Pixel Watch Security Bulletin—December 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2023-12-05 or later address all applicable issues in the December 2023 Android Security Bulletin and all issues in this bulleti...

pixel-sound.com Improper Access Control vulnerability OBB-3807087

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-48414

In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Integer overflow

In gpupixelhandlebufferlivenessupdateioctl of private/google-modules/gpu/malikbase/malikbasecorelinux.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

Design/Logic Flaw

In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Input validation

In gpupixelhandlebufferlivenessupdateioctl of private/google-modules/gpu/malikbase/platform/pixel/pixelgpuslc.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User...

CVE-2023-48414

In the Pixel Camera Driver, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-48414

CVE-2023-48414 affects the Pixel Camera Driver. It describes a use-after-free due to a logic error, enabling local escalation of privilege with System privileges required and no user interaction. The vulnerability is categorized as EoP with a moderate impact in Pixel security bulletins, and no pu...

OESA-2023-1898 freeimage security update

FreeImage is a library project for developers who would like to support popular graphics image formats PNG, JPEG, TIFF, BMP and others. Some highlights are: extremely simple in use, not limited to the local PC unique FreeImageIO and Plugin driven! Security Fixes: Buffer Overflow vulnerability in...

Google Pixel Buffer Error Vulnerability

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing bounds check issue in ProtocolNetSimFileInfoAdapter of protocolnetadapter.cpp, which may result in out-of-bounds reads...

Google Pixel Buffer Error Vulnerability

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing bounds check issue in dhcp4SetPDNAddress of dhcp4Main.c, which may result in out-of-bounds writes...

Google Pixel Buffer Error Vulnerability

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing boundary check issue in Init of protocolembmsadapter.cpp, which may result in out-of-bounds reads...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. Google Pixel suffers from a security vulnerability that stems from a logic error in the code of privatehandlet in maligrallocbuffer.h, which may allow information leakage...

Google Pixel Code Issues Vulnerabilities

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from the presence of missing null checks in multiple locations, which may result in null dereferences...

Google Pixel Input Validation Error Vulnerability

Google Pixel is a smartphone from Google, Inc. in the United States. Google Pixel suffers from a security vulnerability that originates in gpupixelhandlebufferlivenessupdateioctl in private/google-modules/gpu/malikbase/malikbasecorelinux.c There is an integer overflow and out-of-bounds writes may...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google. Google Pixel has a security vulnerability that stems from the presence of a logic error in the code that may not remove the DCK after restoring the factory settings...

Google Pixel Buffer Error Vulnerability

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from an incorrect bounds check in protocoladapter.cpp's GetSizeOfEenlRecords, which may result in out-of-bounds reads...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from the presence of a logic error in the code, where the modem may experience a denial of service...

Google Pixel Buffer Error Vulnerability

Google Pixel is a smartphone from Google Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from a missing boundary check issue in Init of protocolcalladapter.cpp, which may result in out-of-bounds reads...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. Google Pixel suffers from a security vulnerability that stems from the presence of a missing permission check in ppcfw.c's ppcfwenable, which may result in elevation of privilege...