Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/12/09 5:27 p.m.2 views

CVE-2025-48596

In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.7AI score0.00006EPSS
Exploits0References1
OSV
OSV
added 2025/12/08 5:16 p.m.2 views

CVE-2025-48596

In appendFrom of Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/10/23 12:0 a.m.2 views

PT-2025-43481

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A flaw exists in the Framework component of Android operating systems due to insufficient input validation. Exploitation of this issue may allow an attacker to escalate privileges. A potentia...

7.8CVSS6.6AI score0.00006EPSS
Exploits0References8
OSV
OSV
added 2025/09/04 7:15 p.m.0 views

CVE-2025-32325

In appendFrom of Parcel.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.2AI score0.00009EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/09/04 12:0 a.m.2 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by an out-of-bounds write due to a heap-based buffer overflow in the appendFrom function in Parcel.cpp. An attacker can exploit the vulnerability to...

7.8CVSS7.9AI score0.00009EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2015/10/01 12:59 a.m.27 views

CVE-2015-3845

The Parcel::appendFrom function in libs/binder/Parcel.cpp in Binder in Android before 5.1.1 LMY48M does not consider parcel boundaries during identification of binder objects in an append operation, which allows attackers to obtain a different application's privileges via a crafted application, a...

6.8CVSS5.9AI score0.00077EPSS
Exploits0References3
CVE
CVE
added 2015/10/01 12:0 a.m.57 views

CVE-2015-3845

CVE-2015-3845 affects Android Binder’s Parcel handling: the Parcel::appendFrom function in libs/binder/Parcel.cpp does not consider parcel boundaries when identifying binder objects, in Android versions before 5.1.1 LMY48M. The underlying flaw can allow a crafted application to obtain privileges ...

6.8CVSS6.5AI score0.00077EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder