Path traversal

In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21268

CVE-2023-21268 concerns a path traversal issue in the Android MmsProvider.java update that can alter directory permissions. The vulnerability enables a local attacker to trigger a denial of service affecting SIM recognition, without requiring additional execution privileges. Exploitation is descr...

CVE-2023-21268

In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21268

In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21268

In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21268: Improper Limitation of a Pathname to a Restricted Directory

In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-264880895

In update of MmsProvider.java, there is a possible way to change directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is not needed for exploitation...

Samsung Mobile Device Buffer Error Vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile device SMR Jul-2023 Release 1 version, which originates from an out-of-bounds write in the...

CVE-2023-21629

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files...

CVE-2023-21635

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony...

Double free

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files...

Memory corruption

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony...

CVE-2023-21635

CVE-2023-21635 shows a memory corruption issue in the Data Network Stack & Connectivity when a SIM is detected during telephony. Multiple sources describe this as a buffer copy without size checking in Qualcomm closed-source components, leading to potential impact on confidentiality, integrity, a...

CVE-2023-21635 Buffer Copy without Checking Size of Input in Data Network Stack & Connectivity

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony...

CVE-2023-21629 Double Free in Modem

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files...

CVE-2023-21629

CVE-2023-21629 refers to memory corruption in Qualcomm closed‑source modem components caused by a double free while parsing PKCS15 SIM files. The CVSSv3.1 base metrics (6.8, MEDIUM) from NVD indicate physical access is required with low attack complexity and no privileges, but high impact to conf...

CVE-2023-21635: Buffer Copy without Checking Size of Input

Memory Corruption in Data Network Stack & Connectivity when sim gets detected on telephony...

CVE-2023-21629: Double Free

Memory Corruption in Modem due to double free while parsing the PKCS15 sim files...

U.K. Cyber Thug “PlugwalkJoe” Gets 5 Years in Prison

Joseph James "PlugwalkJoe" OConnor, a 24-year-old from the United Kingdom who earned his 15 minutes of fame by participating in the July 2020 hack of Twitter, has been sentenced to five years in a U.S. prison. That may seem like harsh punishment for a brief and very public cyber joy ride. But...

Jail Time: ‘PlugWalkJoe’ Gets 5 Years for Twitter Hack and Sim Swapping

By Waqas PlugWalkJoe Joseph James O'Connor will also return $749,000, which he admitted to stealing from a Manhattan-based cryptocurrency firm. This is a post from HackRead.com Read the original post: Jail Time: PlugWalkJoe Gets 5 Years for Twitter Hack and Sim Swapping...