CVE-2024-32910

The CVE-2024-32910 issue affects Trusty/TEE in the Android stack (tipc.c: handle_msg_shm_map_req). It describes a possible stack data disclosure from uninitialized data in the SPI/TIPC path, enabling local information disclosure without extra privileges or user interaction. The Android Pixel bull...

CVE-2024-32906

In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-32906

CVE-2024-32906 affects Google Pixel/Android components: In the AcvpOnMessage function of avcp.cpp, uninitialized data may cause an Elevation of Privilege (EoP). This could enable local privilege escalation with no extra execution privileges and no user interaction required. The available connecte...

CVE-2024-29785

In aurgetstate of aurora.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-29785

CVE-2024-29785 describes an information disclosure in the Aurora driver code path: the function name and file are aur_get_state in aurora.c. The root cause is uninitialized data leading to local information disclosure without extra privileges or user interaction. Affected entity is evidenced by m...

CVE-2024-29785

In aurgetstate of aurora.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-29780

CVE-2024-29780 affects hwbcc_ns_deprivilege in trusty/user/base/lib/hwbcc/client/hwbcc.c, describing an uninitialized data condition that can disclose uninitialized stack data. The impact is local information disclosure with no extra privileges required and no user interaction needed. Exploitatio...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc USA. A security vulnerability exists in Google Pixel, which stems from the presence of uninitialized data in the pluginipchandler module of slcplugin.c, which may allow for information disclosure...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from the presence of uninitialized data in the handlemsgshmmapreq module of trusty/user/base/lib/spi/srv/tipc/tipc.c, which could allow for stack data disclosure...

PT-2024-24968 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible information disclosure due to uninitialized data in the tpu get int state function of tpu.c. This could lead to local...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which originates from the presence of uninitialized data in the hwbccnsdeprivilege module of trusty/user/base/lib/hwbcc/client/hwbcc.c. There is a potential for uninitialized stack data...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc USA. A security vulnerability exists in Google Pixel, which stems from an uninitialized data in the aurgetstate module of aurora.c, which could lead to information disclosure...

PT-2024-23028 · Aurora · Aurora

Name of the Vulnerable Software and Affected Versions: Aurora affected versions not specified Description: The issue is related to an information disclosure due to uninitialized data in the aur get state function of aurora.c. This could lead to local information disclosure without requiring...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from an uninitialized data in the tpugetintstate module of tpu.c, which may lead to information disclosure...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc. in the United States. A security vulnerability exists in Google Pixel, which stems from an uninitialized data in the fvpfreqhistograminit module of fvp.c, which could lead to information disclosure...

PT-2024-24970 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible Information Disclosure due to uninitialized data in the fvp freq histogram init function of fvp.c. This could lead to...

PT-2024-24986 · Unknown · Slc Plugin

Name of the Vulnerable Software and Affected Versions: slc plugin affected versions not specified Description: The issue is related to a possible information disclosure in the plugin ipc handler function of slc plugin.c due to uninitialized data. This could lead to local information disclosure of...

PT-2024-24959 · Google · Android +1

Name of the Vulnerable Software and Affected Versions: No specific software name or versions are mentioned in the provided descriptions. Description: The issue is related to uninitialized data in the AcvpOnMessage function of avcp.cpp, which could lead to a possible escalation of privilege EOP...

RHEL 6 : xorg-x11-server (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - xorg-x11-server: unvalidated lengths in RENDER extension CVE-2017-12187 - In the X.Org X server before...

PUB-A-322223921

In pluginipchandler of slcplugin.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure of 4 bytes of stack memory with no additional execution privileges needed. User interaction is not needed for exploitation...