dsap-vuln-management@google.com
organization01
Rollen
Rollen dieser Identität.
02
Referenzen
Weitere Namen und Kennungen dieser Entität.
nvdUS dsap-vuln-management@google.com
03
bewertete Schwachstellen (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-36939US | medium5.7 | — | ||
Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial… | ||||
| CVE-2026-0124US | high7.8 | — | ||
There is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interac… | ||||
| CVE-2024-47040US | high7.8 | — | ||
There is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not n… | ||||
| CVE-2024-47039US | medium5.5 | — | ||
In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additio… | ||||
| CVE-2024-47038US | high7.8 | — | ||
In dhd_prot_flowrings_pool_release of dhd_msgbuf.c, there is a possible outcof bounds write due to a missing bounds check. This could lead to localcescalation of privilege with no… | ||||
| CVE-2024-22004US | high7.7 | — | ||
Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a vulnerability and leak the secure memory from the Trusted Application
| ||||
| CVE-2023-48426US | —OT erhöht | — | ||
u-boot bug that allows for u-boot shell and interrupt over UART
| ||||
| CVE-2023-48418US | high7.8 | — | ||
In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a
possible way to access adb before SUW completion due to an insecure default
value. This could lead to… | ||||
| CVE-2023-6339US | critical9.8OT erhöht | — | ||
Google Nest WiFi Pro root code-execution & user-data compromise | ||||
| CVE-2023-4164US | medium5.5OT erhöht | — | ||
There is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of health data with no additional execution privileges… | ||||
| CVE-2023-48419US | critical9.8 | — | ||
An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege
| ||||