Lewei Qu

The issue is related to a possible command injection in Config Manager due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation.

The issue is related to a possible escalation of privilege due to a stack buffer overflow in Boa. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation.

The issue is related to a missing permission check, which could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation.

The issue is related to a missing permission check, which could lead to remote information disclosure to a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation.

In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation.

The issue is related to a possible command injection in Config Manager due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation.

An out-of-bound write issue can be triggered in the Zephyr bluetooth mesh core stack during provisioning.

An out-of-bound write issue can be triggered in the Zephyr bluetooth mesh core stack during provisioning.

A memory corruption issue can be triggered in the ESP-BLE-MESH component during provisioning due to the lack of a check for the `SegN` field of the Transaction Start PDU. This can lead to memory corruption-related attacks, potentially allowing an attacker to gain control of the entire system.

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: The issue is related to improper input validation in mobile log d, which could lead to local information disclosure. System execution privileges are needed for exploitation, and user interaction is not required. Recommendations: For Android version Android-11, apply the patch with ID ALPS05457039 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Android version Android-11 Description: The issue is related to a possible memory corruption due to a stack buffer overflow in the aee component. This could lead to local escalation of privilege, with System execution privileges needed. User interaction is not required for exploitation. Recommendations: For Android version Android-11, apply the patch with ID ALPS05457070 to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-11 Description: In the `mobile log d` component, a command injection issue exists due to a missing bounds check. This could lead to local escalation of privilege, requiring System execution privileges, and does not need user interaction for exploitation. Recommendations: For Android versions Android-10 through Android-11, apply the patch with ID ALPS05458478 to resolve the issue.

The issue is a Buffer Overflow in BluFi provisioning, specifically in the `btc blufi recv handler` function in `blufi prf.c`. An attacker can exploit this by sending a crafted BluFi protocol Write Attribute command to characteristic `0xFF01`, which can lead to a buffer overflow due to manipulated packet fields.