207 matches found
CVE-2023-20905
In MfcTransceive of phNxpExtnsMifareStd.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
PT-2023-17695 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 Description: The issue is related to a possible out of bounds write in the Mfc Transceive function of phNxpExtns MifareStd.cpp. This could lead to local escalation of privilege with no additional execution privileg...
GSD-2023-1000488 media: s5p-mfc: Clear workbit to handle error condition
media: s5p-mfc: Clear workbit to handle error condition This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.18 by commit...
PT-2023-33565 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.18 Description: The issue is related to the s5p-mfc media component in the Linux Kernel, where a clear workbit is not handled properly in an error condition. The actual impact and potential for attack have...
PT-2023-34016 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.87 Description: The issue is related to the s5p-mfc media component in the Linux Kernel, where a clear workbit is not handled properly in an error condition. The actual impact and potential for attack have...
Integer overflow
In secmediaprotect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege of secure mode MFC Core with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...
CVE-2022-20598
In secmediaprotect of media.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege of secure mode MFC Core with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro...
mfc-sha.de Cross Site Scripting vulnerability OBB-2730995
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-25491
A vulnerability in mfc driver prior to SMR Oct-2021 Release 1 allows memory corruption via NULL-pointer dereference...
Null pointer dereference
A vulnerability in mfc driver prior to SMR Oct-2021 Release 1 allows memory corruption via NULL-pointer dereference...
CVE-2021-25491
A vulnerability in mfc driver prior to SMR Oct-2021 Release 1 allows memory corruption via NULL-pointer dereference...
CVE-2021-25491
CVE-2021-25491 affects the Samsung mfc driver. The root cause is a NULL-pointer dereference that can cause memory corruption in versions prior to Samsung SMR Oct-2021 Release 1. Public data indicates impact on memory handling, with CVSS details showing low to medium base severity depending on met...
Unauthorized access vulnerability in Brother Industries MFC-L2710DW series
The MFC-L2710DW series is a multifunction printer. An unauthorized access vulnerability exists in Brother Industries MFC-L2710DW series, which can be exploited by attackers to obtain sensitive information...
CVE-2021-25395
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised...
CVE-2021-25395
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised...
CVE-2021-25394
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised...
Race condition
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised...
CVE-2021-25395
A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised...