187 matches found
CVE-2020-0336
In SurfaceFlinger, there is possible memory corruption due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153467444...
CVE-2024-40660
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-40660
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-40660
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-40660
CVE-2024-40660 concerns Android’s SurfaceFlinger.cpp: setTransactionState contains a logic error that can change protected display attributes. The vulnerability enables local escalation of privilege with no extra execution privileges required and no user interaction needed. Evidence across source...
CVE-2024-40660: Incorrect Default Permissions
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-347307756
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Google Android elevation of privilege vulnerability (CNVD-2024-37969)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to a logic error in the setTransactionState code of SurfaceFlinger.cpp, which can be exploited by an attacker to escalate privileges...
CVE-2024-34743
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-34743
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-34743: Improper Restriction of Rendered UI Layers or Frames
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-336648613
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to perform tapjacking due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2023-44095
Use-After-Free UAF vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash...
CVE-2023-44095
Use-After-Free UAF vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash...
Design/Logic Flaw
Use-After-Free UAF vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash...
CVE-2023-44095
CVE-2023-44095 is a Use-After-Free (UAF) vulnerability in the surfaceflinger module of HarmonyOS/Huawei implementations, with the underlying issue described as triggering a system crash. Multiple connected sources (NVD, Red Hat, CVE listing, CNNVD) corroborate the same description of impact, but ...
CVE-2023-44095
Use-After-Free UAF vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash...
CVE-2023-44095
Use-After-Free UAF vulnerability in the surfaceflinger module.Successful exploitation of this vulnerability can cause system crash...
PT-2023-29095
Name of the Vulnerable Software and Affected Versions surfaceflinger affected versions not specified Description The issue is related to a Use-After-Free UAF vulnerability in the surfaceflinger module. Successful exploitation of this vulnerability can cause a system crash. Recommendations At the...