CVE Vulnerability Catalog

An issue was discovered in l2cap_sock_release in the Linux kernel before version 6.4.10, leading to a use-after-free due to mishandling of children of an sk.

An issue was discovered in zola versions 0.13.0 through 0.17.2 related to the web server implementation. The handle_request function does not account for sequences of special path control characters in the URL, allowing directory traversal and reading arbitrary files from the filesystem.

CVE-2023-39406 describes a permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart.

Vulnerability related to input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is a parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may lead to unauthorized reading and writing of sandbox files.

There is an input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect system availability.

CVE-2023-39395 describes a mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability.

Vulnerability in the wifienhance module allows API privilege escalation. Successful exploitation of this vulnerability may lead to modification of the ARP list.

Vulnerability in the USB Service module that leads to leakage of system file information. Successful exploitation of this vulnerability may affect data confidentiality.

Vulnerability related to input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart.

Vulnerability in the window management module related to permission control. Successful exploitation of this vulnerability may lead to malicious pop-up windows.

The vulnerability in the PMS module is due to insufficient verification of input parameters. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart.

Vulnerability related to configuration defects in the media module of certain products. Successful exploitation of this vulnerability may lead to unauthorized access.

Vulnerability related to out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may lead to other apps being executed with escalated privileges.

There is a deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect system availability.