3177 matches found
CVE-2023-42722
In camera service, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed...
CVE-2023-42722
In camera service, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed...
CVE-2023-42722
CVE-2023-42722 concerns a use-after-free in the camera service that enables local privilege escalation to System level due to a logic error. Documented across multiple sources (e.g., UNISOC-related entries and Red Hat/NVD/CVE records) indicate it affects camera service; attack is local, with no u...
CVE-2023-42722
In camera service, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed...
PT-2023-28545 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to a logic error in the camera service, which can cause a use after free condition. This could potentially lead to local escalation of privilege, requiring Syst...
PT-2023-27270 · Google · Android
Name of the Vulnerable Software and Affected Versions: NotificationConversationInfo.java affected versions not specified Description: The issue is related to a logic error in the code of NotificationConversationInfo.java, specifically in the mOnDone method. This error could allow access to app...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the code in multiple functions of btmblegap.cc, which can be exploited by an attacker to gain elevated privileges on the system...
PUB-A-269274102
there is a possible permanent DoS or way for the modem to boot unverified firmware due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
PUB-A-293298397
there is a possible way for the secure world to write to NS memory due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
ASB-A-275057843
In multiple functions of btmblegap.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-288366554
In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
PUB-A-282081424
there is a possible DCK won't be deleted after factory reset due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-288896269
In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitatio...
PUB-A-213170949
In privatehandlet of maligrallocbuffer.h, there is a possible information leak due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
Bold Timeline Lite < 1.2.0 - Missing Authorization to Admin Notice Dismissal
Description The Bold Timeline Lite plugin for WordPress is vulnerable to unauthorized modification of data due to a logic error on the boldtimelinewpdocsthisscreen function in versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with subscriber-level access an...
CVE-2023-20246
Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a logic error that occurs when the access control policies are being...
CVE-2023-20246
Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a logic error that occurs when the access control policies are being...
CVE-2023-20031
A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This vulnerability is due to a logic error that occurs whe...
Design/Logic Flaw
A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This vulnerability is due to a logic error that occurs whe...
Improper access control
Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. This vulnerability is due to a logic error that occurs when the access control policies are being...