Lucene search
+L
Osv-pubRecent

1281 matches found

osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•15 views

PUB-A-180950209

In iaxxxcalci2sdiv of iaxxx-codec.c, there is a possible hardware port write with user controlled data due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00117EPSS
SaveExploits0References1
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•19 views

PUB-A-172908358

In ih264efmtconv422ito420sp of ih264efmtconv.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.5AI score0.00121EPSS
SaveExploits0References3
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•17 views

PUB-A-170639543

In permission declarations of DeviceAdminReceiver.java, there is a possible lack of broadcast protection due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00117EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•14 views

PUB-A-179461812

In isRestricted of RemoteViews.java, there is a possible way to inject font files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.4AI score0.00138EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•20 views

PUB-A-173473906

In fillMainDataBuf of pvmp3framedecoder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

6.5CVSS7.1AI score0.00716EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•20 views

PUB-A-177931355

In doNotification of AccountManagerService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6AI score0.00109EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•14 views

PUB-A-168034487

In drmsyncobjhandletofd of drmsyncobj.c, there is a possible use after free due to incorrect refcounting. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS6.7AI score0.00153EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•18 views

PUB-A-174302683

In appendtoverifyfifointerleaved of streamencoder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.5AI score0.00465EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•18 views

PUB-A-175147055

In GENERALNAMEcmp of v3genn.c , there is a possible denial of service due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9CVSS6.6AI score0.07051EPSS
SaveExploits3References1
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•19 views

PUB-A-180419673

In archiveStoredConversation of MmsService.java, there is a possible way to archive message conversation without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.4AI score0.00107EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•17 views

PUB-A-179688673

In onLoadFailed of AnnotateActivity.java, there is a possible way to gain WRITEEXTERNALSTORAGE permissions without user consent due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

7.8CVSS7.4AI score0.00117EPSS
SaveExploits0References1
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•18 views

PUB-A-169257710

In phNxpNciHalprintresstatus of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS6.9AI score0.00117EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•38 views

PUB-A-178821491

In onCreate of EmergencyCallbackModeExitDialog.java, there is a possible exit of emergency callback mode due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

7.3CVSS7.3AI score0.00115EPSS
SaveExploits0References4
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•43 views

PUB-A-179161711

In RenderStruct of protostreamobjectsource.cc, there is a possible crash due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS7.3AI score0.00773EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•20 views

PUB-A-176756141

In onCreate of WiFiInstaller.java, there is a possible way to install a malicious Hotspot 2.0 configuration due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

7.3CVSS7.3AI score0.00115EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•20 views

PUB-A-180518039

In bind of MediaControlPanel.java, there is a possible way to lock up the system UI using a malicious media file due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation...

6.5CVSS6.7AI score0.00588EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•21 views

PUB-A-176084648

In RasterIntraUpdate of motionest.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.1AI score0.00115EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•26 views

PUB-A-174151048

In onReceive of NetInitiatedActivity.java, there is a possible way to supply an attacker-controlled value to a GPS HAL handler due to a missing permission check. This could lead to local escalation of privilege that may result in undefined behavior in some HAL implementations with no additional...

7.8CVSS7.3AI score0.00108EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•19 views

PUB-A-172312730

In Lagmax of polwgh.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

6.5CVSS6.8AI score0.00671EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•19 views

PUB-A-179046129

In setRange of ABuffer.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation...

8.8CVSS8.3AI score0.00673EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•24 views

PUB-A-176495665

In decrypt of CryptoPlugin.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.4CVSS6.9AI score0.00086EPSS
SaveExploits0References5
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•21 views

PUB-A-168314741

In wpasctrlmsgqueuetimeout of ctrlifaceunix.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

6.7CVSS7.1AI score0.00114EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•18 views

PUB-A-172716941

In getBlockSum of fastcodemb.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.5AI score0.00121EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•20 views

PUB-A-174045870

In onStart of ContactsDumpActivity.java, there is possible access to contacts due to a tapjacking/overlay attack. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation...

5CVSS5.9AI score0.00114EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•20 views

PUB-A-169258455

In phNxpNciHalextprocessnfcinitrsp of phNxpNciHalext.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the NFC server with System execution privileges needed. User interaction is not needed for exploitation...

4.4CVSS5.7AI score0.00117EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/06/01 12:00 a.m.•11 views

PUB-A-110373476

In addrmatch of xfrm.h, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure in the kernel with System execution privileges needed. User interaction is not needed for exploitation...

4.9CVSS6.6AI score0.00199EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/05/01 12:00 a.m.•12 views

PUB-A-175769054

Bulletin has no description...

5.7CVSS6.5AI score0.00279EPSS
SaveExploits0References2
osv-pub
osv-pub
•added 2021/05/01 12:00 a.m.•11 views

PUB-A-175769013

In several functions of rawmidi.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.8AI score0.01659EPSS
SaveExploits2References2
osv-pub
osv-pub
•added 2021/05/01 12:00 a.m.•37 views

PUB-A-172354397

Bulletin has no description...

6.2CVSS5.9AI score0.00134EPSS
SaveExploits0References1
osv-pub
osv-pub
•added 2021/05/01 12:00 a.m.•13 views

PUB-A-174904705

In vtdokdgkbioctl of keyboard.c, there is a possible use after free read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

4.1CVSS6.7AI score0.00439EPSS
SaveExploits1References2
osv-pub
osv-pub
•added 2021/04/01 12:00 a.m.•21 views

PUB-A-170141832

Bulletin has no description...

6.7CVSS6.7AI score0.00152EPSS
SaveExploits0References2
Total number of security vulnerabilities1281