Lucene search
+L
Osv AsbRecent

2720 matches found

osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•28 views

ASB-A-353700779

In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled accessibility service in the accessibility service settings due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges...

8.4CVSS6AI score0.00111EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•35 views

ASB-A-357615775

Bulletin has no description...

7.8CVSS5.7AI score0.00103EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•28 views

ASB-A-357616018

Bulletin has no description...

7.8CVSS5.7AI score0.00103EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•33 views

ASB-A-357616194

Bulletin has no description...

7.8CVSS5.7AI score0.00103EPSS
SaveExploits0References3
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•21 views

ASB-A-337944529

In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.3AI score0.00109EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•21 views

ASB-A-350006107

In DevmemIntChangeSparse of devicememserver.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.4AI score0.00102EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•25 views

ASB-A-350530745

In PMRWritePMPageList of pmr.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00103EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•25 views

ASB-A-355477536

In DevmemIntChangeSparse2 of devicememserver.c, there is a possible way to achieve arbitrary code execution due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.3AI score0.00118EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•34 views

ASB-A-357616450

Bulletin has no description...

7.8CVSS5.7AI score0.00169EPSS
SaveExploits0References5
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•28 views

ASB-A-357615761

Bulletin has no description...

7.5CVSS5.7AI score0.00254EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•34 views

ASB-A-304280682

In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.8AI score0.00096EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•25 views

ASB-A-352520660

In bindertransaction of binder.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.9AI score0.00287EPSS
SaveExploits0References9
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•25 views

ASB-A-242996380

In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS8.3AI score0.00114EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•28 views

ASB-A-329701910

In multiple locations of legacy.rs, there is a possible bypass of device protection on the Attestation ID due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00066EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•27 views

ASB-A-331437862

In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.4AI score0.00111EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•23 views

ASB-A-350527097

In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.3AI score0.00097EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•24 views

ASB-A-349777785

In multiqtune of schmultiq.c, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.6AI score0.00281EPSS
SaveExploits0References3
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•27 views

ASB-A-281044385

In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2CVSS5.8AI score0.00095EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/11/01 12:00 a.m.•43 views

ASB-A-347307756

In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6AI score0.00114EPSS
SaveExploits0References4
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•33 views

ASB-A-359692902

Bulletin has no description...

7.8CVSS5.7AI score0.00103EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•23 views

ASB-A-354268756

In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.1AI score0.00082EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•42 views

ASB-A-307532206

In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.7AI score0.0146EPSS
SaveExploits17References3
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•23 views

ASB-A-359699094

Bulletin has no description...

7.8CVSS5.7AI score0.00103EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•41 views

ASB-A-350500647

Bulletin has no description...

8.4CVSS7.7AI score0.0014EPSS
SaveExploits0References3
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•24 views

ASB-A-359699096

Bulletin has no description...

7.8CVSS5.7AI score0.00103EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•40 views

ASB-A-359699091

Bulletin has no description...

7.8CVSS5.7AI score0.00103EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•34 views

ASB-A-340329532

In DevmemXIntMapPages of devicememserver.c, there is a possible arbitrary code execution due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.3AI score0.00089EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•29 views

ASB-A-340332428

In RGXMMUCacheInvalidate of rgxmem.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.3AI score0.00073EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•28 views

ASB-A-354263469

In TBD of TBD, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS7.9AI score0.00082EPSS
SaveExploits1References1
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•21 views

ASB-A-359692772

Bulletin has no description...

7.5CVSS5.7AI score0.00753EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•35 views

ASB-A-350500907

Bulletin has no description...

7.5CVSS5.7AI score0.00358EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•37 views

ASB-A-349780950

In checkKeyIntent of AccountManagerService.java, there is a possible way to bypass intent security check and install an unknown app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.7CVSS5.8AI score0.00168EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•43 views

ASB-A-343714914

In validateSsid of WifiConfigurationUtil.java, there is a possible way to overflow a system configuration file due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

5.3CVSS6AI score0.00214EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•37 views

ASB-A-344620633

Bulletin has no description...

7.5CVSS5.7AI score0.00324EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•43 views

ASB-A-327645387

In onCreate of ChooserActivity.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS5.8AI score0.00085EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•29 views

ASB-A-359699097

Bulletin has no description...

9.8CVSS5.7AI score0.00333EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•24 views

ASB-A-346633576

In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.2AI score0.00086EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•24 views

ASB-A-359699100

Bulletin has no description...

9.8CVSS5.7AI score0.00321EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•26 views

ASB-A-318683126

In parseUriInternal of Intent.java, there is a possible infinite loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...

7.5CVSS5.8AI score0.00317EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•32 views

ASB-A-327748846

In shouldSkipForInitialSUW of AdvancedPowerUsageDetail.java, there is a possible way to bypass factory reset protections due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

8.4CVSS5.8AI score0.00085EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•29 views

ASB-A-359692770

Bulletin has no description...

9.8CVSS5.7AI score0.00333EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•29 views

ASB-A-346640884

In DevmemXReservationPageAddress of devicememserver.c, there is a possible use-after-free due to improper casting. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.2AI score0.00089EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•39 views

ASB-A-309938635

In Source of ZipFile.java, there is a possible way for an attacker to execute arbitrary code by manipulating Dynamic Code Loading due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for...

6.5CVSS6.8AI score0.00285EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/10/01 12:00 a.m.•24 views

ASB-A-346635977

In TBD of TBD, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS6.2AI score0.00086EPSS
SaveExploits0References1
osv_asb
osv_asb
•added 2024/09/01 12:00 a.m.•34 views

ASB-A-341886134

In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.8AI score0.00079EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/09/01 12:00 a.m.•24 views

ASB-A-342490466

In multiple functions of afunix.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.7AI score0.00521EPSS
SaveExploits0References7
osv_asb
osv_asb
•added 2024/09/01 12:00 a.m.•38 views

ASB-A-333364513

In multiple locations, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS5.8AI score0.0008EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/09/01 12:00 a.m.•40 views

ASB-A-293199910

In wifiitemeditcontent of styles.xml , there is a possible FRP bypass due to Missing check for FRP state. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.8AI score0.0008EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/09/01 12:00 a.m.•35 views

ASB-A-329641908

In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS6.3AI score0.00106EPSS
SaveExploits0References2
osv_asb
osv_asb
•added 2024/09/01 12:00 a.m.•47 views

ASB-A-344620630

Bulletin has no description...

7.8CVSS5.7AI score0.00127EPSS
SaveExploits0References2
Total number of security vulnerabilities2720