CVE Vulnerability Catalog

In functions of ubsan_throwing_runtime.cpp, a logic error can lead to permanent denial of service. No additional privileges or user interaction are needed.

In functions of WindowState.java, a user can be tricked into accepting a permission via a tapjacking/overlay attack. This could lead to local privilege escalation without additional privileges.

In updateState of GraphicsDriverEnableAngleAsSystemDriverController.java, a potential persistent denial of service issue exists due to an unusual root cause. This leads to local denial of service without additional privileges.

In createSessionInternal of PackageInstallerService.java, there is a possible to update a Device Policy Controller (DPC) into an invalid directory due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In multiple functions of ubsan_throwing_runtime.cpp, an integer overflow can cause a crash, leading to remote denial of service without user interaction.

In multiple functions of ubsan_throwing_runtime.cpp, improper input validation can cause a system crash, leading to remote denial of service without user interaction.

In hide of WindowState.java, there is a possible way to trick the user into approving permissions due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In InputInterceptor of Letterbox.java, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

In multiple functions of ubsan_throwing_runtime.cpp, an integer overflow can cause the system to crash, leading to remote denial of service without user interaction.

In functions of ubsan_throwing_runtime.cpp, an integer overflow can lead to persistent denial of service and local privilege escalation. No additional privileges or user interaction are needed.

In functions of ubsan_throwing_runtime.cpp, resource exhaustion can lead to persistent denial of service. No additional privileges or user interaction are needed.

In multiple functions of ubsan_throwing_runtime.cpp, an integer overflow can cause a UBSan failure, leading to remote denial of service without user interaction.

In multiple functions of ubsan_throwing_runtime.cpp, an integer overflow can cause a crash, leading to remote denial of service without user interaction.

In multiple functions of ubsan_throwing_runtime.cpp, an integer overflow can cause a persistent denial of service, leading to remote denial of service without user interaction.

In functions of AccessibilityManagerService.java, improper input validation can lead to persistent denial of service. No additional privileges or user interaction are needed.

In isSameApp of NotificationManagerService.java, resource exhaustion can lead to persistent denial of service. No additional privileges or user interaction are needed.

DoS vulnerability in Dräger Infinity Delta, Delta XL, and Kappa patient monitors. A remote attacker can cause the monitor to reboot by sending a malformed network packet. Repeated attacks can disrupt patient monitoring until network connectivity is lost.

ZeusCart 4.0 contains a cross-site request forgery (CSRF) vulnerability that allows attackers to perform unauthorized actions on behalf of victims, such as deactivating customer accounts via the regstatus endpoint with action=deny parameters.

The DeepAI endpoint 'https://api.deepai.org/change_user_email' accepts POST requests without CSRF protection, allowing an attacker to change the victim's email and take over the account.

Nanobot prior to version 0.2.1 has a denial of service vulnerability in the Matrix channel media download handler. Authenticated room members can exhaust process memory and bandwidth by sending media events with missing or invalid size metadata.