Lucene search
+L

369 matches found

Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.7 views

PT-2022-21393 · Ril · Ril

Name of the Vulnerable Software and Affected Versions: ril affected versions not specified Description: The issue is related to an incorrect bounds check in ril, which could lead to a system crash and result in a remote denial of service. No additional execution privileges are needed for...

7.5CVSS7.3AI score0.00641EPSS
Exploits0References3
Cvelist
Cvelist
added 2022/10/07 12:0 a.m.27 views

CVE-2022-32591

In ril, there is a possible system crash due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07257259; Issue ID: ALPS07257259...

7.6AI score0.00641EPSS
Exploits0References1
CVE
CVE
added 2022/10/07 12:0 a.m.65 views

CVE-2022-32591

CVE-2022-32591 describes an out-of-bounds/incorrect bounds check in ril that can cause a remote denial of service without user interaction, due to a system crash. The NVD entry notes a patch (ALPS07257259; Issue ID ALPS07257259). Connected sources (Red Hat RH/CVE, CNVD, CVE lists, PT-2022-21393) ...

7.5CVSS7.4AI score0.00641EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2022/04/11 8:15 p.m.24 views

CVE-2022-27822

Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EFRUIMID value without permission...

6.6CVSS0.00121EPSS
Exploits0References1
Prion
Prion
added 2022/04/11 8:15 p.m.23 views

Information disclosure

Information exposure vulnerability in ril property setting prior to SMR April-2022 Release 1 allows access to EFRUIMID value without permission...

2.1CVSS5.4AI score0.00121EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/04/11 7:37 p.m.92 views

CVE-2022-27822

CVE-2022-27822 describes an information-disclosure vulnerability in Samsung SMR (system patch package). Prior to SMR Apr-2022 Release 1, the ril property setting could expose EF_RUIMID without permission. Documented across multiple feeds (NVD entries and security notices) with affected product sc...

6.6CVSS5.3AI score0.00121EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2022/01/07 12:0 a.m.34 views

Huawei HarmonyOS HAL-Ril data service component out-of-bounds read vulnerability

Huawei HarmonyOS is an operating system from Huawei China. A security vulnerability exists in the HAL-Ril data service component of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attacker could exploit the vulnerability to compromise...

7.5CVSS3.2AI score0.00679EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/11/05 12:0 a.m.6 views

Huawei HarmonyOS 缓冲区错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. A security vulnerability exists in the HAL-Ril data service component of Huawei HarmonyOS, which provides a microkernel-based, full-scenario distributed operating system. An attacker could exploit the vulnerability to compromise...

7.5CVSS5.7AI score0.00679EPSS
Exploits0References4
Atlassian
Atlassian
added 2020/04/16 7:46 p.m.53 views

Information disclosure in the /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin - CVE-2020-4017

The /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to get information about any configured Jira application links via an information disclosure vulnerability...

5.3CVSS4.5AI score0.01245EPSS
Exploits0Affected Software1
Atlassian
Atlassian
added 2020/04/16 7:46 p.m.71 views

Information disclosure in the /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin - CVE-2020-4017

The /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to get information about any configured Jira application links via an information disclosure vulnerability...

5.3CVSS4.5AI score0.01245EPSS
Exploits0Affected Software1
Atlassian
Atlassian
added 2020/04/16 7:46 p.m.37 views

Information disclosure in the /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin - CVE-2020-4017

The /rest/jira-ril/1.0/jira-rest/applinks resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to get information about any configured Jira application links via an information disclosure vulnerability...

5.3CVSS5.2AI score0.01245EPSS
Exploits0
Atlassian
Atlassian
added 2020/04/16 7:38 p.m.57 views

Information disclosure in the /plugins/servlet/jira-blockers/ resource in the crucible-jira-ril plugin - CVE-2020-4016

The /plugins/servlet/jira-blockers/ resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to get the ID of configured Jira application links via an information disclosure vulnerability...

5.3CVSS4.5AI score0.01245EPSS
Exploits0Affected Software1
Atlassian
Atlassian
added 2020/04/16 7:38 p.m.30 views

Information disclosure in the /plugins/servlet/jira-blockers/ resource in the crucible-jira-ril plugin - CVE-2020-4016

The /plugins/servlet/jira-blockers/ resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to get the ID of configured Jira application links via an information disclosure vulnerability...

5.3CVSS5.2AI score0.01245EPSS
Exploits0
Atlassian
Atlassian
added 2020/04/16 7:38 p.m.61 views

Information disclosure in the /plugins/servlet/jira-blockers/ resource in the crucible-jira-ril plugin - CVE-2020-4016

The /plugins/servlet/jira-blockers/ resource in the crucible-jira-ril plugin in Atlassian Fisheye and Crucible before version 4.8.1 allows remote attackers to get the ID of configured Jira application links via an information disclosure vulnerability...

5.3CVSS4.5AI score0.01245EPSS
Exploits0Affected Software1
CVE
CVE
added 2020/04/07 12:48 p.m.48 views

CVE-2016-11046

The CVE-2016-11046 issue affects Samsung mobile devices running JBP (4.3), KK (4.4), and L (5.0/5.1) where a misused whitelist allows access to the Radio Interface Layer (RIL/RILD) enabling calls or SMS. Affected component is the RIL path; root cause is the whitelist mishandling, as described in ...

7.5CVSS7.5AI score0.00346EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/04/07 12:48 p.m.21 views

CVE-2016-11046

An issue was discovered on Samsung mobile devices with JBP4.3, KK4.4, and L5.0/5.1 software. Because of a misused whitelist, attackers can reach the radio layer aka RIL or RILD to place calls or send SMS messages. The Samsung ID is SVE-2016-5733 May 2016...

7.6AI score0.00346EPSS
Exploits0References1
Prion
Prion
added 2019/02/11 3:29 p.m.22 views

Memory corruption

There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in versions MDM9206, MDM9607, MDM9635M, MDM9650,...

7.2CVSS8AI score0.00232EPSS
Exploits0References2
NVD
NVD
added 2019/02/11 3:29 p.m.25 views

CVE-2018-13888

There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in versions MDM9206, MDM9607, MDM9635M, MDM9650,...

7.8CVSS8AI score0.00232EPSS
Exploits0References2
CVE
CVE
added 2019/02/11 3:0 p.m.53 views

CVE-2018-13888

CVE-2018-13888 describes memory corruption in the RIL daemon due to deference of memory outside the allocated array in Snapdragon platform families (e.g., Snapdragon Auto, Mobile, Wearables). Affected components are the RIL daemon implementations across listed Snapdragon SoCs and SKUs. The CVE en...

7.8CVSS6.4AI score0.00232EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/02/11 3:0 p.m.29 views

CVE-2018-13888

There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in versions MDM9206, MDM9607, MDM9635M, MDM9650,...

8AI score0.00232EPSS
Exploits0References2
Rows per page
Query Builder