3595 matches found
CVE-2024-21640 OOB Access in CefVideoConsumerOSR::OnFrameCaptured
Chromium Embedded Framework CEF is a simple framework for embedding Chromium-based browsers in other applications.CefVideoConsumerOSR::OnFrameCaptured does not check pixelformat properly, which leads to out-of-bounds read out of the sandbox. This vulnerability was patched in commit 1f55d2e...
PT-2024-18990
Name of the Vulnerable Software and Affected Versions Chromium Embedded Framework CEF affected versions not specified Description The issue arises from the CefVideoConsumerOSR::OnFrameCaptured function not properly checking the pixel format, leading to an out-of-bounds read outside of the sandbox...
PT-2024-12605
Name of the Vulnerable Software and Affected Versions No specific software or version information is provided, but affected chipsets include Tensor Pixel and Exynos basebands. Description The issue is related to the incorrect handling of malformed NAS messages, which can cause a modem crash. The...
Moderate: pixman security update
Pixman is a pixel manipulation library for the X Window System and Cairo. Security Fixes: pixman: Integer overflow in pixmansamplefloory leading to heap out-of-bounds write CVE-2022-44638 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...
DEBIAN-CVE-2023-47994
An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive information, cause a denial of service and/or run arbitrary code...
UBUNTU-CVE-2023-47994
An integer overflow vulnerability in LoadPixelDataRLE4 function in PluginBMP.cpp in Freeimage 3.18.0 allows attackers to obtain sensitive information, cause a denial of service and/or run arbitrary code...
PT-2024-13534 · Freeimage +1 · Freeimage +1
Name of the Vulnerable Software and Affected Versions: Freeimage version 3.18.0 Description: An integer overflow vulnerability in the LoadPixelDataRLE4 function in PluginBMP.cpp allows attackers to obtain sensitive information, cause a denial of service, and/or run arbitrary code. Recommendations...
Google Pixel Watch elevation of privilege vulnerability
Google Pixel Watch is a smartwatch from the American company Google Google. Google Pixel Watch elevation of privilege vulnerability, which is due to an insecure default value flaw in the checkDebuggingDisabled function in DeviceVersionFragment.java, can be exploited by an attacker to gain elevate...
Pixel Watch Security Bulletin—January 2024Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2024-01-05 or later address all applicable issues in the January 2024 Android Security Bulletin and all issues in this bulletin...
Google Pixel Watch Information Disclosure Vulnerability
Google Pixel Watch is a smartwatch from the American company Google Google. Google Pixel Watch has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
Android Security Bulletin—January 2024Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2024-01-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
Pixel & tonic Craft CMS Security Vulnerability
Pixel & tonic Craft CMS is a content management system CMS from the US company Pixel & tonic. A security vulnerability exists in Pixel & tonic Craft CMS versions 4.0.0-RC1 through 4.5.10, 3.0.0 through 3.9.5, which can be exploited by an attacker to elevate privileges...
Pixel Update Bulletin—January 2024Stay organized with collectionsSave and categorize content based on your preferences.
The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2024-01-05 or later address all issues in this bulletin and all issues in the January 2024 Android...
CVE-2023-4164 There is a possible information disclosure due to a missing permission check in Pixel Watch
There is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of health data with no additional execution privileges needed...
Google Pixel Watch 安全漏洞
Google Pixel Watch is a smartwatch from the American company Google Google. Google Pixel Watch elevation of privilege vulnerability, which is due to an insecure default value flaw in the checkDebuggingDisabled function in DeviceVersionFragment.java, can be exploited by an attacker to gain elevate...
Google Pixel Watch 安全漏洞
Google Pixel Watch is a smartwatch from the American company Google Google. Google Pixel Watch has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...
PT-2024-13611 · Google · Google Pixel Watch
Name of the Vulnerable Software and Affected Versions: Google Pixel Watch affected versions not specified Description: The issue is related to a possible way to access adb before SUW completion due to an insecure default value in the checkDebuggingDisallowed function of DeviceVersionFragment.java...
ASB-A-300090204
In convertToComponentName of DreamService.java, there is a possible way to launch arbitrary protected activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...
The vulnerability of the Image Processing Module in the BmpDecoderDxe framework used for creating UEFI patches in InsydeH2O allows a hacker to induce a system failure.
The vulnerability of the Image Processing Module in the InsydeH2O UEFI firmware development framework involves a buffer overflow when processing the PixelHeight and PixelWidth properties of images. Exploiting this vulnerability can allow an attacker to cause system failures...
ALSA-2023:7754 Moderate: pixman security update
Pixman is a pixel manipulation library for the X Window System and Cairo. Security Fixes: pixman: Integer overflow in pixmansamplefloory leading to heap out-of-bounds write CVE-2022-44638 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...