Lucene search
+L
Osv-asbRecent

2720 matches found

osv-asb
osv-asb
•added 2020/12/01 12:00 a.m.•38 views

ASB-A-168500792

In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure network traffic over a non-VPN link with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6AI score0.0018EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/12/01 12:00 a.m.•65 views

ASB-A-147802478

In doepollctl and eploopcheckproc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.1AI score0.00278EPSS
SaveExploits0References3
osv-asb
osv-asb
•added 2020/12/01 12:00 a.m.•2 views

ASB-A-168050861

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/12/01 12:00 a.m.•46 views

ASB-A-159373687

In sendConfiguredNetworkChangedBroadcast of WifiConfigManager.java, there is a possible leak of sensitive WiFi configuration data due to a missing permission check. This could lead to local information disclosure of WiFi network names with no additional execution privileges needed. User interacti...

3.3CVSS5.4AI score0.00158EPSS
SaveExploits0References6
osv-asb
osv-asb
•added 2020/12/01 12:00 a.m.•52 views

ASB-A-169342531

In sdpserverhandleclientreq of sdpserver.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure from the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS7.3AI score0.01457EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/12/01 12:00 a.m.•21 views

ASB-A-168050601

Bulletin has no description...

10CVSS8.2AI score0.01085EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/12/01 12:00 a.m.•48 views

ASB-A-150371903

In resolvcachelookup of rescache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed web resources with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6AI score0.00168EPSS
SaveExploits0References3
osv-asb
osv-asb
•added 2020/12/01 12:00 a.m.•6 views

ASB-A-168049958

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/12/01 12:00 a.m.•6 views

ASB-A-157906329

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/12/01 12:00 a.m.•78 views

ASB-A-158854097

In smpkeydistribution of smpact.cc, there are possible vulnerabilities in Cross-Transport Key Derivation due to weaknesses in the Bluetooth standard. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9CVSS7.5AI score0.07079EPSS
SaveExploits1References2
osv-asb
osv-asb
•added 2020/12/01 12:00 a.m.•24 views

ASB-A-157906412

Bulletin has no description...

7.8CVSS7.2AI score0.00207EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/12/01 12:00 a.m.•6 views

ASB-A-168050278

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/12/01 12:00 a.m.•40 views

ASB-A-166268541

In extendframehighbd of restoration.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

5.5CVSS6.5AI score0.00728EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•61 views

ASB-A-161812320

In the AIBinderClass constructor of ibinder.cpp, there is a possible arbitrary code execution due to uninitialized data. This could lead to local escalation of privilege if a process were using libbinderndk in a vulnerable way with no additional execution privileges needed. User interaction is no...

7.8CVSS7.7AI score0.00171EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•36 views

ASB-A-157650336

In rwi93smformat of rwi93.cc, there is a possible out of bounds read due to uninitialized data. This could lead to remote information disclosure over NFC with no additional execution privileges needed. User interaction is needed for exploitation...

6.5CVSS6.8AI score0.00877EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•45 views

ASB-A-156997193

In create of FileMap.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.5AI score0.00259EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•139 views

ASB-A-140256621

In generatePackageInfo of PackageManagerService.java, there is a possible permissions bypass due to an incorrect permission check. This could lead to local escalation of privilege that allows instant apps access to permissions not allowed for instant apps, with no additional execution privileges...

7.8CVSS7.4AI score0.00228EPSS
SaveExploits0References3
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•21 views

ASB-A-168251617

There is a possible out of bounds write due to a missing bounds check...

9.8CVSS8.3AI score0.00578EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•7 views

ASB-A-162756020

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•47 views

ASB-A-162741784

In CellBroadcastReceiver's intent handlers, there is a possible denial of service due to a missing permission check. This could lead to local denial of service of emergency alerts with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6AI score0.00149EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•43 views

ASB-A-162497143

In btmsecdisconnected of btmsec.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution in the Bluetooth server with no additional execution privileges needed. User interaction is needed for exploitation...

9.3CVSS8.3AI score0.01343EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•2 views

ASB-A-162756585

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•37 views

ASB-A-161370134

In callCallbackForRequest of ConnectivityService.java, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure of the current SSID with User execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6AI score0.00241EPSS
SaveExploits1References3
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•8 views

ASB-A-162756960

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•3 views

ASB-A-162756352

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•42 views

ASB-A-153995334

In getPhoneAccountsForPackage of TelecomServiceImpl.java, there is a possible way to access a tracking identifier due to a missing permission check. This could lead to local information disclosure of the identifier, which could be used to track an account across devices, with no additional...

5.5CVSS6AI score0.00155EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•39 views

ASB-A-159060474

In updateNotification of BeamTransferManager.java, there is a possible permission bypass due to a PendingIntent error. This could lead to local non-security issue with User execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00261EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•3 views

ASB-A-155653490

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•38 views

ASB-A-158762825

In sbrDecoderAssignQmfChannels2SbrChannels of sbrdecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

9.3CVSS8.6AI score0.01951EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•52 views

ASB-A-147358092

In Message and toBundle of Notification.java, there is a possible UI slowdown or crash due to improper input validation. This could lead to remote denial of service if a malicious contact file is received, with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.3AI score0.01047EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•3 views

ASB-A-155652382

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•5 views

ASB-A-155653795

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•53 views

ASB-A-157038281

In smpdecideassociationmodel of smpact.cc, there is a possible silent bluetooth pairing due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

9.8CVSS8.2AI score0.05142EPSS
SaveExploits0References5
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•4 views

ASB-A-155652696

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•50 views

ASB-A-159625731

In exifentrygetvalue of exif-entry.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if a third party app used this library to process remote image data with no additional execution privileges needed. User interaction is not needed for...

9.8CVSS8.2AI score0.03327EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•3 views

ASB-A-162757240

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•43 views

ASB-A-158304295

In Message and toBundle of Notification.java, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service requiring a device reset to fix with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.3AI score0.01077EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•2 views

ASB-A-162756122

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•41 views

ASB-A-152410253

In LocaleList of LocaleList.java, there is a possible forced reboot due to an uncaught exception. This could lead to local denial of service requiring factory reset to restore with User execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00324EPSS
SaveExploits1References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•47 views

ASB-A-153879813

In getPermissionInfosForGroup of Utils.java, there is a logic error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00267EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•18 views

ASB-A-168264527

There is a possible out of bounds write due to a missing bounds check...

9.8CVSS8.3AI score0.00547EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•41 views

ASB-A-161362564

In sendvc of ressend.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00165EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/11/01 12:00 a.m.•22 views

ASB-A-168264528

There is a possible out of bounds write due to a missing bounds check...

9.8CVSS8.3AI score0.00536EPSS
SaveExploits0References1
osv-asb
osv-asb
•added 2020/10/01 12:00 a.m.•2 views

ASB-A-160605595

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/10/01 12:00 a.m.•51 views

ASB-A-156020795

In various locations in SystemUI, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of contact data with User execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.7AI score0.0017EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/10/01 12:00 a.m.•4 views

ASB-A-160606016

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/10/01 12:00 a.m.•61 views

ASB-A-160390416

In setProcessMemoryTrimLevel of ActivityManagerService.java, there is a missing permission check. This could lead to local information disclosure of foreground processes with no additional execution privileges needed. User interaction is not needed for exploitation...

3.3CVSS6.2AI score0.0016EPSS
SaveExploits0References2
osv-asb
osv-asb
•added 2020/10/01 12:00 a.m.•4 views

ASB-A-160605708

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/10/01 12:00 a.m.•7 views

ASB-A-153346047

Bulletin has no description...

7.2AI score
SaveExploits0
osv-asb
osv-asb
•added 2020/10/01 12:00 a.m.•10 views

ASB-A-160605749

Bulletin has no description...

7.2AI score
SaveExploits0
Total number of security vulnerabilities2720