CVE-2023-48425

CVE-2023-48425 affects U-Boot and is described as a vulnerability that results in persistent code execution. The entry indicates a remote-accessable scenario (attack vector: NETWORK, attack complexity: LOW, privileges required: NONE) with high impact on confidentiality, integrity, and availabilit...

CVE-2023-48417

CVE-2023-48417 affects KeyChainActivity in Chromecast devices (KeyChain component) and stems from missing permission checks, enabling unauthorized access and manipulation of KeyChain operations. The issue can allow an attacker to escalate privileges and manipulate KeyChain via a malicious Intent ...

CVE-2023-48424

CVE-2023-48424 is an elevation of privilege flaw in the U-Boot shell affecting Chromecast/AMLogic bootloader components, described as enabling privilege escalation on a production device. The Chromecast Security Bulletin (Chromecast 2023-12-01) places CVE-2023-48424 under AMLogic with High severi...

CVE-2023-6181

CVE-2023-6181 affects Google Chromecast/Chromecast with Google TV via an oversight in the BCB reboot-handling that occurs in U-Boot, enabling persistent code execution. The issue is described across multiple feeds as a reboot-reason handling flaw with the root cause in BCB and potential for persi...

CVE-2023-48426

CVE-2023-48426 affects u-boot and is tied to a buffer overflow in memory that allows access to the u-boot shell and triggering interrupts over UART. The practical impact described across sources is the potential to bypass secure boot mechanisms. Affected component: u-boot (bootloader). Exact vuln...

CVE-2018-12716

The CVE-2018-12716 entry describes an API service vulnerability in Google Home and Chromecast devices prior to mid-July 2018. The issue allows DNS rebinding to read scan_results JSON data and extract BSSID fields, enabling remote readers on the local network to determine the user’s physical locat...