CVEs published in December 2023
2,760 vulnerabilities, 382 critical, 9 exploited.
- totolink x6000r firmwareAn issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote...9.8 Critical
- totolink x6000r firmwareAn issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote...9.8 Critical
- totolink x6000r firmwareAn issue in TOTOLINK X6000R V9.4.0cu.652_B20230116 and V9.4.0cu.852_B20230719 allows a remote...9.8 Critical
- google androidIn multiple locations, there is a possible way to corrupt memory due to a double free. This could...7.8 High
- google androidIn mOnDone of NotificationConversationInfo.java, there is a possible way to access app...5.5 Medium
- google androidIn hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to...7.8 High
- google androidIn OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record...7.8 High
- google androidIn createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible...7.8 High
- google androidIn keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass...7.8 High
- google androidIn verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user...5.5 Medium
- google androidIn onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory...7.8 High
- google androidIn BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation...6.5 Medium
- google androidIn getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for...7.8 High
- google androidIn callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a...8.8 High
- google androidIn transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due...8.8 High
- google androidIn run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This...7.8 High
- google androidIn parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds...5.5 Medium
- google androidIn modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to...9.8 Critical
- google androidIn multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic...7.8 High
- google androidIn injectSendIntentSender of ShortcutService.java, there is a possible background activity launch...7.8 High
- google androidIn a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out...9.8 Critical
- google androidIn multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition....8.1 High
- google androidIn createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials...5.5 Medium
- google androidIn forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register...5.5 Medium
- google androidIn saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of...5.5 Medium
- google androidIn visitUris of Notification.java, there is a possible cross-user media read due to Confused...5.5 Medium
- samsung exynos 850 firmwareAn issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem...2.8 Low
- google androidThere is elevation of privilege.9.8 Critical
- google androidIn visitUris of Notification.java, there is a possible way to display images from another user...5.5 Medium
- qualcomm 315 5g iot modem firmware, apq8017 firmware, apq8064au firmware +241 more +243 moreInteger Overflow or Wraparound in Graphics Linux8.4 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +152 more +154 moreUse of Out-of-range Pointer Offset in Graphics8.4 High
- qualcomm aqt1000 firmware, fastconnect 6200 firmware, fastconnect 6700 firmware +93 more +95 moreBuffer Copy Without Checking Size of Input in Bluetooth HOST8.4 High
- qualcomm apq5053-aa firmware, ar8035 firmware, csra6620 firmware +116 more +118 moreBuffer Copy without Checking Size of Input (`Classic Buffer Overflow`) in Core7.8 High
- qualcomm apq5053-aa firmware, ar8035 firmware, csra6620 firmware +142 more +144 moreUse of Out-of-range Pointer Offset in Audio7.8 High
- qualcomm 315 5g iot modem firmware, 8098 firmware, 8953pro firmware +313 more +315 moreUse After Free in DSP Services7.8 High
- qualcomm csr8811 firmware, immersive home 214 platform firmware, immersive home 216 platform firmware +115 more +117 moreImproper Validation of Array Index in Kernel8.4 High
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6768, mt6781, mt6789, mt6833, mt6853, mt6855, mt6877, mt6879, mt6883, mt6885, mt6893, mt6895, mt6983, mt8167, mt8167s, mt8168, mt8175, mt8321, mt8362a, mt8365, mt8385, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8797, mt8798 +1 moreIn decoder, there is a possible out of bounds write due to a missing bounds check. This could...7.8 High
- google android, mediatek, inc. mt6580, mt6739, mt6761, mt6762, mt6765, mt6768, mt6781, mt6789, mt6833, mt6853, mt6855, mt6877, mt6879, mt6883, mt6885, mt6893, mt6895, mt6983, mt8167, mt8167s, mt8168, mt8175, mt8321, mt8362a, mt8365, mt8385, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8797, mt8798 +1 moreIn decoder, there is a possible out of bounds write due to an integer overflow. This could lead...7.8 High
- google android, mediatek mt6885, mediatek, inc. mt6761, mt6763, mt6765, mt6768, mt6771, mt6779, mt6785, mt6853, mt6873, mt6885 +2 moreIn vdec, there is a possible out of bounds write due to type confusion. This could lead to local...6.7 Medium
- google android, mediatek, inc. mt2713, mt6580, mt6739, mt6761, mt6762, mt6765, mt6779, mt6785, mt6789, mt6833, mt6835, mt6853, mt6853t, mt6855, mt6873, mt6877, mt6879, mt6883, mt6885, mt6886, mt6889, mt6895, mt6983, mt6985, mt8167, mt8167s, mt8168, mt8175, mt8188, mt8195, mt8321, mt8362a, mt8365, mt8385, mt8390, mt8395, mt8765, mt8766, mt8768, mt8781, mt8786, mt8788, mt8789, mt8791t, mt8797, mt8798 +1 moreIn audio, there is a possible out of bounds write due to a missing bounds check. This could lead...7.8 High
- arm ltd 5th gen gpu architecture userspace driver, bifrost gpu userspace driver, midgard gpu userspace driver +5 more +7 moreMali GPU Userspace Driver can make an Out-of-Bounds access7.8 High
- qualcomm apq8017 firmware, apq8064au firmware, aqt1000 firmware +212 more +214 moreInteger Overflow or Wraparound in Bluetooth Host7.5 High
- qualcomm ar8035 firmware, fastconnect 6900 firmware, fastconnect 7800 firmware +42 more +44 moreBuffer Copy Without Checking Size of Input in WLAN Host6.7 Medium
- qualcomm fastconnect 6900 firmware, fastconnect 7800 firmware, qam8295p firmware +32 more +34 moreBuffer Copy Without Checking Size of Input in WLAN Host6.7 Medium
- qualcomm aqt1000 firmware, ar8035 firmware, fastconnect 6200 firmware +54 more +56 moreUse After Free in Audio6.7 Medium
- qualcomm aqt1000 firmware, c-v2x 9150 firmware, fastconnect 6200 firmware +57 more +59 moreUse After Free in Camera6.7 Medium
- google androidThere is elevation of privilege.9.8 Critical
- google androidThere is elevation of privilege.9.8 Critical
- google androidThere is elevation of privilege.9.8 Critical
- google androidThere is elevation of privilege.9.8 Critical
- Show moreLoading…