الباحثون
رجوع
Zinuo Han
#956
من 60,403
247.5
إجمالي CVSS
الثغرات
·
30
متوسطة
5
عالية
25
PT-2025-32129
2025-08-06
7.8
CVE-2025-21474
A2Dp
A2Dp
توجد مشكلة تلف في الذاكرة عند معالجة الأوامر الموجودة في قائمة انتظار أوامر مستقبل A2DP.
PT-2025-28449
2024-12-20
7.8
CVE-2025-27052
Qualcomm
Snapdragon
اسم البرنامج المعرض للثغرة والإصدارات المتأثرة: لا يمكن تحديد اسم المنتج. الوصف: يحدث تلف في الذاكرة أثناء معالجة حزم البيانات الواردة عبر diag من عملاء Unix. التوصيات: لا توجد في الوقت الحالي أي معلومات حول إصدار أحدث يتضمن تصحيحًا لهذه الثغرة الأمنية.
PT-2024-18755
2024-04-02
7.8
CVE-2024-20846
Unknown
Libsavsac.So
The issue is related to an out-of-bounds write vulnerability while decoding hcr of libsavsac.so. This allows a local attacker to execute arbitrary code.
PT-2024-18757
2024-04-02
7.8
CVE-2024-20848
Unknown
Libsdffextractor
The issue is related to an Improper Input Validation vulnerability in the text parsing implementation. This allows local attackers to write out-of-bounds memory.
PT-2024-18754
2024-04-02
8.4
CVE-2024-20845
Unknown
Libsavsac.So
The issue is an out-of-bounds write vulnerability that occurs while releasing memory in libsavsac.so. This allows a local attacker to execute arbitrary code.
PT-2024-18753
2024-04-02
8.4
CVE-2024-20844
Unknown
Libsavsac.So
The issue is an out-of-bounds write vulnerability that occurs while parsing remaining codewords in libsavsac.so. This allows a local attacker to execute arbitrary code.
PT-2024-18758
2024-04-02
7.8
CVE-2024-20849
Unknown
Libsdffextractor
The issue is related to an Out-of-bound Write vulnerability in the chunk parsing implementation. This allows local attackers to execute arbitrary code.
PT-2024-12411
2024-03-04
7.5
CVE-2023-33105
Unknown
Wlan Firmware
The issue is related to a transient Denial of Service (DOS) in WLAN Host and Firmware. This occurs when a large number of open authentication frames are sent with an invalid transaction sequence number. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.
PT-2024-13091
2024-02-06
7.3
CVE-2023-43518
Qualcomm
Snapdragon
The issue involves memory corruption that occurs when parsing an invalid mp2 clip in a video.
PT-2023-18476
2023-10-02
6.7
CVE-2023-22384
Unknown
Vr Service
The issue is related to memory corruption in the VR Service when sending data using the Fast Message Queue (FMQ).
PT-2023-18329
2023-09-04
6.5
CVE-2023-21667
Unknown
Bluetooth Host
The issue is related to a Transient Denial of Service (DOS) in the Bluetooth HOST. It occurs when passing a descriptor to validate a blacklisted Bluetooth keyboard. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.
PT-2023-22858
2023-07-06
6.2
CVE-2023-30662
Unknown
Uwbaospadapterservice
The issue allows local attackers to access the UWB chipset Identifier due to an Exposure of Sensitive Information vulnerability in the `getChipIds` function of the UwbAospAdapterService. This could potentially expose sensitive information.
PT-2023-13251
2023-06-06
6.7
CVE-2022-33230
Fm Host
Fm Host
The issue is related to memory corruption in FM Host due to a buffer copy operation without checking the size of the input. This can lead to potential security risks.
PT-2023-13821
2023-03-07
7.3
CVE-2022-40537
Qualcomm
Snapdragon
The issue involves memory corruption in the Bluetooth HOST when processing the `AVRC PDU GET PLAYER APP VALUE TEXT` AVRCP response. This suggests a problem with how Bluetooth handles certain responses, potentially leading to memory corruption.
PT-2017-10638
2017-09-08
5.5
CVE-2017-0776
Google
Android
A information disclosure issue exists in the Android media framework.
PT-2017-2853
2017-07-13
9.3
CVE-2017-0764
Google
Android
A remote code execution issue in the Android media framework, specifically in the libvorbis library, is related to inadequate access control. This allows a remote attacker to execute arbitrary code.
PT-2017-2495
2017-07-06
9.3
CVE-2017-0700
Google
Android
The issue is related to insufficient access control in the Android operating system, which can be exploited by a remote attacker to execute arbitrary code.
PT-2017-2489
2017-07-06
9.3
CVE-2017-0678
Google
Android
The issue is related to a remote code execution vulnerability in the Android media framework. It is associated with insufficient access control in the Android operating system. Exploitation of this issue may allow a remote attacker to execute arbitrary code.
PT-2017-2856
2017-06-16
9.3
CVE-2017-0761
Google
Android
A remote code execution issue in the Android media framework's libavc library is related to inadequate access control. This allows a remote attacker to execute arbitrary code.
PT-2017-2857
2017-05-30
9.3
CVE-2017-0760
Google
Android
The issue is related to a remote code execution vulnerability in the Android media framework, specifically in the libstagefright library. This vulnerability is associated with inadequate access control. It allows a remote attacker to execute arbitrary code.