CVE-2025-20889

Out-of-bounds read in decoding malformed bitstream for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability...

CVE-2025-20889

CVE-2025-20889 is an out-of-bounds read in decoding a malformed bitstream for smp4vtd in libsthmbc.so , prior to the Samsung SMR Jan-2025 Release 1. The vulnerability allows local attackers to read arbitrary memory and requires user interaction to trigger. Affected component is the decoding path ...

CVE-2025-20889

Out-of-bounds read in decoding malformed bitstream for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to read arbitrary memory. User interaction is required for triggering this vulnerability...

CVE-2025-20888

Out-of-bounds write in handling the block size for smp4vtd in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability...

CVE-2025-20886

Inclusion of sensitive information in test code in softsim trustlet prior to SMR Jan-2025 Release 1 allows local privileged attackers to get test key...

CVE-2025-20882

Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability...

CVE-2025-20882

CVE-2025-20882 affects libsthmbc.so (svc1td) with an out-of-bounds write into uninitialized memory, enabling local attackers to execute arbitrary code with privileges. The issue requires user interaction to trigger and is linked to SMR Jan-2025 Release 1. Affected component is libsthmbc.so; vulne...

CVE-2025-20882

Out-of-bounds write in accessing uninitialized memory for svc1td in libsthmbc.so prior to SMR Jan-2025 Release 1 allows local attackers to execute arbitrary code with privilege. User interaction is required for triggering this vulnerability...

CVE-2025-20881

CVE-2025-20881 corresponds to an out-of-bounds write in libsthmbc.so used to store decoded video frames, affecting Samsung Mobile before SMR Jan-2025 Release 1. The vulnerability allows local attackers to execute arbitrary code with privileges, with user interaction required to trigger. Connected...

PT-2025-4181 · Google · Android 12 +2

Name of the Vulnerable Software and Affected Versions: PushNotification versions prior to 13.0.00.15 in Android 12 PushNotification versions prior to 14.0.00.7 in Android 13 PushNotification versions prior to 15.1.00.5 in Android 14 Description: The issue is related to improper access control in...

PT-2025-4178 · Easysetup · Easysetup

Name of the Vulnerable Software and Affected Versions: EasySetup versions prior to 11.1.18 Description: The issue concerns the use of implicit intent for sensitive communication in EasySetup, allowing local attackers to access sensitive information. Recommendations: For versions prior to 11.1.18,...

PT-2025-4188 · Samsung · Samsung Find

Name of the Vulnerable Software and Affected Versions: Samsung Find versions prior to SMR Feb-2025 Release 1 Description: The issue is related to improper privilege management, allowing local privileged attackers to disable Samsung Find. This can be exploited by attackers with local access and...

CVE-2024-55504

An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploitcombined.dylib component on MacOS...

PT-2025-3726 · Avira · Avira Prime

Name of the Vulnerable Software and Affected Versions: Avira Prime affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target...

Avira Prime System Speedup Service Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the System Speedup...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by local attackers to submit special requests that can elevate privileges...

CVE-2024-13043

Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2024-12754 AnyDesk Link Following Information Disclosure Vulnerability

AnyDesk Link Following Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of AnyDesk. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2020-9222

There is a privilege escalation vulnerability in Huawei FusionCompute product. Due to insufficient verification on specific files that need to be deserialized, local attackers can exploit this vulnerability to elevate permissions. Vulnerability ID: HWPSIRT-2020-05241 This vulnerability has been...

CVE-2020-9222

There is a privilege escalation vulnerability in Huawei FusionCompute product. Due to insufficient verification on specific files that need to be deserialized, local attackers can exploit this vulnerability to elevate permissions. Vulnerability ID: HWPSIRT-2020-05241 This vulnerability has been...