Archive
10 March 2020
Vulnerabilities first published on this day (UTC), newest first.
144 results · Feed
-
Unscored —
In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. …
-
Unscored —
In setBluetoothTethering of PanService.java, there is a possible permission bypass due to a missing permission check. T…
-
Unscored —
In onCreate of SettingsHomepageActivity, there is a possible tapjacking attack. This could lead to local escalation of …
-
Unscored —
In nfa_hciu_send_msg of nfa_hci_utils.cc, there is a possible out of bounds write due to improper input validation. Thi…
-
Unscored —
In onReadBuffer() of StreamingSource.cpp, there is a possible information disclosure due to uninitialized data. This co…
-
Unscored —
In onTransact of IAudioFlinger.cpp, there is a possible stack information leak due to uninitialized data. This could le…
-
Unscored —
In setMasterMute of AudioService.java, there is a missing permission check. This could lead to local silencing of audio…
-
Unscored —
In DrmPlugin::releaseSecureStops of DrmPlugin.cpp, there is a possible out of bounds write due to a heap buffer overflo…
-
Unscored —
In getProcessPss of ActivityManagerService.java, there is a possible side channel information disclosure. This could le…
-
Unscored —
In several functions of NotificationManagerService.java, there are missing permission checks. This could lead to local …
-
Unscored —
In Euicc, there is a possible information disclosure due to an included test Certificate. This could lead to remote inf…
-
Unscored —
In the netlink driver, there is a possible out of bounds write due to a race condition. This could lead to local escala…
-
Unscored —
In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local esc…
-
Unscored —
In StatsService::command of StatsService.cpp, there is possible memory corruption due to a race condition. This could l…
-
Unscored —
In Pixel Recorder, there is a possible permissions bypass allowing arbitrary apps to record audio. This could lead to l…
-
Unscored —
In setRequirePmfInternal of sta_network.cpp, there is a possible default value being improperly applied due to a logic …
-
Unscored —
In query of SmsProvider.java and MmsSmsProvider.java, there is a possible permission bypass due to SQL injection. This …
-
Unscored —
In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to …
-
Unscored —
In l2c_rcv_acl_data of l2c_main.cc, there is a possible out of bounds read due to an incorrect bounds check. This could…
-
High 7.8
In the ioctl handlers of the Mediatek Command Queue driver, there is a possible out of bounds write due to insufficient…
KEV Nov 3, 2021 -
Unscored —
In set_nonce of fpc_ta_qc_auth.c, there is a possible out of bounds read due to a missing bounds check. This could lead…
-
Unscored —
In authorize_enrol of fpc_ta_hw_auth.c, there is a possible out of bounds read due to a missing bounds check. This coul…
-
Unscored —
In fpc_ta_hw_auth_unwrap_key of fpc_ta_hw_auth_qsee.c, there is a possible out of bounds read due to a missing bounds c…
-
High 7.8
In binder_transaction of binder.c, there is a possible out of bounds write due to an incorrect bounds check. This could…
KEV Nov 3, 2021 -
Unscored —
In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. Th…
-
Unscored —
In rw_i93_sm_update_ndef of rw_i93.cc, there is a possible read of uninitialized data due to a missing bounds check. Th…
-
Unscored —
In rw_i93_sm_set_read_only of rw_i93.cc, there is a possible out of bounds read due to a missing bounds check. This cou…
-
Unscored —
In hasPermissions of PermissionMonitor.java, there is a possible access to restricted permissions due to a permissions …
-
Unscored —
In query of TelephonyProvider.java, there is a possible access to SIM card info due to a missing permission check. This…
-
Unscored —
In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This cou…
-
Unscored —
In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could …
-
Unscored —
In ih264d_release_display_bufs of ih264d_utils.c, there is a possible out of bounds write due to a heap buffer overflow…
-
Unscored —
In triggerAugmentedAutofillLocked and related functions of Session.java, it is possible for Augmented Autofill to displ…
-
Unscored —
In the WifiConfigManager, there is a possible storage of location history which can only be deleted by triggering a fac…
-
Unscored —
In fpc_ta_pn_get_unencrypted_image of fpc_ta_pn.c, there is a possible out of bounds write due to a missing bounds chec…
-
Unscored —
In get_auth_result of fpc_ta_hw_auth.c, there is a possible out of bounds write due to a missing bounds check. This cou…
-
Unscored —
In fpc_ta_get_build_info of fpc_ta_kpi.c, there is a possible out of bounds write due to a missing bounds check. This c…
-
Critical 9.8
Kantech EntraPass Improper Input Validation
A vulnerability with the SmartService API Service option exists whereby an unauthorized user could potentially exploit this to upload malicious code to the server that could be executed at system level privileges. This affects Johnson Controls' Kantech EntraP…
-
High 7.5
Metasys Improper Restriction of XML External Entity Reference
XXE vulnerability exists in the Metasys family of product Web Services which has the potential to facilitate DoS attacks or harvesting of ASCII server files. This affects Johnson Controls' Metasys Application and Data Server (ADS, ADS-Lite) versions 10.1 and …
-
Unscored —
A vulnerability has been identified in Spectrum Power™ 5 (All versions < v5.50 HF02). The web server could allow Cross-…