CVE Feed

    Dashboard / CVE

    6.7
    Medium

    CVE-2023-32853

    Last Modified: 21 Nov 2024

    In rpmb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07648764; Issue ID: ALPS07648764.

    Published: 4 Dec 2023
    4.4
    Medium

    CVE-2023-32852

    Last Modified: 21 Nov 2024

    In cameraisp, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07670971; Issue ID: ALPS07670971.

    Published: 4 Dec 2023
    6.7
    Medium

    CVE-2023-32849

    Last Modified: 21 Nov 2024

    In cmdq, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08161758; Issue ID: ALPS08161758.

    Published: 4 Dec 2023
    7.8
    High

    CVE-2023-32851

    Last Modified: 21 Nov 2024

    In decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08016652; Issue ID: ALPS08016652.

    Published: 4 Dec 2023
    7.8
    High

    CVE-2023-32850

    Last Modified: 2 Dec 2024

    In decoder, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08016659; Issue ID: ALPS08016659.

    Published: 4 Dec 2023
    6.7
    Medium

    CVE-2023-32848

    Last Modified: 21 Nov 2024

    In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08163896; Issue ID: ALPS08163896.

    Published: 4 Dec 2023
    7.8
    High

    CVE-2023-32847

    Last Modified: 21 Nov 2024

    In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS08241940; Issue ID: ALPS08241940.

    Published: 4 Dec 2023
    5.3
    Medium

    CVE-2023-29258

    Last Modified: 13 Feb 2025

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1, and 11.5 is vulnerable to a denial of service through a specially crafted federated query on specific federation objects. IBM X-Force ID: 252048.

    Published: 4 Dec 2023
    5.3
    Medium

    CVE-2023-40687

    Last Modified: 13 Feb 2025

    IBM DB2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted RUNSTATS command on an 8TB table. IBM X-Force ID: 264809.

    Published: 4 Dec 2023
    5.3
    Medium

    CVE-2023-38727

    Last Modified: 13 Feb 2025

    IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted SQL statement. IBM X-Force ID: 262257.

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42749

    Last Modified: 21 Nov 2024

    In enginnermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

    Published: 4 Dec 2023
    7.8
    High

    CVE-2023-42748

    Last Modified: 21 Nov 2024

    In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

    Published: 4 Dec 2023
    7.8
    High

    CVE-2023-42747

    Last Modified: 29 May 2025

    In camera service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

    Published: 4 Dec 2023
    7.8
    High

    CVE-2023-42746

    Last Modified: 21 Nov 2024

    In power manager, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

    Published: 4 Dec 2023
    7.8
    High

    CVE-2023-42745

    Last Modified: 21 Nov 2024

    In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42744

    Last Modified: 2 Dec 2024

    In telecom service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed

    Published: 4 Dec 2023
    7.8
    High

    CVE-2023-42743

    Last Modified: 21 Nov 2024

    In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42742

    Last Modified: 2 Dec 2024

    In sysui, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42741

    Last Modified: 21 Nov 2024

    In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

    Published: 4 Dec 2023
    7.8
    High

    CVE-2023-42740

    Last Modified: 21 Nov 2024

    In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

    Published: 4 Dec 2023
    7.8
    High

    CVE-2023-42739

    Last Modified: 21 Nov 2024

    In engineermode service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

    Published: 4 Dec 2023
    7.8
    High

    CVE-2023-42738

    Last Modified: 21 Nov 2024

    In telocom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42737

    Last Modified: 21 Nov 2024

    In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

    Published: 4 Dec 2023
    7.8
    High

    CVE-2023-42736

    Last Modified: 29 May 2025

    In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

    Published: 4 Dec 2023
    4.4
    Medium

    CVE-2023-42735

    Last Modified: 21 Nov 2024

    In telephony service, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42734

    Last Modified: 21 Nov 2024

    In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42733

    Last Modified: 21 Nov 2024

    In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42732

    Last Modified: 21 Nov 2024

    In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2022-48464

    Last Modified: 21 Nov 2024

    In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2022-48463

    Last Modified: 21 Nov 2024

    In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2022-48462

    Last Modified: 21 Nov 2024

    In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

    Published: 4 Dec 2023
    4.4
    Medium

    CVE-2023-42751

    Last Modified: 21 Nov 2024

    In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

    Published: 4 Dec 2023
    4.4
    Medium

    CVE-2023-42731

    Last Modified: 2 Dec 2024

    In Gnss service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42730

    Last Modified: 21 Nov 2024

    In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

    Published: 4 Dec 2023
    4.4
    Medium

    CVE-2023-42729

    Last Modified: 21 Nov 2024

    In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42728

    Last Modified: 21 Nov 2024

    In phasecheckserver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

    Published: 4 Dec 2023
    4.4
    Medium

    CVE-2023-42727

    Last Modified: 21 Nov 2024

    In gpu driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local denial of service with System execution privileges needed

    Published: 4 Dec 2023
    4.4
    Medium

    CVE-2023-42726

    Last Modified: 29 May 2025

    In TeleService, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

    Published: 4 Dec 2023
    4.4
    Medium

    CVE-2023-42725

    Last Modified: 21 Nov 2024

    In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

    Published: 4 Dec 2023
    4.4
    Medium

    CVE-2023-42724

    Last Modified: 21 Nov 2024

    In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42723

    Last Modified: 21 Nov 2024

    In camera service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

    Published: 4 Dec 2023
    6.7
    Medium

    CVE-2023-42722

    Last Modified: 21 Nov 2024

    In camera service, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42721

    Last Modified: 2 Dec 2024

    In flv extractor, there is a possible missing verification incorrect input. This could lead to local denial of service with no additional execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42720

    Last Modified: 21 Nov 2024

    In video service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42719

    Last Modified: 21 Nov 2024

    In video service, there is a possible out of bounds read due to a incorrect bounds check. This could lead to local denial of service with no additional execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42718

    Last Modified: 21 Nov 2024

    In dialer, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

    Published: 4 Dec 2023
    7.5
    High

    CVE-2023-42717

    Last Modified: 21 Nov 2024

    In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed

    Published: 4 Dec 2023
    7.5
    High

    CVE-2023-42716

    Last Modified: 29 May 2025

    In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42715

    Last Modified: 21 Nov 2024

    In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

    Published: 4 Dec 2023
    5.5
    Medium

    CVE-2023-42714

    Last Modified: 21 Nov 2024

    In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed

    Published: 4 Dec 2023