CVE-2024-20153
- EPSS 0.15%
- Veröffentlicht 06.01.2025 04:15:07
- Zuletzt bearbeitet 12.01.2026 16:20:48
In wlan STA, there is a possible way to trick a client to connect to an AP with spoofed SSID. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ...
CVE-2024-20105
- EPSS 0.05%
- Veröffentlicht 06.01.2025 04:15:06
- Zuletzt bearbeitet 22.04.2025 13:49:48
In m4u, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID:...
CVE-2024-20140
- EPSS 0.01%
- Veröffentlicht 06.01.2025 04:15:06
- Zuletzt bearbeitet 22.04.2025 13:49:53
In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch I...
CVE-2024-20143
- EPSS 0.02%
- Veröffentlicht 06.01.2025 04:15:06
- Zuletzt bearbeitet 22.04.2025 13:49:57
In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is n...
CVE-2024-20144
- EPSS 0.02%
- Veröffentlicht 06.01.2025 04:15:06
- Zuletzt bearbeitet 22.04.2025 13:50:01
In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is n...
CVE-2024-20145
- EPSS 0.02%
- Veröffentlicht 06.01.2025 04:15:06
- Zuletzt bearbeitet 22.04.2025 13:50:07
In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is n...
CVE-2024-20146
- EPSS 0.02%
- Veröffentlicht 06.01.2025 04:15:06
- Zuletzt bearbeitet 22.04.2025 13:50:11
In wlan STA driver, there is a possible out of bounds write due to improper input validation. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-11624
- EPSS 0.01%
- Veröffentlicht 03.01.2025 04:15:06
- Zuletzt bearbeitet 24.07.2025 15:15:14
there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2024-47032
- EPSS 0.02%
- Veröffentlicht 03.01.2025 04:15:06
- Zuletzt bearbeitet 24.07.2025 15:14:51
In construct_transaction_from_cmd of lwis_ioctl.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed ...
CVE-2024-53833
- EPSS 0.03%
- Veröffentlicht 03.01.2025 04:15:06
- Zuletzt bearbeitet 24.07.2025 15:14:43
In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...