CVE-2020-0069

The CVE-2020-0069 issue affects MediaTek CMDQ driver ioctl handlers in Android kernel, where insufficient input sanitization and missing SELinux restrictions can cause an out-of-bounds write, enabling local privilege escalation without extra privileges or user interaction. Public material confirm...

CVE-2019-9506

CVE-2019-9506 affects Bluetooth KNOB (Key Negotiation of Bluetooth) by allowing nearby attackers to influence encryption key length during BR/EDR negotiation, enabling potential eavesdropping and ciphertext injection. Connected sources show this vulnerability being acknowledged by Apple across iO...

CVE-2019-5303

CVE-2019-5303 describes two denial-of-service vulnerabilities on Huawei smartphones: a rogue base station can send specially crafted TD-SCDMA messages, exploiting insufficient input validation of two parsed values to cause device abnormal. The connected documents reiterate the same impact and pro...

CVE-2019-5302

The CVE-2019-5302 entry concerns two denial-of-service vulnerabilities in Huawei smartphones triggered by specially crafted TD-SCDMA messages sent from a rogue base station. The issue arises from insufficient input validation during message parsing, potentially causing device abnormal behavior. T...