PT-2023-11665 · Rockcarry · Ffjpeg

Name of the Vulnerable Software and Affected Versions: rockcarry ffjpeg versions 1.0.0 and earlier Description: The issue is related to a Buffer Overflow vulnerability in the jfif decode function, which allows local attackers to execute arbitrary code due to an issue with ALIGN. This vulnerabilit...

PT-2023-12127 · Xnview · Xnview

Name of the Vulnerable Software and Affected Versions: XNView version 2.49.3 Description: The issue allows local attackers to execute arbitrary code via a crafted TIFF file. This is a Buffer Overflow vulnerability. Recommendations: For XNView version 2.49.3, update to a version that fixes this...

CVE-2023-30687

Out-of-bounds Write in RmtUimApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30689

Out-of-bounds Write in BuildOemEmbmsGetSigStrengthResponse of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30694

Out-of-bounds Write in IpcTxPcscTransmitApdu of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30686

Out-of-bounds Write in ReqDataRaw of libsec-ril prior to SMR Aug-2023 Release 1 allows local attacker to execute arbitrary code...

CVE-2023-30702

Affected software: SSHDCPAPP TA on Samsung Windows Update for Galaxy Book Go, Galaxy Book Go 5G, Galaxy Book2 Go, and Galaxy Book2 Pro 360. Root cause: a stack overflow in SSHDCPAPP TA prior to the Samsung System Hardware Update dated 7/13/2023. Impact: enables a local attacker to execute arbitra...

PT-2023-22893 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Aug-2023 Release 1 Description: The issue is related to an out-of-bounds write in the IpcTxPcscTransmitApdu function of libsec-ril. This allows a local attacker to execute arbitrary code. Recommendations: For...

PT-2023-22892 · Unknown · Libsec-Ril

Name of the Vulnerable Software and Affected Versions: libsec-ril versions prior to SMR Aug-2023 Release 1 Description: The issue is related to an out-of-bounds write in the DoOemFactorySendFactoryBypassCommand of libsec-ril, allowing a local attacker to execute arbitrary code. Recommendations: F...

PT-2023-22902 · Samsung +1 · Galaxy Book2 Pro 360 +5

Name of the Vulnerable Software and Affected Versions: SSHDCPAPP TA versions prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" Description: A stack overflow issue in SSHDCPAPP TA allows a local attacker to execute arbitrary code. This affects Windows Update for Galaxy...

PT-2023-22886

Name of the Vulnerable Software and Affected Versions libsec-ril versions prior to SMR Aug-2023 Release 1 Description The issue is related to an out-of-bounds write in the MakeUiccAuthForOem function of libsec-ril, allowing a local attacker to execute arbitrary code. Recommendations For versions...

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR Aug-2023 Release 1 version, which stems from an incorrect access control in the HDCP trustlet allowing a local...

CVE-2023-33469

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect 2 and VIA Go 2 devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level...

PT-2023-24350 · Kramerav · Kramerav Via Connect +1

Name of the Vulnerable Software and Affected Versions: KramerAV VIA Connect 2 versions prior to 4.0.1.1326 KramerAV VIA Go 2 versions prior to 4.0.1.1326 Description: The issue allows for local code execution at the root level when the screen is visible and remote mouse connection is enabled. Thi...

CVE-2023-33469

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect 2 and VIA Go 2 devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level...

CVE-2023-33469

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect 2 and VIA Go 2 devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level...

CVE-2023-33469: Improper Control of Generation of Code

In instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect 2 and VIA Go 2 devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level...

CVE-2023-33469

KramerAV VIA Connect (2) and VIA Go (2) are affected by CVE-2023-33469 when screen is visible and a remote mouse connection is enabled. Versions prior to 4.0.1.1326 allow local code execution at root level due to the default remote-mouse startup behavior. Impact is local, with high privileges ris...

CVE-2023-36344

An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for required DLLs and not verifying the signature...

Diebold Nixdorf Vynamic View Console Code Issue Vulnerability

The Diebold Nixdorf Vynamic View Console is a system from Diebold Nixdorf that allows remote changes to all PC-based devices via Intel Active Management Technology AMT BIOS management. A security vulnerability exists in Diebold Nixdorf Vynamic View Console v.5.3.1 and prior versions, which...