deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-2133
Published: 2023-04-19
Description: Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html; https://crbug.com/1429197; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/
CVE: CVE-2023-2134
Published: 2023-04-19
Description: Out of bounds memory access in Service Worker API in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html; https://crbug.com/1429201; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/
CVE: CVE-2023-2135
Published: 2023-04-19
Description: Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html; https://crbug.com/1424337; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/
CVE: CVE-2023-2136
Published: 2023-04-19
Description: Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-190, CWE-190
References: https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html; https://crbug.com/1432603; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/
CVE: CVE-2023-2137
Published: 2023-04-19
Description: Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html; https://crbug.com/1430644; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4AOSGAOPXLBK4A5ZRTVZ4M6QKVLSWMWG/
CVE: CVE-2022-2507
Published: 2023-04-19
Description: In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-79
References: https://advisories.octopus.com/post/2023/sa2023-06/; https://advisories.octopus.com/post/2023/sa2023-06/
CVE: CVE-2023-25619
Published: 2023-04-19
Description: 
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that
could cause denial of service of the controller when communicating over the Modbus TCP
protocol. 


CVSS Score: 7.5 (HIGH)
CWE: CWE-754, CWE-754
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-05.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-05.pdf
CVE: CVE-2023-25620
Published: 2023-04-19
Description: 


A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that
could cause denial of service of the controller when a malicious project file is loaded onto the
controller by an authenticated user. 

 


CVSS Score: 6.5 (MEDIUM)
CWE: CWE-754
References: https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-05.pdf; https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2023-101-05&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2023-101-05.pdf
CVE: CVE-2023-2168
Published: 2023-04-19
Description: The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Editor+ permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/simple-tags/trunk/inc/suggestterms-functions.php?rev=2743620#L151; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2868795%40simple-tags%2Ftrunk&old=2774153%40simple-tags%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/1c051bfd-2754-4faf-8[PII_REDACTED]5166c?source=cve
CVE: CVE-2023-2169
Published: 2023-04-19
Description: The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Editor+ permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/simple-tags/trunk/inc/related-posts-functions.php?rev=2674563#L156; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2868795%40simple-tags%2Ftrunk&old=2774153%40simple-tags%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/52574d99-1ffe-4152-bf13-9cdd11d7300a?source=cve
CVE: CVE-2023-2170
Published: 2023-04-19
Description: The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with Editor+ permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/browser/simple-tags/trunk/inc/related-posts-functions.php?rev=2674563#L155; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2868795%40simple-tags%2Ftrunk&old=2774153%40simple-tags%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/e98ed932-4e4c-4127-ae72-500e2a34f371?source=cve
CVE: CVE-2022-38125
Published: 2023-04-19
Description: Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client.
CVSS Score: 2.9 (LOW)
CWE: CWE-923, CWE-923
References: https://www.secomea.com/support/cybersecurity-advisory/; https://www.secomea.com/support/cybersecurity-advisory/
CVE: CVE-2022-4308
Published: 2023-04-19
Description: Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteManager, if the generated file is leaked.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-256, CWE-522, CWE-256
References: https://www.secomea.com/support/cybersecurity-advisory/; https://www.secomea.com/support/cybersecurity-advisory/
CVE: CVE-2023-0317
Published: 2023-04-19
Description: Unprotected Alternate Channel vulnerability in debug console of  GateManager allows system administrator to obtain sensitive information.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-420, CWE-420
References: https://www.secomea.com/support/cybersecurity-advisory/; https://www.secomea.com/support/cybersecurity-advisory/
CVE: CVE-2023-22645
Published: 2023-04-19
Description: An Improper Privilege Management vulnerability in SUSE kubewarden allows attackers to read arbitrary secrets if they get access to the ServiceAccount kubewarden-controller This issue affects: SUSE kubewarden kubewarden-controller versions prior to 1.6.0.
CVSS Score: 8.0 (HIGH)
CWE: CWE-269, CWE-269
References: https://bugzilla.suse.com/show_bug.cgi?id=1210218; https://bugzilla.suse.com/show_bug.cgi?id=1210218
CVE: CVE-2023-25759
Published: 2023-04-19
Description: OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS level commands via a crafted request payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-78, CWE-78
References: https://tripleplay.tv; https://tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-25759-Summary.pdf; https://tripleplay.tv
CVE: CVE-2023-25760
Published: 2023-04-19
Description: Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request payload
CVSS Score: 8.8 (HIGH)
CWE: CWE-522, CWE-522
References: https://tripleplay.tv; https://tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-25760-Summary.pdf; https://tripleplay.tv
CVE: CVE-2023-26599
Published: 2023-04-19
Description: XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated user via a crafted link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://tripleplay.tv; https://tripleplay.tv/wp-content/uploads/2023/03/CVE-2023-26599-Summary.pdf; https://tripleplay.tv
CVE: CVE-2023-27776
Published: 2023-04-19
Description: A stored cross-site scripting (XSS) vulnerability in /index.php?page=category_list of Online Jewelry Shop v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Name parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/lohyt/Persistent-Cross-Site-Scripting-found-in-Online-Jewellery-Store-from-Sourcecodester-website.; https://github.com/lohyt/Persistent-Cross-Site-Scripting-found-in-Online-Jewellery-Store-from-Sourcecodester-website./blob/main/README.md; https://github.com/lohyt/Persistent-Cross-Site-Scripting-found-in-Online-Jewellery-Store-from-Sourcecodester-website.
CVE: CVE-2023-29921
Published: 2023-04-19
Description: PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/PowerJob/PowerJob/issues/586; https://github.com/PowerJob/PowerJob/issues/586
CVE: CVE-2023-30463
Published: 2023-04-19
Description: Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing large ICMPv6 packets. This affects installations with Ethernet support in which a packet size greater than 65495 may occur.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-190
References: https://georgyg.com/home/picotcp-denial-of-service-cve-2023-30463/; https://github.com/tass-belgium/picotcp/releases; https://georgyg.com/home/picotcp-denial-of-service-cve-2023-30463/
CVE: CVE-2023-27777
Published: 2023-04-19
Description: Cross-site scripting (XSS) vulnerability was discovered in Online Jewelry Shop v1.0 that allows attackers to execute arbitrary script via a crafted URL.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/lohyt/Privilege-escalation-in-online-jewelry-website; https://github.com/lohyt/Privilege-escalation-in-online-jewelry-website
CVE: CVE-2023-29923
Published: 2023-04-19
Description: PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://github.com/PowerJob/PowerJob/issues/587; https://github.com/PowerJob/PowerJob/issues/587
CVE: CVE-2023-29586
Published: 2023-04-19
Description: Code Sector TeraCopy 3.9.7 does not perform proper access validation on the source folder during a copy operation. This leads to Arbitrary File Read by allowing any user to copy any directory in the system to a directory they control. NOTE: the Supplier disputes this because only admin users can copy arbitrary folders, and because the 143984 reference is about a different concern (unrelated to directory copying) that was fixed in 3.5b.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://packetstormsecurity.com/files/143984/TeraCopyService-3.1-Unquoted-Service-Path-Privilege-Escalation.html; https://securityandstuff.com/posts/teracopy_arbitrary_read/; https://support.codesector.com/en/articles/10088479-cve-2023-29586
CVE: CVE-2023-22621
Published: 2023-04-19
Description: Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the server. A remote attacker with access to the Strapi admin panel can inject a crafted payload that executes code on the server into an email template that bypasses the validation checks that should prevent code execution.
CVSS Score: 7.2 (HIGH)
CWE: CWE-74, CWE-74
References: https://github.com/strapi/strapi/releases; https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve; https://www.ghostccamm.com/blog/multi_strapi_vulns/
CVE: CVE-2023-22893
Published: 2023-04-19
Description: Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login provider is used for authentication. A remote attacker could forge an ID token that is signed using the 'None' type algorithm to bypass authentication and impersonate any user that use AWS Cognito for authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-287
References: https://github.com/strapi/strapi/releases; https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve; https://www.ghostccamm.com/blog/multi_strapi_vulns/
CVE: CVE-2023-22894
Published: 2023-04-19
Description: Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the attacker has super admin access, then this can be exploited to discover the password hash and password reset token of all users. If the attacker has admin panel access to an account with permission to access the username and email of API users with a lower privileged role (e.g., Editor or Author), then this can be exploited to discover sensitive information for all API users but not other admin accounts.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://github.com/strapi/strapi/releases; https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve; https://www.ghostccamm.com/blog/multi_strapi_vulns/
CVE: CVE-2021-43819
Published: 2023-04-19
Description: Stargate-Bukkit is a mod for the minecraft video game which adds a portal focused environment. In affected versions Minecarts with chests will drop their items when teleporting through a portal; when they reappear, they will still have their items impacting the integrity of the game world. The teleport code has since been rewritten and is available in release `0.11.5.1`. Users are advised to upgrade. There are no known workarounds for this issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-670, CWE-670
References: https://github.com/stargate-bukkit/Stargate-Bukkit/security/advisories/GHSA-64r2-hfr9-849j; https://github.com/stargate-bukkit/Stargate-Bukkit/security/advisories/GHSA-64r2-hfr9-849j
CVE: CVE-2023-30610
Published: 2023-04-19
Description: aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` struct had a derived `Debug` implementation. When debug-formatted, it would include a user's AWS access key, AWS secret key, and security token in plaintext. When TRACE-level logging is enabled for an SDK, `SigningParams` is printed, thereby revealing those credentials to anyone with access to logs. All users of the AWS SDK for Rust who enabled TRACE-level logging, either globally (e.g. `RUST_LOG=trace`), or for the `aws-sigv4` crate specifically are affected. This issue has been addressed in a set of new releases. Users are advised to upgrade. Users unable to upgrade should disable TRACE-level logging for AWS Rust SDK crates.

CVSS Score: 5.5 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://github.com/awslabs/aws-sdk-rust/security/advisories/GHSA-mjv9-vp6w-3rc9; https://github.com/awslabs/aws-sdk-rust/security/advisories/GHSA-mjv9-vp6w-3rc9
CVE: CVE-2023-30611
Published: 2023-04-19
Description: Discourse-reactions is a plugin that allows user to add their reactions to the post in the Discourse messaging platform. In affected versions data about what reactions were performed on a post in a private topic could be leaked. This issue has been addressed in version 0.3. Users are advised to upgrade. Users unable to upgrade should disable the discourse-reactions plugin to fully mitigate the issue.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-200
References: https://github.com/discourse/discourse-reactions/commit/01aca15b2774c088f3673118e92e9469f37d2fb6; https://github.com/discourse/discourse-reactions/security/advisories/GHSA-4cgc-c7vh-94g6; https://github.com/discourse/discourse-reactions/commit/01aca15b2774c088f3673118e92e9469f37d2fb6
CVE: CVE-2023-30612
Published: 2023-04-19
Description: Cloud hypervisor is a Virtual Machine Monitor for Cloud workloads. This vulnerability allows users to close arbitrary open file descriptors in the Cloud Hypervisor process via sending malicious HTTP request through the HTTP API socket. As a result, the Cloud Hypervisor process can be easily crashed, causing Deny-of-Service (DoS). This can also be a potential Use-After-Free (UAF) vulnerability. Users require to have the write access to the API socket file to trigger this vulnerability.  Impacted versions of Cloud Hypervisor include upstream main branch, v31.0, and v30.0. The vulnerability was initially detected by our `http_api_fuzzer` via oss-fuzz. This issue has been addressed in versions 30.1 and 31.1. Users unable to upgrade may mitigate this issue by ensuring the write access to the API socket file is granted to trusted users only.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-306, CWE-416
References: https://github.com/cloud-hypervisor/cloud-hypervisor/pull/5350; https://github.com/cloud-hypervisor/cloud-hypervisor/pull/5373; https://github.com/cloud-hypervisor/cloud-hypervisor/security/advisories/GHSA-g6mw-f26h-4jgp
CVE: CVE-2023-30614
Published: 2023-04-19
Description: Pay is a payments engine for Ruby on Rails 6.0 and higher. In versions prior to 6.3.2 a payments info page of Pay is susceptible to reflected Cross-site scripting. An attacker could create a working URL that renders a javascript link to a user on a Rails application that integrates Pay. This URL could be distributed via email to specifically target certain individuals. If the targeted application contains a functionality to submit user-generated content (such as comments) the attacker could even distribute the URL using that functionality. This has been patched in version 6.3.2 and above. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://github.com/pay-rails/pay/commit/5d6283a24062bd272a524ec48415f536a67ad57f; https://github.com/pay-rails/pay/security/advisories/GHSA-cqf3-vpx7-rxhw; https://github.com/pay-rails/pay/commit/5d6283a24062bd272a524ec48415f536a67ad57f
CVE: CVE-2023-1585
Published: 2023-04-19
Description: Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU)  vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and virus definitions from 14 February 2023 or later.  
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://support.norton.com/sp/static/external/tools/security-advisories.html; https://support.norton.com/sp/static/external/tools/security-advisories.html
CVE: CVE-2023-1586
Published: 2023-04-19
Description: Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU)  vulnerability in the restore process leading to arbitrary file creation. The issue was fixed with Avast and AVG Antivirus version 22.11
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://support.norton.com/sp/static/external/tools/security-advisories.html; https://support.norton.com/sp/static/external/tools/security-advisories.html
CVE: CVE-2023-1587
Published: 2023-04-19
Description: Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus version 22.11
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://support.norton.com/sp/static/external/tools/security-advisories.html; https://support.norton.com/sp/static/external/tools/security-advisories.html
CVE: CVE-2023-1900
Published: 2023-04-19
Description: A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an overflow. This could corrupt the data on the heap and lead to a denial-of-service situation. 
Issue was fixed with Endpointprotection.exe version 1.0.2303.633
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190, CWE-190
References: https://support.norton.com/sp/static/external/tools/security-advisories.html; https://support.norton.com/sp/static/external/tools/security-advisories.html
CVE: CVE-2023-29922
Published: 2023-04-19
Description: PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-284
References: https://github.com/PowerJob/PowerJob/issues/585; https://github.com/PowerJob/PowerJob/issues/585
CVE: CVE-2021-0872
Published: 2023-04-19
Description: In PVRSRVBridgeRGXKickVRDM of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270401229
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://source.android.com/security/bulletin/2023-04-01; https://source.android.com/security/bulletin/2023-04-01
CVE: CVE-2021-0873
Published: 2023-04-19
Description: In PVRSRVBridgeRGXKickRS of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270392711
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://source.android.com/security/bulletin/2023-04-01; https://source.android.com/security/bulletin/2023-04-01
CVE: CVE-2021-0874
Published: 2023-04-19
Description: In PVRSRVBridgeDevicememHistorySparseChange of the PowerVR kernel driver, a missing size check means there is a possible integer overflow that could allow out-of-bounds heap access. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-270399633
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://source.android.com/security/bulletin/2023-04-01; https://source.android.com/security/bulletin/2023-04-01