ASB-A-391930942

Bulletin has no description...

ASB-A-394100476

Bulletin has no description...

ASB-A-400286977

Bulletin has no description...

ASB-A-381274694

Bulletin has no description...

ASB-A-388048322

Bulletin has no description...

ASB-A-372003347

Bulletin has no description...

ASB-A-378870958

In virtiotransportdestruct of virtiotransportcommon.c, there is possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-381429835

Bulletin has no description...

ASB-A-372931317

In PhysmemValidateParam of physmemextmemlinux.c, there is a possible write on read-only memory due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-350500921

Bulletin has no description...

ASB-A-369103643

In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...

ASB-A-330722900

In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

ASB-A-348352288

In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-350527097

In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-353712853

In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocking the device due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed f...

ASB-A-364017103

Bulletin has no description...

ASB-A-363850556

Bulletin has no description...

ASB-A-318683126

In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-339043107

Bulletin has no description...

ASB-A-339866012

Bulletin has no description...

ASB-A-323919320

Bulletin has no description...

ASB-A-323469023

Bulletin has no description...

ASB-A-318303317

Bulletin has no description...

ASB-A-318302378

Bulletin has no description...

ASB-A-318316117

Bulletin has no description...

ASB-A-309461173

Bulletin has no description...

ASB-A-303101456

Bulletin has no description...

ASB-A-291982610

In DevmemIntAcquireRemoteCtx of devicememserver.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-291999439

In PMRChangeSparseMemOSMem of physmemosmemlinux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-300385151

Bulletin has no description...

ASB-A-300368872

Bulletin has no description...

ASB-A-295039157

Bulletin has no description...

ASB-A-276750584

Bulletin has no description...

ASB-A-276750639

Bulletin has no description...

ASB-A-276750306

Bulletin has no description...

ASB-A-278801630

Bulletin has no description...

ASB-A-270399153

In PVRSRVBridgeServerSyncGetStatus of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

ASB-A-270392711

In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

ASB-A-254445909

In kbasecsfqueuegroupsuspendprepare of malikbasecsfkcpu.c , there is a possible out of bounds write due to incorrect memory mapping. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-264209787

In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-258731891

A wlan driver function lacks parameter checks, resulting integer overflow vulnerability...

ASB-A-253978051

A race condition Use After Freee issue in unisoc sprd sdiohaldebug driver, which may cause EoP problem...

ASB-A-246824784

In PMRLogicalOffsetToPhysicalOffset of the PowerVR kernel driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-238103939

Bulletin has no description...

ASB-A-238108282

Bulletin has no description...

ASB-A-242345178

In HTBLogKM of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-242344778

In dllistremovenode of TBD, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-238921253

In PVRSRVBridgePMRPDumpSymbolicAddr of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not...

ASB-A-238379819

a function called 'nlaparse', do not check the len of para, it will check nlatype which can be controlled by userspace with 'maxtype' in this case, it is GSCANMAX, then it access polciy array 'policytype', which OOB access happens...

ASB-A-232441339

The PowerVR GPU driver allows unprivileged apps to allocated pinned memory, unpin it which makes it available to be freed, and continue using the page in GPU calls. No privileges required and this results in kernel memory corruption...