dsap-vuln-management@google.com

organization
01

roles

Roles this identity holds.

02

references

Other names and identifiers for this entity.

nvdUS dsap-vuln-management@google.com
03

assessed vulnerabilities (11)

Related CVEs.

IDseverity exploitable
CVE-2025-36939USmedium5.7—
Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread network could send specially crafted packets to cause a denial…
CVE-2026-0124UShigh7.8—
There is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interac…
CVE-2024-47040UShigh7.8—
There is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not n…
CVE-2024-47039USmedium5.5—
In isSlotMarkedSuccessful of BootControl.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local  information disclosure with no additio…
CVE-2024-47038UShigh7.8—
In dhd_prot_flowrings_pool_release of dhd_msgbuf.c, there is a possible outcof bounds write due to a missing bounds check. This could lead to localcescalation of privilege with no…
CVE-2024-22004UShigh7.7—
Due to length check, an attacker with privilege access on a Linux Nonsecure operating system can trigger a vulnerability and leak the secure memory from the Trusted Application
CVE-2023-48426US—OT elevated—
u-boot bug that allows for u-boot shell and interrupt over UART
CVE-2023-48418UShigh7.8—
In checkDebuggingDisallowed of DeviceVersionFragment.java, there is a     possible way to access adb before SUW completion due to an insecure default     value. This could lead to…
CVE-2023-6339UScritical9.8OT elevated—
Google Nest WiFi Pro root code-execution & user-data compromise
CVE-2023-4164USmedium5.5OT elevated—
There is a possible information disclosure due to a missing permission check. This could lead to local information disclosure of health data with no additional execution privileges…
CVE-2023-48419UScritical9.8—
An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in Elevation of Privilege