Page 26 of 4367 results (0.008 seconds)

CVSS: 4.4EPSS: 0%CPEs: 16EXPL: 0

CVE-2023-48339

https://notcve.org/view.php?id=CVE-2023-48339

18 Jan 2024 — In jpg driver, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed En jpg driver, es posible que falte una verificación de permiso. Esto podría conducir a la divulgación de información local con privilegios de ejecución del Sistema necesarios. • https://www.unisoc.com/en_us/secy/announcementDetail/1745735200442220545 • CWE-862: Missing Authorization •

CVSS: 6.2EPSS: 0%CPEs: 97EXPL: 0

CVE-2024-20806

https://notcve.org/view.php?id=CVE-2024-20806

04 Jan 2024 — Improper access control in Notification service prior to SMR Jan-2024 Release 1 allows local attacker to access notification data. El control de acceso inadecuado en el servicio de notificaciones anterior a SMR, enero de 2024, versión 1, permite a un atacante local acceder a los datos de notificación. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01 •

CVSS: 5.5EPSS: 0%CPEs: 82EXPL: 0

CVE-2024-20805

https://notcve.org/view.php?id=CVE-2024-20805

04 Jan 2024 — Path traversal vulnerability in ZipCompressor of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file. Vulnerabilidad de path traversal en ZipCompressor de MyFiles antes de SMR, enero de 2024, versión 1 en Android 11 y Android 12, y la versión 14.5.00.21 en Android 13, permite a los atacantes escribir archivos arbitrarios. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 5.5EPSS: 0%CPEs: 82EXPL: 0

CVE-2024-20804

https://notcve.org/view.php?id=CVE-2024-20804

04 Jan 2024 — Path traversal vulnerability in FileUriConverter of MyFiles prior to SMR Jan-2024 Release 1 in Android 11 and Android 12, and version 14.5.00.21 in Android 13 allows local attackers to write arbitrary file. Vulnerabilidad de path traversal en FileUriConverter de MyFiles antes de SMR, enero de 2024, versión 1 en Android 11 y Android 12, y la versión 14.5.00.21 en Android 13, permite a los atacantes escribir archivos arbitrarios. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 6.8EPSS: 0%CPEs: 96EXPL: 0

CVE-2024-20803

https://notcve.org/view.php?id=CVE-2024-20803

04 Jan 2024 — Improper authentication vulnerability in Bluetooth pairing process prior to SMR Jan-2024 Release 1 allows remote attackers to establish pairing process without user interaction. Una vulnerabilidad de autenticación inadecuada en el proceso de emparejamiento de Bluetooth anterior a SMR, enero de 2024, versión 1, permite a atacantes remotos establecer el proceso de emparejamiento sin interacción del usuario. • https://security.samsungmobile.com/securityUpdate.smsb?year=2024&month=01 • CWE-287: Improper Authentication •

CVSS: 6.7EPSS: 0%CPEs: 48EXPL: 0

CVE-2023-32891

https://notcve.org/view.php?id=CVE-2023-32891

02 Jan 2024 — In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07933038; Issue ID: MSV-559. En el servicio Bluetooth, existe una posible escritura fuera de los límites debido a una validación de entrada incorrecta. • https://corp.mediatek.com/product-security-bulletin/January-2024 • CWE-787: Out-of-bounds Write •

CVSS: 7.8EPSS: 0%CPEs: 60EXPL: 0

CVE-2023-32889

https://notcve.org/view.php?id=CVE-2023-32889

02 Jan 2024 — In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01161825; Issue ID: MOLY01161825 (MSV-895). En Modem IMS Call UA, existe una posible escritura fuera de los límites debido a una verificación de límites faltantes. • https://corp.mediatek.com/product-security-bulletin/January-2024 • CWE-787: Out-of-bounds Write •

CVSS: 6.7EPSS: 0%CPEs: 33EXPL: 0

CVE-2023-32885

https://notcve.org/view.php?id=CVE-2023-32885

02 Jan 2024 — In display drm, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07780685; Issue ID: ALPS07780685. En display drm, existe una posible corrupción de la memoria debido a una verificación de los límites faltantes. • https://corp.mediatek.com/product-security-bulletin/January-2024 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.7EPSS: 0%CPEs: 61EXPL: 0

CVE-2023-32884

https://notcve.org/view.php?id=CVE-2023-32884

02 Jan 2024 — In netdagent, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07944011; Issue ID: ALPS07944011. En netdagent, existe una posible divulgación de información debido a una verificación de los límites incorrecta. • https://corp.mediatek.com/product-security-bulletin/January-2024 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 6.7EPSS: 0%CPEs: 58EXPL: 0

CVE-2023-32883

https://notcve.org/view.php?id=CVE-2023-32883

02 Jan 2024 — In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08282249; Issue ID: ALPS08282249. En Engineer Mode, existe una posible escritura fuera de los límites debido a una verificación de los límites faltantes. • https://corp.mediatek.com/product-security-bulletin/January-2024 • CWE-787: Out-of-bounds Write •