Security Vulnerabilities
Memory Corruption when output buffer size is smaller than input buffer size during data copying operation.
CVSS Score
6.7
EPSS Score
0.0
Published
2026-06-01
Memory Corruption when sending random number generator command with insufficient output buffer size.
CVSS Score
6.7
EPSS Score
0.0
Published
2026-06-01
Information Disclosure when resetting device to factory default settings through powerline interface allows unauthorized access to device configuration.
CVSS Score
6.5
EPSS Score
0.0
Published
2026-06-01
Memory Corruption when running a memory copy operation due to invalid writes caused by a null pointer.
CVSS Score
7.8
EPSS Score
0.0
Published
2026-06-01
Memory Corruption when processing device identifier strings that exceed the expected maximum length.
CVSS Score
7.8
EPSS Score
0.0
Published
2026-06-01
Memory Corruption when writing to invalid memory locations occurs due to heap memory exhaustion during secure data initialization.
CVSS Score
7.8
EPSS Score
0.0
Published
2026-06-01
In multiple functions, there is a possible desync in persistence due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score
7.8
EPSS Score
0.0
Published
2026-06-01
In fixInitiatingUserIfNecessary of CallIntentProcessor.java, there is a possible way to make an emergency call due to a logic error in the code. This could lead to local with null execution privileges needed. User interaction is null for exploitation.
CVSS Score
4.0
EPSS Score
0.0
Published
2026-06-01
In multiple functions of AppOpsService.java, there is a possible missing permission check due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score
3.3
EPSS Score
0.0
Published
2026-06-01
In addWindow of WindowManagerService.java, there is a possible tapjacking issue due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score
7.8
EPSS Score
0.0
Published
2026-06-01