Lucene search
+L
Osv-asbRecent

2554 matches found

osv-asb
osv-asb
•added 2022/02/01 12:00 a.m.•1 views

ASB-A-195750446

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/02/01 12:00 a.m.•39 views

ASB-A-196085005

An issue was discovered in libexif before 0.6.22. Use of uninitialized memory in EXIF Makernote handling could lead to crashes and potential use-after-free conditions...

8.2CVSS7.6AI score0.01934EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/02/01 12:00 a.m.•34 views

ASB-A-194342672

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

9.1CVSS7.5AI score0.02752EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•21 views

ASB-A-202025735

Bulletin has no description...

7.8CVSS7.2AI score0.00155EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•37 views

ASB-A-185126319

In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00128EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•23 views

ASB-A-204256722

Hacker one bug ID: 1343975...

10CVSS8.2AI score0.00666EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•5 views

ASB-A-193070557

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•45 views

ASB-A-203847542

In ipcSetDataReference of Parcel.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00119EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•19 views

ASB-A-207646335

In Modem TCP protocol integrated from Nucleus NET TCP/IP software, there is a possible system crash due to an improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

9.1CVSS8.1AI score0.02221EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•42 views

ASB-A-185126549

In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00128EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•30 views

ASB-A-194105348

In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

10CVSS8.3AI score0.02041EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•5 views

ASB-A-193070342

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•23 views

ASB-A-207693368

In Modem UDP protocol integrated from Nucleus NET TCP/IP software, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure or denial of service with no additional execution privileges needed. User interaction is not needed for...

9.1CVSS8.2AI score0.0163EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•44 views

ASB-A-196855999

In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00122EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•143 views

ASB-A-123700107

In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation...

5CVSS5.9AI score0.00156EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•46 views

ASB-A-194695347

In showCarrierAppInstallationNotification of EuiccNotificationManager.java, there is a possible way to gain an access to MediaProvider content due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

7.3CVSS7.3AI score0.0013EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•7 views

ASB-A-193071116

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•4 views

ASB-A-193070594

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•38 views

ASB-A-202768292

In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overlays from adb shell due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00125EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•58 views

ASB-A-189575031

In StatusBar.java, there is a possible disclosure of notification content on the lockscreen due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.7AI score0.00117EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•4 views

ASB-A-193070700

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•44 views

ASB-A-194695497

In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00162EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•52 views

ASB-A-183612370

In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without the correct permissions due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed...

5.5CVSS6AI score0.00108EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•40 views

ASB-A-192663648

In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00124EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•36 views

ASB-A-200284993

In jitmemoryregion.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00146EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•24 views

ASB-A-207646336

In Modem TCP protocol integrated from Nucleus NET TCP/IP software, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure or denial of service with no additional execution privileges needed. User interaction is not needed for...

9.1CVSS8.1AI score0.02221EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•37 views

ASB-A-197353344

In phTmlNfcInit and phTmlNfcCleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7CVSS7.2AI score0.00092EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•16 views

ASB-A-207646334

In Modem ICMP protocol integrated from Nucleus NET TCP/IP software, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure or denial of service with no additional execution privileges needed. User interaction is not needed for...

9.1CVSS8.1AI score0.02221EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•4 views

ASB-A-193070555

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•3 views

ASB-A-193070556

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•30 views

ASB-A-204450605

In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.7AI score0.00155EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•18 views

ASB-A-204728248

In Modem EMM, there is a possible information disclosure due to a missing data encryption. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS7.3AI score0.0074EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•4 views

ASB-A-190404446

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•8 views

ASB-A-190403513

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•9 views

ASB-A-190404404

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•20 views

ASB-A-199190644

Bulletin has no description...

8.4CVSS7.2AI score0.00154EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•3 views

ASB-A-190404403

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•5 views

ASB-A-190403081

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•16 views

ASB-A-190402578

Bulletin has no description...

8.4CVSS7.2AI score0.00146EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•41 views

ASB-A-194300867

In AndroidManifest.xml of Settings, there is a possible pairing of a Bluetooth device without user's consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.8CVSS7.9AI score0.00211EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•34 views

ASB-A-198346478

In code generated by BuildParcelFields of generatecpp.cpp, there is a possible way for a crafted parcelable to reveal uninitialized memory of a target process due to uninitialized data. This could lead to local information disclosure across Binder transactions with no additional execution...

5.5CVSS6AI score0.00115EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•45 views

ASB-A-184046278

In setOnClickActivityIntent of SearchWidgetProvider.java, there is a possible way to access contacts and history bookmarks without permission due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...

7.8CVSS7.4AI score0.00114EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•2 views

ASB-A-190404402

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•43 views

ASB-A-199065614

In vorbisbookdecodevset of codebook.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

9.3CVSS8.2AI score0.01046EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•5 views

ASB-A-190404327

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•36 views

ASB-A-199922685

In getTitle of AccessPoint.java, there is a possible unhandled exception due to a missing null check. This could lead to remote denial of service if a proximal Wi-Fi AP provides invalid information with no additional execution privileges needed. User interaction is needed for exploitation...

6.5CVSS6.7AI score0.00582EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•10 views

ASB-A-190404445

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•41 views

ASB-A-192085766

In pfwritebuf of FuseDaemon.cpp, there is possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7CVSS7.2AI score0.00091EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•33 views

ASB-A-195748381

In doCropPhoto of PhotoSelectionHandler.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure of user's contacts with no additional execution privileges needed. User interaction is needed for exploitation...

5CVSS5.9AI score0.00142EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•4 views

ASB-A-199192449

Bulletin has no description...

7.2AI score
SaveExploits0
Total number of security vulnerabilities2554