Lucene search
+L
Osv-asbRecent

2720 matches found

osv-asb
osv-asb
•added 2022/02/01 12:00 a.m.•48 views

ASB-A-197228210

In writeThrowable of AndroidFuture.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00123EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/02/01 12:00 a.m.•21 views

ASB-A-209700749

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00146EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/02/01 12:00 a.m.•32 views

ASB-A-204445255

In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00111EPSS
SaveExploits0References3
osv-asb
osv-asb
•added 2022/02/01 12:00 a.m.•20 views

ASB-A-209702509

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00146EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/02/01 12:00 a.m.•16 views

ASB-A-204686438

Summary:...

10CVSS8.2AI score0.00583EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/02/01 12:00 a.m.•26 views

ASB-A-209702508

In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00146EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/02/01 12:00 a.m.•50 views

ASB-A-197399948

In updatePackageMappingsData of UsageStatsService.java, there is a possible way to bypass security and privacy settings of app usage due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.4AI score0.00133EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/02/01 12:00 a.m.•34 views

ASB-A-194342672

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

9.1CVSS7.5AI score0.02752EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/02/01 12:00 a.m.•33 views

ASB-A-200682135

In openFileAndEnforcePathPermissionsHelper of MediaProvider.java, there is a possible bypass of a permissions check due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.0015EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•5 views

ASB-A-193070557

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•45 views

ASB-A-203847542

In ipcSetDataReference of Parcel.cpp, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00119EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•41 views

ASB-A-192663648

In GBoard, there is a possible way to bypass Factory Reset Protection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00124EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•43 views

ASB-A-185126549

In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00128EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•4 views

ASB-A-193070556

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•5 views

ASB-A-193070555

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•59 views

ASB-A-189575031

In StatusBar.java, there is a possible disclosure of notification content on the lockscreen due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS5.7AI score0.00117EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•34 views

ASB-A-208267659

In sortSimPhoneAccountsForEmergency of CreateConnectionProcessor.java, there is a possible prevention of access to emergency calling due to an unhandled exception. In rare instances, this could lead to local denial of service with User execution privileges needed. User interaction is not needed f...

5.5CVSS6.1AI score0.00109EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•30 views

ASB-A-194105348

In doRead of SimpleDecodingSource.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

10CVSS8.3AI score0.02041EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•5 views

ASB-A-193070342

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•23 views

ASB-A-207693368

In Modem UDP protocol integrated from Nucleus NET TCP/IP software, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure or denial of service with no additional execution privileges needed. User interaction is not needed for...

9.1CVSS8.2AI score0.0163EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•44 views

ASB-A-196855999

In multiple methods of EuiccNotificationManager.java, there is a possible way to install existing packages without user consent due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00122EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•37 views

ASB-A-185126319

In sendLegacyVoicemailNotification of LegacyModeSmsHandler.java, there is a possible permissions bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00128EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•44 views

ASB-A-194695497

In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00162EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•36 views

ASB-A-200284993

In jitmemoryregion.cc, there is a possible bypass of memory restrictions due to a logic error in the code. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00146EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•24 views

ASB-A-207646336

In Modem TCP protocol integrated from Nucleus NET TCP/IP software, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure or denial of service with no additional execution privileges needed. User interaction is not needed for...

9.1CVSS8.1AI score0.02221EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•31 views

ASB-A-202025599

Bulletin has no description...

7.5CVSS7.2AI score0.00568EPSS
SaveExploits0References3
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•4 views

ASB-A-193070700

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•52 views

ASB-A-183612370

In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without the correct permissions due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed...

5.5CVSS6AI score0.00108EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•47 views

ASB-A-194695347

In showCarrierAppInstallationNotification of EuiccNotificationManager.java, there is a possible way to gain an access to MediaProvider content due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for...

7.3CVSS7.3AI score0.0013EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•16 views

ASB-A-207646334

In Modem ICMP protocol integrated from Nucleus NET TCP/IP software, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure or denial of service with no additional execution privileges needed. User interaction is not needed for...

9.1CVSS8.1AI score0.02221EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•143 views

ASB-A-123700107

In checkKeyIntent of AccountManagerService.java, there is a possible permission bypass. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation...

5CVSS5.9AI score0.00156EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•8 views

ASB-A-193071116

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•20 views

ASB-A-204728248

In Modem EMM, there is a possible information disclosure due to a missing data encryption. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS7.3AI score0.0074EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•42 views

ASB-A-150694665

In grehandleoffloads of ipgre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00178EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•44 views

ASB-A-202159709

In inotifycb of events.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00122EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•39 views

ASB-A-202768292

In executeRequest of OverlayManagerService.java, there is a possible way to control fabricated overlays from adb shell due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00125EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•5 views

ASB-A-193070594

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•30 views

ASB-A-204450605

In fs/eventpoll.c, there is a possible use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.7AI score0.00155EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•19 views

ASB-A-207646335

In Modem TCP protocol integrated from Nucleus NET TCP/IP software, there is a possible system crash due to an improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

9.1CVSS8.1AI score0.02221EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•23 views

ASB-A-204256722

Hacker one bug ID: 1343975...

10CVSS8.2AI score0.00666EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•21 views

ASB-A-202025735

Bulletin has no description...

7.8CVSS7.2AI score0.00155EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2022/01/01 12:00 a.m.•37 views

ASB-A-197353344

In phTmlNfcInit and phTmlNfcCleanUp of phTmlNfc.cc, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7CVSS7.2AI score0.00092EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•31 views

ASB-A-193363621

In C2SoftMP3::process of C2SoftMp3Dec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

7.1CVSS7.3AI score0.00934EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•3 views

ASB-A-190404447

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•45 views

ASB-A-189942532

In NfcTag::discoverTechnologies activation of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additionalSystem execution privileges needed. User interaction is not needed for exploitation...

10CVSS8.3AI score0.01271EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•9 views

ASB-A-190404404

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•6 views

ASB-A-190403081

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•35 views

ASB-A-198346478

In code generated by BuildParcelFields of generatecpp.cpp, there is a possible way for a crafted parcelable to reveal uninitialized memory of a target process due to uninitialized data. This could lead to local information disclosure across Binder transactions with no additional execution...

5.5CVSS6AI score0.00115EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•17 views

ASB-A-190402578

Bulletin has no description...

8.4CVSS7.2AI score0.00146EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2021/12/01 12:00 a.m.•6 views

ASB-A-190404327

Bulletin has no description...

7.2AI score
SaveExploits0
Total number of security vulnerabilities2720