ASB-A-369103643

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

ASB-A-316578327

In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-340480881

In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

ASB-A-356886209

In buildreadmultirsp of gattsr.cc, there is a possible denial of service due to a logic error in the code. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-365738306

In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-364027038

In gattsprocessreadbytypereq of gattsr.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-308429049

In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2020-9082

There is an information disclosure vulnerability in several smartphones. The system has a logic judging error under certain scenario, the attacker should gain the permit to execute commands in ADB mode and then do a series of operation on the phone. Successful exploit could allow the attacker to...

Huawei EMUI and HarmonyOS System Service Module Service Logic Error Vulnerability

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. A service logic error vulnerability exists in the Huawei EMUI and HarmonyOS system service module, which can be...

PT-2024-32367 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible Use After Free UAF due to a logic error in the code. This could lead to local escalation of privilege with no...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from the inclusion of a logic error in the code that could lead to reuse after release...

CVE-2024-54098

Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2024-54098

Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2024-54098

Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2024-54098

Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service integrity...

CVE-2024-54098

CVE-2024-54098 is a Huawei EMUI/HarmonyOS system service module vulnerability described as a service logic error that can affect service integrity. The NVD entry lists CVSSv3.1 base score 7.5 (HIGH) with network attack vector but the Huawei CNA entry indicates local exploitation with low attack c...

CVE-2024-44291

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. A malicious app may be able to gain root privileges...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is an operating system. Provides a full-scene distributed operating system based on a microkernel. A service logic error vulnerability exists in the Huawei EMUI and HarmonyOS system service module, which can be...

PT-2024-36029 · Unknown · System Service Module

Name of the Vulnerable Software and Affected Versions: System service module affected versions not specified Description: The issue is related to a service logic error vulnerability in the system service module. Successful exploitation of this vulnerability may affect service integrity...

php: Filter bypass in filter_var (FILTER_VALIDATE_URL)

A flaw was found in PHP. An early return in the filtervar FILTERVALIDATEURL function results in invalid user information username + password part of URLs being treated as valid user information. This issue impacts users who expect only completely valid URLs to be returned by filtervar...