaction or elevated privileges. The vulnerability is documented with ...
