Zhiyun Qian

A logic issue exists that was addressed through improved checks. An attacker positioned on a privileged network may be able to intercept network traffic.

A permissions issue related to inherited permissions errors may allow an application to gain unauthorized access to protected user data.

This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR Orbi 760 routers. The specific flaw exists within the implementation of the SOAP API, resulting from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system.

The issue concerns Incorrect Access Control, allowing access revocation evasion attacks. Once a malicious sharee obtains access credentials, Chipolo devices can be affected.

This issue allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR routers. The specific flaw exists within the `readycloud control.cgi` file, resulting from the lack of authentication prior to allowing access to functionality. An attacker can leverage this issue to execute code in the context of root. The exploitation of this issue may allow a remote attacker to bypass authentication via an alternative name.

A race condition was addressed with improved state handling, which may allow a malicious application to execute arbitrary code with kernel privileges. The issue is related to a Bluetooth component vulnerability in the macOS operating system, caused by concurrent execution using a shared resource with incorrect synchronization.

A race condition issue was addressed with improved locking, which could allow a remote attacker to cause unexpected application termination or heap corruption.

A logic issue was addressed with improved validation. A malicious application may be able to disclose kernel memory.

The issue allows access to application data processed on the GPU through a side channel exposed by the GPU performance counters. It requires local user access and is not a network or remote attack vector.

The issue allows an attacker to trick a user into installing a malicious application, which can then be used to exploit the sensitive information leak. Successful exploitation may result in the leak of sensitive information.

The issue is a denial of service (DoS) vulnerability that can be exploited by an attacker tricking a user into installing a malicious application. Successful exploitation can cause the camera application to become unusable.

The issue involves the Kernel component and allows local users to obtain sensitive information by leveraging an error in packet counters.

The issue in the ION memory management module allows attackers to cause a denial of service, which can result in the device restarting.

The issue in the ION memory management module allows attackers to obtain sensitive information from uninitialized memory.

The issue affects the ION memory management module, allowing attackers to cause a denial of service, which results in the device restarting.

The issue is related to multiple use-after-free vulnerabilities in the Qualcomm sound driver. These vulnerabilities allow attackers to gain privileges via a crafted application. The estimated number of potentially affected devices is not specified.

The issue allows local users to obtain sensitive information from kernel memory. This is due to the failure to initialize certain data structures in the arch/arm64/mm/dma-mapping.c file, which can be exploited by triggering a dma mmap call.