deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-38548
Published: 2025-08-16
Description: In the Linux kernel, the following vulnerability has been resolved:

hwmon: (corsair-cpro) Validate the size of the received input buffer

Add buffer_recv_size to store the size of the received bytes.
Validate buffer_recv_size in send_usb_cmd().
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/0db770e[PII_REDACTED]ddbd6663a5516a32b97b743; https://git.kernel.org/stable/c/2771d2ee3d95700f34e1e4df6a445c90565cd4e9; https://git.kernel.org/stable/c/2e6f4d9cfbda52700c126c5a2b93dd2042e8680c
CVE: CVE-2025-38549
Published: 2025-08-16
Description: In the Linux kernel, the following vulnerability has been resolved:

efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths

When processing mount options, efivarfs allocates efivarfs_fs_info (sfi)
early in fs_context initialization. However, sfi is associated with the
superblock and typically freed when the superblock is destroyed. If the
fs_context is released (final put) before fill_super is called—such as
on error paths or during reconfiguration—the sfi structure would leak,
as ownership never transfers to the superblock.

Implement the .free callback in efivarfs_context_ops to ensure any
allocated sfi is properly freed if the fs_context is torn down before
fill_super, preventing this memory leak.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://git.kernel.org/stable/c/64e135f1eaba0bbb0cdee859af3328c68d5b9789; https://git.kernel.org/stable/c/816d36973467d1c9c08a48bdffe4675e219a2e84; https://git.kernel.org/stable/c/e9fabe7036bb8be6071f39dc38605508f5f57b20
CVE: CVE-2025-38550
Published: 2025-08-16
Description: In the Linux kernel, the following vulnerability has been resolved:

ipv6: mcast: Delay put pmc->idev in mld_del_delrec()

pmc->idev is still used in ip6_mc_clear_src(), so as mld_clear_delrec()
does, the reference should be put after ip6_mc_clear_src() return.
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/5f18e[PII_REDACTED]dff734e155029ae734378b5ea; https://git.kernel.org/stable/c/6e4eec86fe5f6b3fdbc702d1d36ac2a6e7ec0806; https://git.kernel.org/stable/c/728db00a14cacb37f36e9382ab5fad55caf890cc
CVE: CVE-2025-38551
Published: 2025-08-16
Description: In the Linux kernel, the following vulnerability has been resolved:

virtio-net: fix recursived rtnl_lock() during probe()

The deadlock appears in a stack trace like:

  virtnet_probe()
    rtnl_lock()
    virtio_config_changed_work()
      netdev_notify_peers()
        rtnl_lock()

It happens if the VMM sends a VIRTIO_NET_S_ANNOUNCE request while the
virtio-net driver is still probing.

The config_work in probe() will get scheduled until virtnet_open() enables
the config change notification via virtio_config_driver_enable().
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-667
References: https://git.kernel.org/stable/c/3859f137b3c1fa1f0031d[PII_REDACTED]6bdcdd7aa; https://git.kernel.org/stable/c/4e7c46362550b229354aeb52038f414e231b0037; https://git.kernel.org/stable/c/be5dcaed694e4255dc02dd0acfe036708c535def
CVE: CVE-2025-38552
Published: 2025-08-16
Description: In the Linux kernel, the following vulnerability has been resolved:

mptcp: plug races between subflow fail and subflow creation

We have races similar to the one addressed by the previous patch between
subflow failing and additional subflow creation. They are just harder to
trigger.

The solution is similar. Use a separate flag to track the condition
'socket state prevent any additional subflow creation' protected by the
fallback lock.

The socket fallback makes such flag true, and also receiving or sending
an MP_FAIL option.

The field 'allow_infinite_fallback' is now always touched under the
relevant lock, we can drop the ONCE annotation on write.
CVSS Score: 7.8 (HIGH)
References: https://git.kernel.org/stable/c/659da22dee5ff316ba63bdaeeac7b58b5442f6c2; https://git.kernel.org/stable/c/7c96d519ee15a130842a6513530b4d20acd2bfcd; https://git.kernel.org/stable/c/c476d627584b7589a134a8b48dd5c6639e4401c5
CVE: CVE-2025-8105
Published: 2025-08-16
Description: The The Soledad theme for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 8.6.7. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
CVSS Score: 7.3 (HIGH)
CWE: CWE-94
References: https://themeforest.net/item/soledad-multiconcept-blogmagazine-wp-theme/12945398#item-description__update-changelog; https://www.wordfence.com/threat-intel/vulnerabilities/id/a6c842bb-914a-47c1-aaac-e748f58e12ef?source=cve
CVE: CVE-2025-8142
Published: 2025-08-16
Description: The Soledad theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.6.7 via the 'header_layout' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included.
CVSS Score: 8.8 (HIGH)
CWE: CWE-98
References: https://themeforest.net/item/soledad-multiconcept-blogmagazine-wp-theme/12945398#item-description__update-changelog; https://www.wordfence.com/threat-intel/vulnerabilities/id/7dea9b4a-d7a5-4ea7-b55f-b42f8f5c4a91?source=cve
CVE: CVE-2025-8143
Published: 2025-08-16
Description: The Soledad theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pcsml_smartlists_h’ parameter in all versions up to, and including, 8.6.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://themeforest.net/item/soledad-multiconcept-blogmagazine-wp-theme/12945398#item-description__update-changelog; https://www.wordfence.com/threat-intel/vulnerabilities/id/e8852d39-e34a-45d3-aee8-1ccbfc0ab238?source=cve
CVE: CVE-2025-8878
Published: 2025-08-16
Description: The The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.16.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-94
References: https://plugins.trac.wordpress.org/browser/wp-user-avatar/trunk/src/Classes/RegistrationAuth.php#L131; https://plugins.trac.wordpress.org/browser/wp-user-avatar/trunk/src/ShortcodeParser/Builder/FrontendProfileBuilder.php#L318; https://plugins.trac.wordpress.org/browser/wp-user-avatar/trunk/src/ShortcodeParser/Builder/FrontendProfileBuilder.php#L329
CVE: CVE-2023-32246
Published: 2025-08-16
Description: In the Linux kernel, the following vulnerability has been resolved:

ksmbd: call rcu_barrier() in ksmbd_server_exit()

racy issue is triggered the bug by racing between closing a connection
and rmmod. In ksmbd, rcu_barrier() is not called at module unload time,
so nothing prevents ksmbd from getting unloaded while it still has RCU
callbacks pending. It leads to trigger unintended execution of kernel
code locally and use to defeat protections such as Kernel Lockdown
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/5a7090ccc242ab009ee7769e9d7fad6644dbe9bd; https://git.kernel.org/stable/c/b80422474ffe44cb5e813cd6da1f1c6bc50fd9d2; https://git.kernel.org/stable/c/c053e389db0d892e2ff5a60ec5e533b976503795
CVE: CVE-2023-32249
Published: 2025-08-16
Description: In the Linux kernel, the following vulnerability has been resolved:

ksmbd: not allow guest user on multichannel

This patch return STATUS_NOT_SUPPORTED if binding session is guest.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/088131b7b01099720a528a72005ff17868705d40; https://git.kernel.org/stable/c/1f[PII_REDACTED]455e5be698be2e6c30077b4ec461; https://git.kernel.org/stable/c/3353ab2df5f68dab7da8d5ebb427a2d265a1f2b2
CVE: CVE-2023-3865
Published: 2025-08-16
Description: In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix out-of-bound read in smb2_write

ksmbd_smb2_check_message doesn't validate hdr->NextCommand. If
->NextCommand is bigger than Offset + Length of smb2 write, It will
allow oversized smb2 write length. It will cause OOB read in smb2_write.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://git.kernel.org/stable/c/3813eee5154d6a4c5875cb4444cb2b63bac8947f; https://git.kernel.org/stable/c/58a9c41064df27632e780c5a3ae3e0e4284957d1; https://git.kernel.org/stable/c/5fe7f7b[PII_REDACTED]6211046a99f031ff26164e1
CVE: CVE-2023-3866
Published: 2025-08-16
Description: In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate session id and tree id in the compound request

This patch validate session id and tree id in compound request.
If first operation in the compound is SMB2 ECHO request, ksmbd bypass
session and tree validation. So work->sess and work->tcon could be NULL.
If secound request in the compound access work->sess or tcon, It cause
NULL pointer dereferecing error.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-476
References: https://git.kernel.org/stable/c/5005bcb4219156f1bf7587b185080ec1da08518e; https://git.kernel.org/stable/c/854156d12caa9d36de1cf5f084591c7686cc8a9d; https://git.kernel.org/stable/c/d1066c1b3663401cd23c0d6e60cdae750ce00c0f
CVE: CVE-2023-3867
Published: 2025-08-16
Description: In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix out of bounds read in smb2_sess_setup

ksmbd does not consider the case of that smb2 session setup is
in compound request. If this is the second payload of the compound,
OOB read issue occurs while processing the first payload in
the smb2_sess_setup().
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://git.kernel.org/stable/c/2ba03cecb12ac7ac9e0170e251543c56832d9959; https://git.kernel.org/stable/c/[PII_REDACTED]85ace61e939831e7ca44a03d438c3b; https://git.kernel.org/stable/c/98422bdd4cb3ca4d08844046f6507d7ec2c2b8d8
CVE: CVE-2023-4130
Published: 2025-08-16
Description: In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea()

There are multiple smb2_ea_info buffers in FILE_FULL_EA_INFORMATION request
from client. ksmbd find next smb2_ea_info using ->NextEntryOffset of
current smb2_ea_info. ksmbd need to validate buffer length Before
accessing the next ea. ksmbd should check buffer length using buf_len,
not next variable. next is the start offset of current ea that got from
previous ea.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/4bf629262f9118ee91b1c3a518ebf2b3bcb22180; https://git.kernel.org/stable/c/79ed288cef201f1f212dfb934bcaac75572fb8f6; https://git.kernel.org/stable/c/aeb974907642be095e38ecb1a400ca583958b2b0
CVE: CVE-2023-4515
Published: 2025-08-16
Description: In the Linux kernel, the following vulnerability has been resolved:

ksmbd: validate command request size

In commit 2b9b8f3b68ed ("ksmbd: validate command payload size"), except
for SMB2_OPLOCK_BREAK_HE command, the request size of other commands
is not checked, it's not expected. Fix it by add check for request
size of other commands.
CVSS Score: 5.5 (MEDIUM)
References: https://git.kernel.org/stable/c/595679098bdcdbfbba91ebe07a2f7f208df93870; https://git.kernel.org/stable/c/5aa4fda5aa9c2a5a7bac67b4a12b089ab81fee3c; https://git.kernel.org/stable/c/c6bef3bc30fd4a175aef846b7d928a6c40d091cd
CVE: CVE-2025-9087
Published: 2025-08-16
Description: A vulnerability has been found in Tenda AC20 16.03.08.12. This affects the function set_qosMib_list of the file /goform/SetNetControlList of the component SetNetControlList Endpoint. The manipulation of the argument list leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/ZZ2266/.github.io/tree/main/AC20/formSetQosBand; https://github.com/ZZ2266/.github.io/tree/main/AC20/formSetQosBand#poc-python-exploit-script; https://vuldb.com/?ctiid.320355
CVE: CVE-2025-9088
Published: 2025-08-16
Description: A vulnerability was found in Tenda AC20 16.03.08.12. This vulnerability affects the function save_virtualser_data of the file /goform/formSetVirtualSer. The manipulation of the argument list leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121, CWE-787
References: https://github.com/ZZ2266/.github.io/tree/main/AC20/formSetVirtualSer; https://github.com/ZZ2266/.github.io/tree/main/AC20/formSetVirtualSer#poc-python-exploit-script; https://vuldb.com/?ctiid.320356
CVE: CVE-2025-9089
Published: 2025-08-17
Description: A vulnerability was determined in Tenda AC20 16.03.08.12. This issue affects the function sub_48E628 of the file /goform/SetIpMacBind. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/ZZ2266/.github.io/blob/main/AC20/fromSetIpMacBind/readme.md; https://github.com/ZZ2266/.github.io/blob/main/AC20/fromSetIpMacBind/readme.md#poc-python-exploit-script; https://vuldb.com/?ctiid.320357
CVE: CVE-2025-9090
Published: 2025-08-17
Description: A vulnerability was identified in Tenda AC20 16.03.08.12. Affected is the function websFormDefine of the file /goform/telnet of the component Telnet Service. The manipulation leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://github.com/ZZ2266/.github.io/blob/main/AC20/telnet/readme.md; https://github.com/ZZ2266/.github.io/blob/main/AC20/telnet/readme.md#poc-exploit-steps; https://vuldb.com/?ctiid.320358
CVE: CVE-2025-9091
Published: 2025-08-17
Description: A security flaw has been discovered in Tenda AC20 16.03.08.12. Affected by this vulnerability is an unknown functionality of the file /etc_ro/shadow. The manipulation leads to hard-coded credentials. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
CVSS Score: 2.5 (LOW)
CWE: CWE-259, CWE-798
References: https://github.com/ZZ2266/.github.io/blob/main/AC20/hardcoded%20password/readme.md#description; https://github.com/ZZ2266/.github.io/tree/main/AC20/hardcoded%20password/readme.md; https://vuldb.com/?ctiid.320359
CVE: CVE-2025-9093
Published: 2025-08-17
Description: A security vulnerability has been detected in BuzzFeed App 2024.9 on Android. This affects an unknown part of the file AndroidManifest.xml of the component com.buzzfeed.android. The manipulation leads to improper export of android application components. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-926
References: https://github.com/KMov-g/androidapps/blob/main/com.buzzfeed.android.md; https://github.com/KMov-g/androidapps/blob/main/com.buzzfeed.android.md#steps-to-reproduce; https://vuldb.com/?ctiid.320415
CVE: CVE-2025-7342
Published: 2025-08-17
Description: A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclusion of the build. Kubernetes clusters are only affected if their nodes use VM images created via the Image Builder project and the vulnerability was exploited during the build process, which requires an attacker to access the build VM and modify the image while the build is in progress.
CVSS Score: 7.5 (HIGH)
CWE: CWE-798
References: https://github.com/kubernetes/kubernetes/issues/133115; https://groups.google.com/g/kubernetes-security-announce/c/tuEsLUQu_PA; http://www.openwall.com/lists/oss-security/2025/07/22/1
CVE: CVE-2025-9094
Published: 2025-08-17
Description: A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor replies, that "[t]he fix will come within upcoming release (v4.2) and will be inherited by maintenance releases of LTS versions (starting 4.0)."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-791, CWE-1336
References: https://drive.google.com/file/d/1cZy-rfQXsF58kJIVs4UXj7usXJuhjZjA/view; https://vuldb.com/?ctiid.320416; https://vuldb.com/?id.320416
CVE: CVE-2025-9095
Published: 2025-08-17
Description: A flaw has been found in ExpressGateway express-gateway up to 1.16.10. This issue affects some unknown processing in the library lib/rest/routes/users.js of the component REST Endpoint. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/freshfish-hust/my-cves/issues/5; https://github.com/freshfish-hust/my-cves/issues/5#issue[PII_REDACTED]; https://vuldb.com/?ctiid.320417
CVE: CVE-2025-9096
Published: 2025-08-18
Description: A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the library lib/rest/routes/apps.js of the component REST Endpoint. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/freshfish-hust/my-cves/issues/6; https://github.com/freshfish-hust/my-cves/issues/6#issue[PII_REDACTED]; https://vuldb.com/?ctiid.320418
CVE: CVE-2025-9097
Published: 2025-08-18
Description: A vulnerability was found in Euro Information CIC banque et compte en ligne App 12.56.0 on Android. Affected by this vulnerability is an unknown functionality of the file AndroidManifest.xml of the component com.cic_prod.bad. The manipulation leads to improper export of android application components. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-926
References: https://github.com/KMov-g/androidapps/blob/main/com.cic_prod.bad.md; https://github.com/KMov-g/androidapps/blob/main/com.cic_prod.bad.md#steps-to-reproduce; https://vuldb.com/?ctiid.320419
CVE: CVE-2025-31713
Published: 2025-08-18
Description: In engineer mode service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed.
CVSS Score: 8.4 (HIGH)
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]00793346
CVE: CVE-2025-31714
Published: 2025-08-18
Description: In Developer Tools, there is a possible missing verification incorrect input. This could lead to local escalation of privilege with no additional execution privileges needed.
CVSS Score: 6.8 (MEDIUM)
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]00793346
CVE: CVE-2025-31715
Published: 2025-08-18
Description: In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed.
CVSS Score: 9.8 (CRITICAL)
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]00793346
CVE: CVE-2025-9098
Published: 2025-08-18
Description: A vulnerability was determined in Elseplus File Recovery App 4.4.21 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml. The manipulation leads to improper export of android application components. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-926
References: https://github.com/KMov-g/androidapps/blob/main/com.elseplus.filerecovery.md; https://github.com/KMov-g/androidapps/blob/main/com.elseplus.filerecovery.md#steps-to-reproduce; https://vuldb.com/?ctiid.320420
CVE: CVE-2025-9099
Published: 2025-08-18
Description: A vulnerability was identified in Acrel Environmental Monitoring Cloud Platform up to 20250804. This affects an unknown part of the file /NewsManage/UploadNewsImg. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434
References: https://vuldb.com/?ctiid.320421; https://vuldb.com/?id.320421; https://vuldb.com/?submit.628090
CVE: CVE-2025-9100
Published: 2025-08-18
Description: A security flaw has been discovered in zhenfeng13 My-Blog 1.0.0. This vulnerability affects unknown code of the file /blog/comment of the component Frontend Blog Article Comment Handler. The manipulation leads to authentication bypass by capture-replay. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287, CWE-294
References: https://github.com/ZHENFENG13/My-Blog/issues/149; https://github.com/ZHENFENG13/My-Blog/issues/149#issue[PII_REDACTED]; https://vuldb.com/?ctiid.320422
CVE: CVE-2025-9101
Published: 2025-08-18
Description: A weakness has been identified in zhenfeng13 My-Blog up to 1.0.0. This issue affects some unknown processing of the file /admin/tags/save of the component Tag Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/ZHENFENG13/My-Blog/issues/147; https://github.com/ZHENFENG13/My-Blog/issues/147#issue[PII_REDACTED]; https://vuldb.com/?ctiid.320423
CVE: CVE-2025-9102
Published: 2025-08-18
Description: A security vulnerability has been detected in 1&1 Mail & Media mail.com App 8.8.0 on Android. Affected is an unknown function of the file AndroidManifest.xml of the component com.mail.mobile.android.mail. The manipulation leads to improper export of android application components. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-926
References: https://github.com/KMov-g/androidapps/blob/main/com.mail.mobile.android.mail.md; https://github.com/KMov-g/androidapps/blob/main/com.mail.mobile.android.mail.md#steps-to-reproduce; https://vuldb.com/?ctiid.320424