CVE-2023-40654

In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2023-40651

CVE-2023-40651 affects the urild service and is caused by a missing bounds check that allows an out-of-bounds write. The NVD entry notes a local denial-of-service impact with system-level execution privileges required and a CVSS v3.1 base score of 4.4 (Local, Low Attack Complexity, High Privilege...

CVE-2023-40654

In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2023-40653

CVE-2023-40653 concerns the FW-PackageManager with a missing permission check that could enable local escalation of privileges to SYSTEM. Multiple connected sources corroborate the description across vendors and databases (NVD, Red Hat, CVE/CVE List, CNNVD, PT-2023-27575). The core impact is loca...

CVE-2023-40651

In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2023-40651

In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2023-40636

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with System execution privileges needed...

CVE-2023-40638

In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed...

CVE-2023-40636

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with System execution privileges needed...

CVE-2023-40636

CVE-2023-40636 relates to a vulnerability in the telecom service where a missing permission check could allow writing permission usage records for an app, enabling local information disclosure. The underlying issue requires System-level execution privileges for exploitation, with a CVSSv3.1 base ...

CVE-2023-40638

In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed...

CVE-2023-40638

CVE-2023-40638 affects UNISOC chipsets (Android Telecom service) where a missing permission check could allow a local Denial of Service with SYSTEM privileges required. The Red Hat/Android-related entries corroborate a local-impact scenario but do not provide explicit vulnerable versions or a con...

CVE-2023-40631

In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed...

CVE-2023-40651: Out-of-bounds Write

In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2023-40652: Out-of-bounds Write

In jpg driver, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with System execution privileges needed...

CVE-2023-40653: Missing Authorization

In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2023-40654: Missing Authorization

In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges needed...

CVE-2023-40636: Missing Authorization

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with System execution privileges needed...

CVE-2023-40638: Missing Authorization

In Telecom service, there is a possible missing permission check. This could lead to local denial of service with System execution privileges needed...

CVE-2023-40631: Missing Authorization

In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed...