CVE-2018-9374

CVE-2018-9374 affects Android’s PackageManagerService.java, specifically installPackageLI, enabling a possible permissions bypass that could lead to local elevation of privilege. Exploitation would require local user privileges with no user interaction, per the CVE description. The issue is liste...

CVE-2018-9354

CVE-2018-9354 is a vulnerability in the Android VideoFrameScheduler component: in VideoFrameScheduler.cpp, PLL::fit can trigger a divide-by-zero error leading to a remote denial of service. Multiple connected records confirm the affected area but do not provide concrete patch/version details or a...

CVE-2018-9353

CVE-2018-9353 affects the ihevcd_parse_slice_data function in ihevcd_parse_slice.c used by Google Android. The root cause is a missing bounds check that enables a heap buffer out-of-bounds read, allowing remote denial of service with no single execution privilege required. Exploitation requires u...

CVE-2018-9352

CVE-2018-9352 affects the ihevcd_allocate_dynamic_bufs function in ihevcd_api.c. The vulnerability is a resource exhaustion due to an integer overflow, potentially enabling remote denial of service with no code execution required. Exploitation requires user interaction. Connected sources (Red Hat...

CVE-2018-9351

The CVE-2018-9351 issue affects the ih264e_fmt_conv_420p_to_420sp function in ih264e_fmt_conv.c, where a missing bounds check allows an out-of-bounds read. This can lead to a remote denial of service with no extra privileges required, and user interaction is needed to exploit. Connected records (...

CVE-2017-13321

The CVE-2017-13321 issue affects Android’s SensorService::isDataInjectionEnabled in frameworks/native/services/sensorservice/SensorService.cpp, where a missing bounds check can cause an out-of-bounds read. This leads to local information disclosure with no user interaction and without additional ...

CVE-2017-13320

CVE-2017-13320 affects libmpeg2dec, specifically the impeg2d_bit_stream_flush() function, where a missing bounds check can cause an out-of-bounds read. This leads to a remote denial-of-service possibility with no different privileges required; exploitation requires user interaction. Public source...

CVE-2017-13316

CVE-2017-13316 affects the Android RecognitionService.java: a missing permission check in checkPermissions could allow a local attacker to bypass permissions and escalate privileges without extra execution privileges or user interaction. The Red Hat and NVD/NVD-derived entries confirm the same de...

CVE-2018-5852

CVE-2018-5852 describes an unsigned integer underflow in the Qualcomm IPA driver that results in a buffer over-read when reading NAT entries via the debugfs path /sys/kernel/debug/ipa/ip4_nat. The vulnerability is tied to the IPA driver component and affects Qualcomm chipsets; the underlying issu...

CVE-2018-11816

CVE-2018-11816 is a Qualcomm MediaServer issue where a crafted Binder request can trigger a heap use-after-free in the Video path. The CVSS 3.1 vector indicates Local attack, low privileges required, no user interaction, with High impact on confidentiality, integrity, and availability. Public det...

CVE-2017-18307

CVE-2017-18307 is linked to Qualcomm chipsets (notably qcacld-3.0) and is described as an information-disclosure vulnerability that can occur during audio playback. The Red Hat and CVE listings corroborate an information leak, with Qualcomm’s product-security notes showing a local attack vector a...

CVE-2023-1521

CVE-2023-1521 affects the sccache project on Linux. The vulnerability allows a local attacker to execute arbitrary code with the privileges of a local sccache server by preloading a shared library via LD_PRELOAD. If the server runs as root (default when installed via the snap package), a normal u...

CVE-2018-11922

Technical details (affected product/version, root cause, impact, fixes) for CVE-2018-11922 are not publicly available in the provided connected documents. Monitor for updates from vendors and security bulletins.

CVE-2017-18153

CVE-2017-18153 describes a race condition in a driver that can cause a use-after-free. Connected sources identify Qualcomm WLAN components (notably the Qcacld-2.0 subsystem) as affected, with the underlying issue described as memory reuse after release. The vulnerability is locally exploitable an...

Astra Linux – Vulnerability in p7zip

7-Zip 22.01 does not report an error for certain invalid xz files that involve block flags and reserved bits. Some later versions are unaffected...

Astra Linux – Vulnerability in p7zip

7-Zip 22.01 does not report an error for certain invalid xz files that involve stream flags and reserved bits. Some later versions are unaffected...

CVE-2022-43937

CVE-2022-43937 corresponds to a log file information exposure in Brocade SANnav. Connected documents confirm that sensitive fields can be recorded in debug-enabled logs when debugging is on, affecting SANnav versions prior to 2.3.0 and 2.2.2a. The entries consolidate multiple advisories across Re...

CVE-2022-43935

The CVE-2022-43935 entry describes an information exposure in Brocade SANnav prior to version 2.2.2, where Fabric OS switch passwords and authorization IDs are printed in the embedded MLS DB file. This local-attack surface could lead to disclosure of sensitive credentials (confidentiality impact ...

CVE-2022-43933

CVE-2022-43933 affects Brocade SANnav prior to version 2.2.2. The vulnerability is an information exposure through log files: the supportsave/log data may contain configuration secrets such as usernames, passwords, and secret keys. Affects SANnav deployments where a log file generated by an admin...

CVE-2018-9487

CVE-2018-9487 affects Android components (Vpn.java: setVpnForcedLocked) where a bad UID check could block internet traffic through VPN, causing a local denial of service. Impact per available data: LOCAL attack vector with HIGH availability impact; UI interaction required for exploitation. CVSS m...