CVE-2023-30665

CVE-2023-30665 describes an improper input validation vulnerability in OnOemServiceMode within the libsec-ril component, leading to a local out-of-bounds read. Reported as a Samsung mobile/SR patch issue (SMR Jul-2023 Release 1), with exploitation requiring local access and low privileges. Public...

CVE-2023-30665

Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to SMR Jul-2023 Release 1 allows local attackers to cause an Out-Of-Bounds read...

CVE-2023-30664

Improper input validation vulnerability in RegisteredMSISDN prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30664

CVE-2023-30664 is an improper input validation vulnerability in Samsung Mobile devices, originating from the RegisteredMSISDN module in the SMR Jul-2023 Release 1. It enables local attackers to launch privileged activities. The issue is tied to Samsung’s patch cycle, with remediation provided in ...

CVE-2023-30663

CVE-2023-30663 describes an improper input validation vulnerability in the Samsung/libsec-ril component, specifically the OemPersonalizationSetLock function, which may allow a local attacker to perform an out-of-bounds write. The issue is tied to Samsung Mobile devices running the affected SMR Ju...

CVE-2023-30659

CVE-2023-30659 affects SAMSUNG Mobile devices, specifically the Transaction module prior to SMR Jul-2023 Release 1. The root cause is improper input validation, enabling local attackers to perform privileged activities. Impact is described as local privilege escalation with high confidentiality, ...

CVE-2023-30658

Improper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30658

The CVE-2023-30658 issue affects the DataProfile module in Samsung devices (SMR Jul-2023 Release 1). Root cause: improper input validation, enabling a local attacker to perform privileged activities. Impact is described as high, with local attack vector and privileges required as low, no user int...

CVE-2023-30658

Improper input validation vulnerability in DataProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30657

The CVE-2023-30657 issue affects Samsung EnhancedAttestationResult and is caused by improper input validation. The vulnerability allows local attackers to execute privileged activities on affected devices. Samsung’s documentation indicates the vulnerability was addressed in the SMR Jul-2023 Relea...

CVE-2023-30656

CVE-2023-30656 concerns LSOItemData with an improper input validation flaw that could allow an attacker to launch certain activities. Technical details in connected documents identify LSOItemData as affected, with impact tied to improper input validation and a requirement that vulnerable versions...

CVE-2023-30655

Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

CVE-2023-30655

Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities...

PT-2023-22862 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Jul-2023 Release 1 Description: The issue is related to an improper input validation vulnerability in the DoOemImeiSetPreconfig function within libsec-ril. This vulnerability allows local attackers to cause an...

ROS-2-1741

2.1741 Vulnerability in SpamAssassin spam filtering tool CVE-2020-1946 1. Vulnerability description: CVE-2020-1946 A vulnerability in the SpamAssassin spam filtering tool, is related to improper input validation when processing rule configuration .cf files. Exploitation of the vulnerability could...

Gitea 输入验证错误漏洞

Gitea is a lightweight Go-based git service developed by the Gitea community. An input validation error vulnerability exists in Gitea versions prior to 1.19.4, which stems from improper input validation of the program. An attacker can exploit this vulnerability to obtain sensitive information...

CVE-2023-25522

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

CVE-2023-25522

CVE-2023-25522 affects NVIDIA DGX A100/A800 SBIOS prior to version 1.21. The issue: improper input validation when configuration information is provided in an unexpected format, which may allow an attacker with local access to cause denial of service, information disclosure, and data tampering. N...

Apache Airflow Hive Provider Beeline remote code execution with Principal

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider. This issue affects Apache Airflow Apache Hive Provider: before 6.1.1. Before version 6.1.1 it was possible to bypass the security check to RCE via principal parameter. For this to be exploited it...

CVE-2023-35797

CVE-2023-35797 affects Apache Airflow Hive Provider prior to 6.1.1 and is an Improper Input Validation vulnerability that can enable remote code execution via the principal parameter when connection details are modifiable. The issue is mitigated by upgrading the provider to version 6.1.1 or later...