CVE-2022-48332

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmsavekeys filenamelen integer overflow and resultant buffer overflow...

PT-2023-15713 · Google · Widevine Trusted Application

Name of the Vulnerable Software and Affected Versions: Widevine Trusted Application TA versions 5.0.0 through 5.1.1 Description: The issue is related to an integer overflow and resultant buffer overflow in the drm verify keys function, specifically with the total len+file name len calculation. Th...

CVE-2022-48332

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmsavekeys filenamelen integer overflow and resultant buffer overflow...

CVE-2022-48334

Widevine Trusted Application TA 5.0.0 through 5.1.1 has a drmverifykeys totallen+filenamelen integer overflow and resultant buffer overflow...

CVE-2022-48335

Widevine Trusted Application TA 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resultant buffer overflow...

CVE-2022-48336

The vulnerability CVE-2022-48336 affects the Widevine Trusted Application (TA) versions 5.0.0 through 7.1.1. The issue is an integer overflow in the PRDiagParseAndStoreData function, which leads to a buffer overflow. Connected sources confirm the affected component and the root cause, with no pub...

CVE-2022-48332

CVE-2022-48332 affects Widevine Trusted Application (TA) versions 5.0.0 through 5.1.1. The issue is a drm_save_keys file_name_len integer overflow that leads to a buffer overflow, with CVSSv3.1 base metrics indicating CRITICAL impact (Network, No user interaction, Privileges NONE, Scope UNCHANGED...

PT-2023-17896 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions prior to the fixed version Description: The issue is related to a possible use after free due to a race condition in multiple functions of WVDrmPlugin.cpp. This could lead to local escalation of privilege with no additional...

Widevine 输入验证错误漏洞

Widevine is a proprietary digital rights management DRM system from Widevine, Inc. An input validation error vulnerability exists in the Widevine Trustlet Application versions 5.0.0 through 5.1.1, which stems from the presence of an integer overflow issue that results in a buffer overflow...

Widevine 输入验证错误漏洞

Widevine is a proprietary digital rights management DRM system from Widevine, Inc. An input validation error vulnerability exists in Widevine Trusted Application versions 5.0.0 through 5.1.1, which stems from the presence of an integer overflow issue that results in a buffer overflow...

Widevine 输入验证错误漏洞

Widevine is a proprietary digital rights management DRM system from Widevine, Inc. An input validation error vulnerability exists in the Widevine Trustlet Application versions 5.0.0 through 7.1.1, which stems from the presence of an integer overflow issue that results in a buffer overflow...

CVE-2023-20701

In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643270; Issue ID: ALPS07643270...

CVE-2023-20700

In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643304; Issue ID: ALPS07643304...

CVE-2023-20700

In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643304; Issue ID: ALPS07643304...

CVE-2023-20701

In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643270; Issue ID: ALPS07643270...

Out-of-bounds

In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643304; Issue ID: ALPS07643304...

Out-of-bounds

In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643270; Issue ID: ALPS07643270...

CVE-2023-20701

In widevine, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07643270; Issue ID: ALPS07643270...

CVE-2023-20701

In the provided CVE-2023-20701 context, the issue is a vulnerability in the widevine module of MediaTek chips. The root cause is a logic error that can trigger an out-of-bounds write, potentially enabling local escalation of privileges with system execution rights. Exploitation requires no user i...

CVE-2023-20700

CVE-2023-20700 affects Widevine in MediaTek chips. The vulnerability is described as an out-of-bounds write caused by a logic error, enabling local escalation of privilege with System execution privileges required; user interaction is not needed. Patch ID ALPS07643304 (Issue ALPS07643304) is refe...