deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-21571
Published: 2025-01-21
Description: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).  Supported versions that are affected are Prior to 7.0.24 and  prior to 7.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox.  While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as  unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L).
CVSS Score: 7.3 (HIGH)
CWE: CWE-732
References: https://www.oracle.com/security-alerts/cpujan2025.html
CVE: CVE-2023-27112
Published: 2025-01-21
Description: pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the projectCode parameter at project.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/a54552239/pearProjectApi/issues/32
CVE: CVE-2023-27113
Published: 2025-01-21
Description: pearProjectApi v2.8.10 was discovered to contain a SQL injection vulnerability via the organizationCode parameter at project.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/a54552239/pearProjectApi/issues/31
CVE: CVE-2023-50733
Published: 2025-01-21
Description: A Server-Side Request Forgery (SSRF) vulnerability has been identified in the Web Services feature of newer
Lexmark devices.
CVSS Score: 8.6 (HIGH)
CWE: CWE-20, CWE-918
References: https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html
CVE: CVE-2024-24442
Published: 2025-01-21
Description: A NULL pointer dereference in the ngap_app::handle_receive routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP message.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: http://openairinterface.com; https://cellularsecurity.org/ransacked; https://cellularsecurity.org/ransacked
CVE: CVE-2024-24444
Published: 2025-01-21
Description: Improper file descriptor handling for closed connections in OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) by repeatedly establishing SCTP connections with the N2 interface.
CVSS Score: 7.5 (HIGH)
CWE: CWE-775
References: http://openairinterface.com; https://cellularsecurity.org/ransacked; https://cellularsecurity.org/ransacked
CVE: CVE-2024-24445
Published: 2025-01-21
Description: OpenAirInterface CN5G AMF (oai-cn5g-amf) <= 2.0.0 contains a null dereference in its handling of unsupported NGAP protocol messages which allows an attacker with network-adjacent access to the AMF to carry out denial of service. When a procedure code/presence field tuple is received that is unsupported, OAI indexes into a null function pointer and subsequently dereferences it.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://openairinterface.com; https://cellularsecurity.org/ransacked
CVE: CVE-2024-24451
Published: 2025-01-21
Description: A stack overflow in the sctp_server::sctp_receiver_thread component of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) by repeatedly establishing SCTP connections with the N2 interface.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://openairinterface.com; https://cellularsecurity.org/ransacked; https://cellularsecurity.org/ransacked
CVE: CVE-2024-45478
Published: 2025-01-21
Description: Stored XSS vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0.
Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger; http://www.openwall.com/lists/oss-security/2025/01/21/3
CVE: CVE-2024-45479
Published: 2025-01-21
Description: SSRF vulnerability in Edit Service Page of Apache Ranger UI in Apache Ranger Version 2.4.0.
Users are recommended to upgrade to version Apache Ranger 2.5.0, which fixes this issue.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918, CWE-918
References: https://cwiki.apache.org/confluence/display/RANGER/Vulnerabilities+found+in+Ranger; http://www.openwall.com/lists/oss-security/2025/01/21/4
CVE: CVE-2024-51941
Published: 2025-01-21
Description: A remote code injection vulnerability exists in the Ambari Metrics and 
AMS Alerts feature, allowing authenticated users to inject and execute 
arbitrary code. The vulnerability occurs when processing alert 
definitions, where malicious input can be injected into the alert script
 execution path. An attacker with authenticated access can exploit this 
vulnerability to execute arbitrary commands on the server. The issue has
 been fixed in the latest versions of Ambari.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://lists.apache.org/thread/xq50nlff7o7z1kq3y637clzzl6mjhl8j; http://www.openwall.com/lists/oss-security/2025/01/21/9
CVE: CVE-2025-23195
Published: 2025-01-21
Description: An XML External Entity (XXE) vulnerability exists in the Ambari/Oozie 
project, allowing an attacker to inject malicious XML entities. This 
vulnerability occurs due to insecure parsing of XML input using the 
`DocumentBuilderFactory` class without disabling external entity 
resolution. An attacker can exploit this vulnerability to read arbitrary
 files on the server or perform server-side request forgery (SSRF) 
attacks. The issue has been fixed in both Ambari 2.7.9 and the trunk 
branch.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: https://lists.apache.org/thread/hsb6mvxd7g37dq1ygtd0pd88gs9tfcwq; http://www.openwall.com/lists/oss-security/2025/01/21/7
CVE: CVE-2025-23196
Published: 2025-01-21
Description: A code injection vulnerability exists in the Ambari Alert Definition 
feature, allowing authenticated users to inject and execute arbitrary 
shell commands. The vulnerability arises when defining alert scripts, 
where the script filename field is executed using `sh -c`. An attacker 
with authenticated access can exploit this vulnerability to inject 
malicious commands, leading to remote code execution on the server. The 
issue has been fixed in the latest versions of Ambari.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://lists.apache.org/thread/70g1l5lxvko7kvhyxmtmklhhfrlon837; http://www.openwall.com/lists/oss-security/2025/01/21/8
CVE: CVE-2023-37024
Published: 2025-01-21
Description: A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an `Emergency Number List` Information Element.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: https://cellularsecurity.org/ransacked
CVE: CVE-2023-37025
Published: 2025-01-21
Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Reset` packet missing an expected `ResetType` field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cellularsecurity.org/ransacked; https://cellularsecurity.org/ransacked
CVE: CVE-2023-37026
Published: 2025-01-21
Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Release Response` packet missing an expected `MME_UE_S1AP_ID` field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cellularsecurity.org/ransacked; https://cellularsecurity.org/ransacked
CVE: CVE-2023-37027
Published: 2025-01-21
Description: Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Modification Indication` packet missing an expected `eNB_UE_S1AP_ID` field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cellularsecurity.org/ransacked
CVE: CVE-2023-37028
Published: 2025-01-21
Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Modification Indication` packet missing an expected `eNB_UE_S1AP_ID` field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cellularsecurity.org/ransacked
CVE: CVE-2023-37029
Published: 2025-01-21
Description: Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are susceptible to an assertion-based crash when an oversized NAS packet is received. An attacker may leverage this behavior to repeatedly crash the MME via either a compromised base station or via an unauthenticated cellphone within range of a base station managed by the MME, causing a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: https://cellularsecurity.org/ransacked
CVE: CVE-2023-37030
Published: 2025-01-21
Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `eNB_UE_S1AP_ID` field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cellularsecurity.org/ransacked
CVE: CVE-2023-37031
Published: 2025-01-21
Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `eNB Configuration Transfer` packet missing its required `Target eNB ID` field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cellularsecurity.org/ransacked
CVE: CVE-2023-37032
Published: 2025-01-21
Description: A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an oversized `Emergency Number List` Information Element.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-78
References: https://cellularsecurity.org/ransacked
CVE: CVE-2023-37033
Published: 2025-01-21
Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `EUTRAN_CGI` field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cellularsecurity.org/ransacked
CVE: CVE-2023-37034
Published: 2025-01-21
Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `TAI` field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cellularsecurity.org/ransacked
CVE: CVE-2023-37035
Published: 2025-01-21
Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet missing an expected `Global eNB ID` field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://cellularsecurity.org/ransacked
CVE: CVE-2023-37036
Published: 2025-01-21
Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` packet missing an expected `ENB_UE_S1AP_ID` field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cellularsecurity.org/ransacked
CVE: CVE-2023-37037
Published: 2025-01-21
Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet missing an expected `Supported TAs` field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cellularsecurity.org/ransacked
CVE: CVE-2023-37038
Published: 2025-01-21
Description: A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` packet missing an expected `MME_UE_S1AP_ID` field.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://cellularsecurity.org/ransacked
CVE: CVE-2023-40108
Published: 2025-01-21
Description: In multiple locations, there is a possible way to access media content belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/2025-01-01
CVE: CVE-2023-40132
Published: 2025-01-21
Description: In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2025-01-01
CVE: CVE-2024-24416
Published: 2025-01-21
Description: The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_access_point_name_ie function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://cellularsecurity.org/ransacked
CVE: CVE-2024-24417
Published: 2025-01-21
Description: The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_protocol_configuration_options function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125, CWE-120
References: https://cellularsecurity.org/ransacked
CVE: CVE-2024-24418
Published: 2025-01-21
Description: The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_pdn_address function at /nas/ies/PdnAddress.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://cellularsecurity.org/ransacked
CVE: CVE-2024-24419
Published: 2025-01-21
Description: The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_traffic_flow_template_packet_filter function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://cellularsecurity.org/ransacked
CVE: CVE-2024-24420
Published: 2025-01-21
Description: A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://cellularsecurity.org/ransacked
CVE: CVE-2024-24421
Published: 2025-01-21
Description: A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted NAS packet.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://cellularsecurity.org/ransacked
CVE: CVE-2024-24422
Published: 2025-01-21
Description: The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a stack overflow in the decode_protocol_configuration_options function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://cellularsecurity.org/ransacked
CVE: CVE-2024-24423
Published: 2025-01-21
Description: The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_esm_message_container function at /nas/ies/EsmMessageContainer.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://cellularsecurity.org/ransacked
CVE: CVE-2024-24424
Published: 2025-01-21
Description: A reachable assertion in the decode_access_point_name_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://cellularsecurity.org/ransacked
CVE: CVE-2024-24427
Published: 2025-01-21
Description: A reachable assertion in the amf_ue_set_suci function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: https://cellularsecurity.org/ransacked
CVE: CVE-2024-24428
Published: 2025-01-21
Description: A reachable assertion in the oai_nas_5gmm_decode function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP packet.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617, CWE-617
References: https://cellularsecurity.org/ransacked
CVE: CVE-2024-24443
Published: 2025-01-21
Description: An uninitialized pointer dereference in the ngap_handle_pdu_session_resource_setup_response routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDU Session Resource Setup Response.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: http://openairinterface.com; https://cellularsecurity.org/ransacked
CVE: CVE-2024-34730
Published: 2025-01-21
Description: In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2025-01-01
CVE: CVE-2024-43095
Published: 2025-01-21
Description: In multiple locations, there is a possible way to obtain any system permission due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-203
References: https://source.android.com/security/bulletin/2025-01-01
CVE: CVE-2024-43096
Published: 2025-01-21
Description: In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2025-01-01
CVE: CVE-2024-43763
Published: 2025-01-21
Description: In build_read_multi_rsp of gatt_sr.cc, there is a possible denial of service due to a logic error in the code. This could lead to remote (proximal/adjacent) denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400
References: https://source.android.com/security/bulletin/2025-01-01
CVE: CVE-2024-43765
Published: 2025-01-21
Description: In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2025-01-01
CVE: CVE-2024-43770
Published: 2025-01-21
Description: In gatts_process_find_info of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://source.android.com/security/bulletin/2025-01-01
CVE: CVE-2024-43771
Published: 2025-01-21
Description: In gatts_process_read_req of gatt_sr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://source.android.com/security/bulletin/2025-01-01
CVE: CVE-2024-49724
Published: 2025-01-21
Description: In multiple functions of AccountManagerService.java, there is a possible way to bypass permissions and launch protected activities due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.
CVSS Score: 7.0 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2025-01-01
CVE: CVE-2024-49732
Published: 2025-01-21
Description: In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276
References: https://source.android.com/security/bulletin/2025-01-01
CVE: CVE-2024-49733
Published: 2025-01-21
Description: In reload of ServiceListing.java , there is a possible way to allow a malicious app to hide an NLS from Settings due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://source.android.com/security/bulletin/2025-01-01