Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from remotely blocking access to cellular services without user interaction...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, USA. A security vulnerability exists in Google Pixel, which stems from a data uninitialization in the AcvpOnMessage module of avcp.cpp, which may result in an EOP...

PT-2024-24951

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a possible compromise of protected memory due to a race condition in the gpu pm power off top nolock function of pixel gpu power.c...

Pixel Update Bulletin—May 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2024-05-05 or later address all issues in this bulletin and all issues in the May 2024 Android Security...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel that stems from a type confusion and possible privilege escalation in the lwisaddcompletionfence module of lwisfence.c. The vulnerability is caused by a type confusion in the...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from an improper locking of the lwisfencesignal module of lwisdebug.c, with possible post-release reuse...

Google Pixel Security Breach

Google Pixel is a smartphone from Google USA. Google Pixel suffers from a security vulnerability that stems from a logic error in the code and could have cellular denial of service...

Google Pixel Security Breach

Google Pixel is a smartphone from Google Inc USA. A security vulnerability exists in Google Pixel, which stems from an incorrect bounds check in the circread module of linkdevicememorylegacy.c, where out-of-bounds writes may occur...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a lack of bounds checking in the v4l2smfcqbuf module of smfc-v4l2-ioctls.c, where out-of-bounds writes may exist...

Android Pixel Privilege Escalation Vulnerability

Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation...

PT-2024-4747

Name of the Vulnerable Software and Affected Versions Android versions prior to the fixed version Description The issue is related to a logic error in the code, which could lead to local escalation of privilege with no additional execution privileges needed. User interaction is required for...

Pixel Watch Security Bulletin—June 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2024-06-05 or later address all applicable issues in the June 2024 Android Security Bulletin and all issues in this bulletin. T...

Pixel Update Bulletin—June 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2024-06-05 or later address all issues in this bulletin and all issues in the June 2024 Android Securit...

VulnCheck KEV: CVE-2024-32896

Android Pixel contains an unspecified vulnerability in the firmware that allows for privilege escalation...

PT-2024-40785 · Git +1 · Libultrahdr

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the ultrahdr::getYuv420Pixel function. This function is called by...

WordPress Social Pixel plugin <= 2.1 - Authenticated Stored Cross-Site Scripting vulnerability

Authenticated Stored Cross-Site Scripting vulnerability discovered by Bob Matyas in WordPress Plugin Social Pixel versions = 2.1...

Social Pixel <= 2.1 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup PoC 1. Go to:...

Social Pixel <= 2.1 - Admin+ Stored XSS

Description The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Go to:...

WordPress Social Pixel Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)

Software Social Pixel Type Plugin Vulnerable versions = 2.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4005 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f865e3476ddd Credits Bob Matyas Required privilege...

SUSE CVE-2024-35942

In the Linux kernel, the following vulnerability has been resolved: pmdomain: imx8mp-blk-ctrl: imx8mpblk: Add fdcc clock to hdmimix domain According to i.MX8MP RM and HDMI ADD, the fdcc clock is part of hdmi rx verification IP that should not enable for HDMI TX. But actually if the clock is...