Lucene search
+L
Osv-asbRecent

1924 matches found

osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•29 views

ASB-A-377312377

Bulletin has no description...

7.8CVSS5.7AI score0.00103EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•41 views

ASB-A-281666022

In setHeader of DialogFillUi.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.5AI score0.00093EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•34 views

ASB-A-377312639

Bulletin has no description...

7.8CVSS7.2AI score0.00103EPSS
SaveExploits0References5
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•38 views

ASB-A-381773171

Bulletin has no description...

6.7CVSS5.7AI score0.00079EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•21 views

ASB-A-376311652

Bulletin has no description...

7.8CVSS7.2AI score0.00166EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•30 views

ASB-A-377311993

Bulletin has no description...

9.8CVSS8.3AI score0.00576EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•41 views

ASB-A-359179312

In multiple functions of Parcel.cpp, there is a possible way to manipulate file descriptors and escalate privileges due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.4AI score
SaveExploits1References3
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•42 views

ASB-A-281534749

In FillUi of FillUi.java, there is a possible way to view another user's images. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.5AI score0.00095EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•29 views

ASB-A-381773169

Bulletin has no description...

9.8CVSS5.7AI score0.0077EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•26 views

ASB-A-377672115

In multiple functions of mremap.c, there is a possible use-after-free scenario in physical memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5AI score
SaveExploits1References3
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•34 views

ASB-A-356630194

In handlePollingLoopData of halfwlog.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8AI score
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•36 views

ASB-A-367266072

In multiple functions of TaskFragmentOrganizerController.java, there is a possible token leak due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.2AI score
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•39 views

ASB-A-370962373

In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.4AI score
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•30 views

ASB-A-281533566

In FillUi of FillUi.java, there is a possible way to view other user's image due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00094EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•28 views

ASB-A-379728401

In TBD of TBD, there is a possible arbitrary kernel memory overwrite due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00213EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•33 views

ASB-A-353240784

In multiple functions of AppWidgetServiceImpl.java, there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5AI score
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•32 views

ASB-A-377313069

Bulletin has no description...

7.8CVSS7.7AI score0.00103EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•21 views

ASB-A-365954523

In ExtractAllPages of physmemosmemlinux.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00138EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•34 views

ASB-A-356117796

In AppTimeSpentPresenter of AppTimeSpentPreference.kt, there is a possible way to hijack implicit intent. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.4AI score
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•29 views

ASB-A-377312238

Bulletin has no description...

7.8CVSS7.2AI score0.00103EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•37 views

ASB-A-281848557

In applyCustomDescription of SaveUi.java, there is a possible way to view another user's image due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.7AI score0.00094EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•39 views

ASB-A-372670004

In onCreate of MediaProjectionPermissionActivity.java, there is a possible way to bypass user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5AI score
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•28 views

ASB-A-381773175

Bulletin has no description...

6.6CVSS5.7AI score0.00102EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•38 views

ASB-A-283264674

In multiple locations of DialogFillUi.java, there is a possible way to view another user's image. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00184EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•60 views

ASB-A-292104015

In renderSuggestion of RemoteInlineSuggestionViewConnector.java , there is a possible way to view images belonging to a different user of the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not...

3.3CVSS5.9AI score0.00115EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•30 views

ASB-A-377311997

Bulletin has no description...

9.8CVSS8.2AI score0.00295EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•36 views

ASB-A-281665050

In createDatasetItems of DialogFillUi.java, there is a possible way to view another user's image. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.5AI score0.00095EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•36 views

ASB-A-357870429

In static of NativeCrypto.java, there is a possible way to obtain clear-text data due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.6AI score
SaveExploits0References3
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•32 views

ASB-A-378455392

In uvcparseformat of uvcdriver.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.7AI score0.03395EPSS
SaveExploits1References3
osv-asb
osv-asb
•added 2025/02/01 12:00 a.m.•33 views

ASB-A-381773173

Bulletin has no description...

6.8CVSS5.7AI score0.00102EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•32 views

ASB-A-371975420

In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS5.8AI score0.00073EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•25 views

ASB-A-360846772

In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass parcel mismatch mitigation due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitatio...

7.8CVSS5.8AI score0.00075EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•54 views

ASB-A-376816311

Bulletin has no description...

6.6CVSS5.7AI score0.00109EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•33 views

ASB-A-376814209

Bulletin has no description...

8.1CVSS7.4AI score0.00135EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•25 views

ASB-A-370840874

In writeInplace of Parcel.cpp, there is a possible out of bounds write. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.0008EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•26 views

ASB-A-365738306

In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6AI score0.0008EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•19 views

ASB-A-363073314

In PVRSRVAcquireProcessHandleBase of handle.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS5.9AI score0.00173EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•23 views

ASB-A-340480881

In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS6AI score0.00085EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•31 views

ASB-A-364027038

In gattsprocessreadbytypereq of gattsr.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS8.6AI score0.00467EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•44 views

ASB-A-356886209

In buildreadmultirsp of gattsr.cc, there is a possible denial of service due to a logic error in the code. This could lead to remote proximal/adjacent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

6.5CVSS6AI score0.00117EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•28 views

ASB-A-364027949

In gattsprocessreadreq of gattsr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS8.5AI score0.00199EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•31 views

ASB-A-369351375

In multiple functions of AccountManagerService.java, there is a possible way to bypass permissions and launch protected activities due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7CVSS7.3AI score0.0007EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•18 views

ASB-A-233605527

In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

7.8CVSS5.8AI score0.00074EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•59 views

ASB-A-316578327

In onClick of MainClear.java, there is a possible way to trigger factory reset without explicit user consent due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00074EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•64 views

ASB-A-376814212

Bulletin has no description...

9.8CVSS5.7AI score0.00257EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•29 views

ASB-A-355461643

In DGifSlurp of dgiflib.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS6.2AI score0.00246EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•34 views

ASB-A-372002616

Bulletin has no description...

7.5CVSS7.2AI score0.0038EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•22 views

ASB-A-369103643

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

7.8CVSS6.1AI score0.00077EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•16 views

ASB-A-205837340

Bulletin has no description...

7.7AI score
SaveExploits0
osv-asb
osv-asb
•added 2025/01/01 12:00 a.m.•17 views

ASB-A-376809176

Bulletin has no description...

8.8CVSS7.4AI score0.03919EPSS
SaveExploits1References1
Total number of security vulnerabilities1924