# CVEs published 2023-03-24

197 CVEs were published on March 24, 2023: 15 critical, 65 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2023-25660](https://cve.now/CVE-2023-25660.md): TensorFlow vulnerable to seg fault in \`tf.raw\_ops.Print\` (CVSS 7.5, tensorflow · tensorflow-cpu +1)
- [CVE-2023-25659](https://cve.now/CVE-2023-25659.md): TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch (CVSS 7.5, tensorflow · tensorflow-cpu +1)
- [CVE-2023-28437](https://cve.now/CVE-2023-28437.md): SQL injection vulnerability due to the keyword blacklist for defending against SQL injection will be bypassed (CVSS 9.8, dataease)
- [CVE-2023-25658](https://cve.now/CVE-2023-25658.md): TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad (CVSS 7.5, tensorflow · tensorflow-cpu +1)
- [CVE-2023-25662](https://cve.now/CVE-2023-25662.md): TensorFlow vulnerable to integer overflow in EditDistance (CVSS 7.5, tensorflow · tensorflow-cpu +1)
- [CVE-2023-25663](https://cve.now/CVE-2023-25663.md): TensorFlow has Null Pointer Error in TensorArrayConcatV2 (CVSS 7.5, tensorflow · tensorflow-cpu +1)
- [CVE-2023-25664](https://cve.now/CVE-2023-25664.md): TensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad (CVSS 7.5, tensorflow · tensorflow-cpu)
- [CVE-2023-25667](https://cve.now/CVE-2023-25667.md): TensorFlow vulnerable to segfault when opening multiframe gif (CVSS 6.5, tensorflow · tensorflow-cpu +1)
- [CVE-2023-25666](https://cve.now/CVE-2023-25666.md): TensorFlow has Floating Point Exception in AudioSpectrogram (CVSS 7.5, tensorflow · tensorflow-cpu +1)
- [CVE-2023-25665](https://cve.now/CVE-2023-25665.md): TensorFlow has Null Pointer Error in SparseSparseMaximum (CVSS 7.5, tensorflow · tensorflow-cpu +1)
- [CVE-2023-25668](https://cve.now/CVE-2023-25668.md): TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation (CVSS 9.8, tensorflow · tensorflow-gpu +1)
- [CVE-2023-25669](https://cve.now/CVE-2023-25669.md): TensorFlow has Floating Point Exception in AvgPoolGrad with XLA (CVSS 7.5, tensorflow · tensorflow-cpu +1)
- [CVE-2023-25670](https://cve.now/CVE-2023-25670.md): TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize (CVSS 7.5, tensorflow · tensorflow-cpu +1)
- [CVE-2023-25671](https://cve.now/CVE-2023-25671.md): TensorFlow has segmentation fault in tfg-translate (CVSS 7.5, tensorflow · tensorflow-cpu)
- [CVE-2023-25672](https://cve.now/CVE-2023-25672.md): TensorFlow has Null Pointer Error in LookupTableImportV2 (CVSS 7.5, tensorflow · tensorflow-gpu +1)
- [CVE-2023-25673](https://cve.now/CVE-2023-25673.md): TensorFlow has Floating Point Exception in TensorListSplit with XLA (CVSS 7.5, tensorflow · tensorflow-gpu +1)
- [CVE-2023-25674](https://cve.now/CVE-2023-25674.md): TensorFlow has Null Pointer Error in RandomShuffle with XLA enable (CVSS 7.5, tensorflow · tensorflow-cpu +1)
- [CVE-2023-25675](https://cve.now/CVE-2023-25675.md): TensorFlow has Segfault in Bincount with XLA (CVSS 7.5, tensorflow · tensorflow-gpu +1)
- [CVE-2023-25676](https://cve.now/CVE-2023-25676.md): TensorFlow has null dereference on ParallelConcat with XLA (CVSS 7.5, tensorflow · tensorflow-cpu +1)
- [CVE-2023-25801](https://cve.now/CVE-2023-25801.md): TensorFlow has double free in Fractional(Max/Avg)Pool (CVSS 8.0, tensorflow · tensorflow-cpu +1)
- [CVE-2023-27579](https://cve.now/CVE-2023-27579.md): TensorFlow has Floating Point Exception in TFLite in conv kernel (CVSS 7.5, tensorflow · tensorflow-cpu +1)
- [CVE-2023-28435](https://cve.now/CVE-2023-28435.md): Dataease file upload interface does not verify permission or file type (CVSS 6.5, dataease)
- [CVE-2023-28444](https://cve.now/CVE-2023-28444.md): angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend (CVSS 9.9, kyubisation angular-server-side-configuration · angular-ser…)
- [CVE-2023-28446](https://cve.now/CVE-2023-28446.md): Deno is vulnerable to interactive \`run\` permission prompt spoofing via improper ANSI neutralization (CVSS 8.8, denoland deno · deno\_runtime +1)
- [CVE-2023-28448](https://cve.now/CVE-2023-28448.md): Versionize is lacking bound checks, potentially leading to out of bounds memory access (CVSS 5.7, firecracker-microvm versionize · versionize)
- [CVE-2021-3844](https://cve.now/CVE-2021-3844.md): Rapid7 InsightVM Insufficient Session Expiration (CVSS 5.7, Rapid7 InsightVM)
- [CVE-2022-47502](https://cve.now/CVE-2022-47502.md): Apache OpenOffice: Macro URL arbitrary script execution (critical (no CVSS), Apache Software Foundation Apache OpenOffice)
- [CVE-2022-38745](https://cve.now/CVE-2022-38745.md): Apache OpenOffice: Empty entry in Java class path (CVSS 7.8, Apache Software Foundation Apache OpenOffice)
- [CVE-2023-1616](https://cve.now/CVE-2023-1616.md): XiaoBingBy TeaCMS Article Title cross site scripting (CVSS 3.5, XiaoBingBy TeaCMS)
- [CVE-2020-36691](https://cve.now/CVE-2020-36691.md): An issue was discovered in the Linux kernel before 5.8. (CVSS 5.5)
- [CVE-2021-3674](https://cve.now/CVE-2021-3674.md): A flaw was found in rizin. (CVSS 7.8, rizin)
- [CVE-2021-3684](https://cve.now/CVE-2021-3684.md): A vulnerability was found in OpenShift Assisted Installer. (no CVSS, assisted-installer · github.com/openshift/assisted-installer)
- [CVE-2021-43311](https://cve.now/CVE-2021-43311.md): A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get\_le32(). (no CVSS, upx)
- [CVE-2021-43312](https://cve.now/CVE-2021-43312.md): A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. (no CVSS, upx)
- [CVE-2021-43313](https://cve.now/CVE-2021-43313.md): A heap-based buffer overflow was discovered in upx, during the variable 'bucket' points to an inaccessible address. (no CVSS, upx)
- [CVE-2021-43314](https://cve.now/CVE-2021-43314.md): A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get\_le32(). (no CVSS, upx)
- [CVE-2021-43315](https://cve.now/CVE-2021-43315.md): A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get\_le32(). (no CVSS, upx)
- [CVE-2021-43316](https://cve.now/CVE-2021-43316.md): A heap-based buffer overflow was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get\_le64(). (no CVSS, upx)
- [CVE-2021-43317](https://cve.now/CVE-2021-43317.md): A heap-based buffer overflows was discovered in upx, during the generic pointer 'p' points to an inaccessible address in func get\_le32(). (no CVSS, upx)
- [CVE-2022-20467](https://cve.now/CVE-2022-20467.md): In isBluetoothShareUri of BluetoothOppUtility.java, there is a possible incorrect file read due to a confused deputy. (CVSS 5.5, Android)
- [CVE-2022-20499](https://cve.now/CVE-2022-20499.md): In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial (CVSS 5.5, Android)
- [CVE-2022-20532](https://cve.now/CVE-2022-20532.md): In parseTrackFragmentRun() of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. (CVSS 9.8, Android)
- [CVE-2022-20542](https://cve.now/CVE-2022-20542.md): In parseParamsBlob of types.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, Android)
- [CVE-2022-28495](https://cve.now/CVE-2022-28495.md): TOTOLink outdoor CPE CP900 V6.3c.566\_B20171026 is discovered to contain a command injection vulnerability in the setWebWlanIdx function via (CVSS 9.8)
- [CVE-2022-40208](https://cve.now/CVE-2022-40208.md): In Moodle, insufficient limitations in some quiz web services made it possible for students to bypass sequential navigation during a quiz at (CVSS 4.3, Moodle · moodle/moodle)
- [CVE-2022-42498](https://cve.now/CVE-2022-42498.md): In Pixel cellular firmware, there is a possible out of bounds write due to a missing bounds check. (CVSS 9.8, Android)
- [CVE-2022-42499](https://cve.now/CVE-2022-42499.md): In sms\_SendMmCpErrMsg of sms\_MmConManagement.c, there is a possible out of bounds write due to a heap buffer overflow. (CVSS 9.8, Android)
- [CVE-2022-42500](https://cve.now/CVE-2022-42500.md): In OEM\_OnRequest of sced.cpp, there is a possible shell command execution due to improper input validation. (no CVSS, Android)
- [CVE-2022-42528](https://cve.now/CVE-2022-42528.md): In ffa\_mrd\_prot of shared\_mem.c, there is a possible ID due to a logic error in the code. (no CVSS, Android)
- [CVE-2022-42948](https://cve.now/CVE-2022-42948.md): Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components. (CVSS 9.8, KEV)
- [CVE-2022-45597](https://cve.now/CVE-2022-45597.md): ComponentSpace.Saml2 4.4.0 Missing SSL Certificate Validation. (no CVSS)
- [CVE-2023-1176](https://cve.now/CVE-2023-1176.md): Absolute Path Traversal in mlflow/mlflow (CVSS 5.3, mlflow/mlflow · mlflow)
- [CVE-2023-1177](https://cve.now/CVE-2023-1177.md): Path Traversal: '\\..\\filename' in mlflow/mlflow (CVSS 9.3, mlflow/mlflow · mlflow)
- [CVE-2023-1583](https://cve.now/CVE-2023-1583.md): A NULL pointer dereference was found in io\_file\_bitmap\_get in io\_uring/filetable.c in the io\_uring sub-component in the Linux Kernel. (CVSS 5.5, Linux kernel)
- [CVE-2023-20906](https://cve.now/CVE-2023-20906.md): In onPackageAddedInternal of PermissionManagerService.java, there is a possible way to silently grant a permission after a Target SDK update (CVSS 7.8, Android)
- [CVE-2023-20910](https://cve.now/CVE-2023-20910.md): In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhaustion. (CVSS 5.5, Google Android)
- [CVE-2023-20911](https://cve.now/CVE-2023-20911.md): In addPermission of PermissionManagerServiceImpl.java , there is a possible failure to persist permission settings due to resource exhaustio (CVSS 7.8, Android)
- [CVE-2023-20917](https://cve.now/CVE-2023-20917.md): In onTargetSelected of ResolverActivity.java, there is a possible way to share a wrong file due to a logic error in the code. (CVSS 7.8, Android)
- [CVE-2023-20926](https://cve.now/CVE-2023-20926.md): In onParentVisible of HeaderPrivacyIconsController.kt, there is a possible way to bypass factory reset protections due to a missing permissi (CVSS 6.8, Android)
- [CVE-2023-20929](https://cve.now/CVE-2023-20929.md): In sendHalfSheetCancelBroadcast of HalfSheetActivity.java, there is a possible way to learn nearby BT MAC addresses due to an unrestricted b (CVSS 5.5, Android)
- [CVE-2023-20931](https://cve.now/CVE-2023-20931.md): In avdt\_scb\_hdl\_write\_req of avdt\_scb\_act.cc, there is a possible out of bounds write due to a heap buffer overflow. (CVSS 7.8, Android)
- [CVE-2023-20936](https://cve.now/CVE-2023-20936.md): In bta\_av\_rc\_disc\_done of bta\_av\_act.cc, there is a possible out of bounds write due to a missing bounds check. (CVSS 7.8, Android)
- [CVE-2023-20947](https://cve.now/CVE-2023-20947.md): In getGroupState of GrantPermissionsViewModel.kt, there is a possible way to keep a one-time permission granted due to a permissions bypass. (CVSS 7.8, Android)
- [CVE-2023-20951](https://cve.now/CVE-2023-20951.md): In gatt\_process\_prep\_write\_rsp of gatt\_cl.cc, there is a possible out of bounds write due to a missing bounds check. (CVSS 9.8, Android)
- [CVE-2023-20952](https://cve.now/CVE-2023-20952.md): In A2DP\_BuildCodecHeaderSbc of a2dp\_sbc.cc, there is a possible out of bounds write due to a missing bounds check. (CVSS 5.5, Android)
- [CVE-2023-20953](https://cve.now/CVE-2023-20953.md): In onPrimaryClipChanged of ClipboardListener.java, there is a possible way to bypass factory reset protection due to incorrect UI being show (CVSS 7.8, Android)
- [CVE-2023-20954](https://cve.now/CVE-2023-20954.md): In SDP\_AddAttribute of sdp\_db.cc, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 9.8, Android)
- [CVE-2023-20955](https://cve.now/CVE-2023-20955.md): In onPrepareOptionsMenu of AppInfoDashboardFragment.java, there is a possible way to bypass admin restrictions and uninstall applications fo (CVSS 7.8, Android)
- [CVE-2023-20956](https://cve.now/CVE-2023-20956.md): In Import of C2SurfaceSyncObj.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-20957](https://cve.now/CVE-2023-20957.md): In onAttach of SettingsPreferenceFragment.java, there is a possible bypass of Factory Reset Protections due to a confused deputy. (CVSS 7.8, Android)
- [CVE-2023-20958](https://cve.now/CVE-2023-20958.md): In read\_paint of ttcolr.c, there is a possible out of bounds read due to a heap buffer overflow. (CVSS 7.1, Android)
- [CVE-2023-20959](https://cve.now/CVE-2023-20959.md): In AddSupervisedUserActivity, guest users are not prevented from starting the activity due to missing permissions checks. (CVSS 7.8, Android)
- [CVE-2023-20960](https://cve.now/CVE-2023-20960.md): In launchDeepLinkIntentToRight of SettingsHomepageActivity.java, there is a possible way to launch arbitrary activities due to improper inpu (CVSS 7.8, Android)
- [CVE-2023-20962](https://cve.now/CVE-2023-20962.md): In getSliceEndItem of MediaVolumePreferenceController.java, there is a possible way to start foreground activity from the background due to (CVSS 5.5, Android)
- [CVE-2023-20963](https://cve.now/CVE-2023-20963.md): In WorkSource, there is a possible parcel mismatch. (CVSS 7.8, KEV, Android)
- [CVE-2023-20964](https://cve.now/CVE-2023-20964.md): In multiple functions of MediaSessionRecord.java, there is a possible Intent rebroadcast due to a confused deputy. (CVSS 7.8, Android)
- [CVE-2023-20966](https://cve.now/CVE-2023-20966.md): In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. (CVSS 7.8, Android)
- [CVE-2023-20968](https://cve.now/CVE-2023-20968.md): In multiple functions of p2p\_iface.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-20969](https://cve.now/CVE-2023-20969.md): In multiple locations of p2p\_iface.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-20970](https://cve.now/CVE-2023-20970.md): In multiple locations of p2p\_iface.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-20971](https://cve.now/CVE-2023-20971.md): In removePermission of PermissionManagerServiceImpl.java, there is a possible way to obtain dangerous permissions without user consent due t (CVSS 7.8, Google Android)
- [CVE-2023-20972](https://cve.now/CVE-2023-20972.md): In btm\_vendor\_specific\_evt of btm\_devctl.cc, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.5, Android)
- [CVE-2023-20973](https://cve.now/CVE-2023-20973.md): In btm\_create\_conn\_cancel\_complete of btm\_sec.cc, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.5, Android)
- [CVE-2023-20974](https://cve.now/CVE-2023-20974.md): In btm\_ble\_add\_resolving\_list\_entry\_complete of btm\_ble\_privacy.cc, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.5, Android)
- [CVE-2023-20975](https://cve.now/CVE-2023-20975.md): In getAvailabilityStatus of EnableContentCapturePreferenceController.java, there is a possible way to bypass DISALLOW\_CONTENT\_CAPTURE due to (CVSS 7.8, Android)
- [CVE-2023-20976](https://cve.now/CVE-2023-20976.md): In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application (CVSS 7.3, Android)
- [CVE-2023-20977](https://cve.now/CVE-2023-20977.md): In btm\_ble\_read\_remote\_features\_complete of btm\_ble\_gap.cc, there is a possible out of bounds read due to improper input validation. (CVSS 4.4, Android)
- [CVE-2023-20979](https://cve.now/CVE-2023-20979.md): In GetNextSourceDataPacket of bta\_av\_co.cc, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.5, Android)
- [CVE-2023-20980](https://cve.now/CVE-2023-20980.md): In btu\_ble\_ll\_conn\_param\_upd\_evt of btu\_hcif.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-20981](https://cve.now/CVE-2023-20981.md): In btu\_ble\_rc\_param\_req\_evt of btu\_hcif.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-20982](https://cve.now/CVE-2023-20982.md): In btm\_read\_tx\_power\_complete of btm\_acl.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-20983](https://cve.now/CVE-2023-20983.md): In btm\_ble\_rand\_enc\_complete of btm\_ble.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-20984](https://cve.now/CVE-2023-20984.md): In ParseBqrLinkQualityEvt of btif\_bqr.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-20985](https://cve.now/CVE-2023-20985.md): In BTA\_GATTS\_HandleValueIndication of bta\_gatts\_api.cc, there is a possible out of bounds write due to improper input validation. (no CVSS, Android)
- [CVE-2023-20986](https://cve.now/CVE-2023-20986.md): In btm\_ble\_clear\_resolving\_list\_completecomplete of btm\_ble\_privacy.cc, there is a possible out of bounds read due to a missing bounds check (no CVSS, Android)
- [CVE-2023-20987](https://cve.now/CVE-2023-20987.md): In btm\_read\_link\_quality\_complete of btm\_acl.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-20988](https://cve.now/CVE-2023-20988.md): In btm\_read\_rssi\_complete of btm\_acl.cc, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.5, Android)
- [CVE-2023-20989](https://cve.now/CVE-2023-20989.md): In btm\_ble\_write\_adv\_enable\_complete of btm\_ble\_gap.cc, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-20990](https://cve.now/CVE-2023-20990.md): In btm\_ble\_rand\_enc\_complete of btm\_ble.cc, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-20991](https://cve.now/CVE-2023-20991.md): In btm\_ble\_process\_periodic\_adv\_sync\_lost\_evt of ble\_scanner\_hci\_interface.cc , there is a possible out of bounds read due to a missing boun (no CVSS, Android)
- [CVE-2023-20992](https://cve.now/CVE-2023-20992.md): In on\_iso\_link\_quality\_read of btm\_iso\_impl.h, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-20993](https://cve.now/CVE-2023-20993.md): In multiple functions of SnoozeHelper.java, there is a possible failure to persist settings due to an uncaught exception. (CVSS 7.8, Android)
- [CVE-2023-20994](https://cve.now/CVE-2023-20994.md): In \_ufdt\_output\_property\_to\_fdt of ufdt\_convert.c, there is a possible out of bounds write due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2023-20995](https://cve.now/CVE-2023-20995.md): In captureImage of CustomizedSensor.cpp, there is a possible way to bypass the fingerprint unlock due to a logic error in the code. (no CVSS, Android)
- [CVE-2023-20996](https://cve.now/CVE-2023-20996.md): In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. (CVSS 5.5, Android)
- [CVE-2023-20997](https://cve.now/CVE-2023-20997.md): In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. (CVSS 5.5, Android)
- [CVE-2023-20998](https://cve.now/CVE-2023-20998.md): In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. (CVSS 5.5, Android)
- [CVE-2023-20999](https://cve.now/CVE-2023-20999.md): In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. (CVSS 5.5, Android)
- [CVE-2023-21000](https://cve.now/CVE-2023-21000.md): In MediaCodec.cpp, there is a possible use after free due to improper locking. (CVSS 7.8, Android)
- [CVE-2023-21001](https://cve.now/CVE-2023-21001.md): In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due (CVSS 7.8, Android)
- [CVE-2023-21002](https://cve.now/CVE-2023-21002.md): In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission chec (CVSS 7.8, Android)
- [CVE-2023-21003](https://cve.now/CVE-2023-21003.md): In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission chec (CVSS 7.8, Android)
- [CVE-2023-21004](https://cve.now/CVE-2023-21004.md): In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission chec (CVSS 7.8, Android)
- [CVE-2023-21005](https://cve.now/CVE-2023-21005.md): In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission chec (CVSS 7.8, Android)
- [CVE-2023-21006](https://cve.now/CVE-2023-21006.md): In multiple locations of p2p\_iface.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-21007](https://cve.now/CVE-2023-21007.md): In multiple locations of p2p\_iface.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-21008](https://cve.now/CVE-2023-21008.md): In multiple locations of p2p\_iface.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-21009](https://cve.now/CVE-2023-21009.md): In multiple locations of p2p\_iface.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-21010](https://cve.now/CVE-2023-21010.md): In multiple locations of p2p\_iface.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-21011](https://cve.now/CVE-2023-21011.md): In multiple locations of p2p\_iface.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-21012](https://cve.now/CVE-2023-21012.md): In multiple locations of p2p\_iface.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 3.7, Android)
- [CVE-2023-21013](https://cve.now/CVE-2023-21013.md): In forceStaDisconnection of hostapd.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-21014](https://cve.now/CVE-2023-21014.md): In multiple locations of p2p\_iface.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 5.1, Android)
- [CVE-2023-21015](https://cve.now/CVE-2023-21015.md): In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission chec (CVSS 7.8, Android)
- [CVE-2023-21016](https://cve.now/CVE-2023-21016.md): In AccountTypePreference of AccountTypePreference.java, there is a possible way to mislead the user about accounts installed on the device d (CVSS 5.5, Android)
- [CVE-2023-21017](https://cve.now/CVE-2023-21017.md): In InstallStart of InstallStart.java, there is a possible way to change the installer package name due to an improper input validation. (CVSS 7.8, Android)
- [CVE-2023-21018](https://cve.now/CVE-2023-21018.md): In UnwindingWorker of unwinding.cc, there is a possible out of bounds write due to a use after free. (CVSS 6.7, Android)
- [CVE-2023-21019](https://cve.now/CVE-2023-21019.md): In ih264e\_init\_proc\_ctxt of ih264e\_process.c, there is a possible out of bounds read due to a heap buffer overflow. (CVSS 5.5, Android)
- [CVE-2023-21020](https://cve.now/CVE-2023-21020.md): In registerSignalHandlers of main.c, there is a possible local arbitrary code execution due to a use after free. (CVSS 6.7, Android)
- [CVE-2023-21021](https://cve.now/CVE-2023-21021.md): In isTargetSdkLessThanQOrPrivileged of WifiServiceImpl.java, there is a possible way for the guest user to change admin user network setting (CVSS 7.8, Android)
- [CVE-2023-21022](https://cve.now/CVE-2023-21022.md): In BufferBlock of Suballocation.cpp, there is a possible out of bounds write due to memory corruption. (CVSS 7.8, Android)
- [CVE-2023-21024](https://cve.now/CVE-2023-21024.md): In maybeFinish of FallbackHome.java, there is a possible delay of lockdown screen due to logic error. (CVSS 7.8, Android)
- [CVE-2023-21025](https://cve.now/CVE-2023-21025.md): In ufdt\_local\_fixup\_prop of ufdt\_overlay.c, there is a possible out of bounds read due to an incorrect bounds check. (CVSS 4.4, Android)
- [CVE-2023-21026](https://cve.now/CVE-2023-21026.md): In updateInputChannel of WindowManagerService.java, there is a possible way to set a touchable region beyond its own SurfaceControl due to a (CVSS 5.5, Android)
- [CVE-2023-21027](https://cve.now/CVE-2023-21027.md): In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. (CVSS 7.5, Android)
- [CVE-2023-21028](https://cve.now/CVE-2023-21028.md): In parse\_printerAttributes of ipphelper.c, there is a possible out of bounds read due to a string without a null-terminator. (CVSS 7.5, Android)
- [CVE-2023-21029](https://cve.now/CVE-2023-21029.md): In register of UidObserverController.java, there is a missing permission check. (CVSS 5.5, Android)
- [CVE-2023-21030](https://cve.now/CVE-2023-21030.md): In Confirmation of keystore\_cli\_v2.cpp, there is a possible way to corrupt memory due to a double free. (CVSS 7.8, Android)
- [CVE-2023-21031](https://cve.now/CVE-2023-21031.md): In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. (CVSS 4.7, Android)
- [CVE-2023-21032](https://cve.now/CVE-2023-21032.md): In \_ufdt\_output\_node\_to\_fdt of ufdt\_convert.c, there is a possible out of bounds read due to a heap buffer overflow. (CVSS 4.4, Android)
- [CVE-2023-21033](https://cve.now/CVE-2023-21033.md): In addNetwork of WifiManager.java, there is a possible way to trigger a persistent DoS due to resource exhaustion. (CVSS 5.5, Android)
- [CVE-2023-21034](https://cve.now/CVE-2023-21034.md): In multiple functions of SensorService.cpp, there is a possible access of accurate sensor data due to a permissions bypass. (CVSS 7.8, Android)
- [CVE-2023-21035](https://cve.now/CVE-2023-21035.md): In multiple functions of BackupHelper.java, there is a possible way for an app to get permissions previously granted to another app with the (CVSS 7.8, Android)
- [CVE-2023-21036](https://cve.now/CVE-2023-21036.md): In BitmapExport.java, there is a possible failure to truncate images due to a logic error in the code.Product: AndroidVersions: Android kern (CVSS 5.5, Android)
- [CVE-2023-21038](https://cve.now/CVE-2023-21038.md): In cs40l2x\_cp\_trigger\_queue\_show of cs40l2x.c, there is a possible out of bounds write due to a use after free. (CVSS 6.7, Android)
- [CVE-2023-21039](https://cve.now/CVE-2023-21039.md): In dumpstateBoard of Dumpstate.cpp, there is a possible out of bounds read due to an incorrect bounds check. (CVSS 4.4, Android)
- [CVE-2023-21040](https://cve.now/CVE-2023-21040.md): In buildCommand of bluetooth\_ccc.cc, there is a possible out of bounds write due to a logic error in the code. (CVSS 7.8, Android)
- [CVE-2023-21041](https://cve.now/CVE-2023-21041.md): In append\_to\_params of param\_util.c, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 7.8, Android)
- [CVE-2023-21042](https://cve.now/CVE-2023-21042.md): In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. (CVSS 6.7, Android)
- [CVE-2023-21043](https://cve.now/CVE-2023-21043.md): In (TBD) of (TBD), there is a possible way to corrupt memory due to a use after free. (CVSS 6.7, Android)
- [CVE-2023-21044](https://cve.now/CVE-2023-21044.md): In init of VendorGraphicBufferMeta, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-21045](https://cve.now/CVE-2023-21045.md): When cpif handles probe failures, there is a possible out of bounds read due to a use after free. (CVSS 4.4, Android)
- [CVE-2023-21046](https://cve.now/CVE-2023-21046.md): In ConvertToHalMetadata of aidl\_utils.cc, there is a possible out of bounds read due to an incorrect bounds check. (CVSS 4.4, Android)
- [CVE-2023-21047](https://cve.now/CVE-2023-21047.md): In ConvertToHalMetadata of aidl\_utils.cc, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-21048](https://cve.now/CVE-2023-21048.md): In handleEvent of nan.cpp, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-21049](https://cve.now/CVE-2023-21049.md): In append\_camera\_metadata of camera\_metadata.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 4.4, Android)
- [CVE-2023-21050](https://cve.now/CVE-2023-21050.md): In load\_png\_image of ExynosHWCHelper.cpp, there is a possible out of bounds write due to improper input validation. (CVSS 6.7, Android)
- [CVE-2023-21051](https://cve.now/CVE-2023-21051.md): In dwc3\_exynos\_clk\_get of dwc3-exynos.c, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 6.7, Android)
- [CVE-2023-21052](https://cve.now/CVE-2023-21052.md): In setToExternal of ril\_external\_client.cpp, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, Android)
- [CVE-2023-21053](https://cve.now/CVE-2023-21053.md): In sms\_ExtractCbLanguage of sms\_CellBroadcast.c, there is a possible out of bounds read due to a missing bounds check. (CVSS 7.5, Android)
- [CVE-2023-21054](https://cve.now/CVE-2023-21054.md): In EUTRAN\_LCS\_ConvertLCS\_MOLRReq of LPP\_CommonUtil.c, there is a possible out of bounds write due to a logic error in the code. (CVSS 7.2, Android)
- [CVE-2023-21055](https://cve.now/CVE-2023-21055.md): In dit\_hal\_ioctl of dit.c, there is a possible use after free due to a race condition. (CVSS 6.4, Android)
- [CVE-2023-21056](https://cve.now/CVE-2023-21056.md): In lwis\_slc\_buffer\_free of lwis\_device\_slc.c, there is a possible memory corruption due to type confusion. (CVSS 6.7, Android)
- [CVE-2023-21057](https://cve.now/CVE-2023-21057.md): In ProfSixDecomTcpSACKoption of RohcPacketCommon, there is a possible out of bounds write due to a missing bounds check. (CVSS 9.8, Android)
- [CVE-2023-21058](https://cve.now/CVE-2023-21058.md): In lcsm\_SendRrAcquiAssist of lcsm\_bcm\_assist.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21059](https://cve.now/CVE-2023-21059.md): In EUTRAN\_LCS\_DecodeFacilityInformationElement of LPP\_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21060](https://cve.now/CVE-2023-21060.md): In sms\_GetTpPiIe of sms\_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21061](https://cve.now/CVE-2023-21061.md): Product: AndroidVersions: Android kernelAndroid ID: A-229255400References: N/A (no CVSS, Android)
- [CVE-2023-21062](https://cve.now/CVE-2023-21062.md): In DoSetTempEcc of imsservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2023-21063](https://cve.now/CVE-2023-21063.md): In ParseWithAuthType of simdata.cpp, there is a possible out of bounds read due to an incorrect bounds check. (no CVSS, Android)
- [CVE-2023-21064](https://cve.now/CVE-2023-21064.md): In DoSetPinControl of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21065](https://cve.now/CVE-2023-21065.md): In fdt\_next\_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. (no CVSS, Android)
- [CVE-2023-21067](https://cve.now/CVE-2023-21067.md): Product: AndroidVersions: Android kernelAndroid ID: A-254114726References: N/A (no CVSS, Android)
- [CVE-2023-21068](https://cve.now/CVE-2023-21068.md): In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. (no CVSS, Android)
- [CVE-2023-21069](https://cve.now/CVE-2023-21069.md): In wl\_update\_hidden\_ap\_ie of wl\_cfgscan.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21070](https://cve.now/CVE-2023-21070.md): In add\_roam\_cache\_list of wl\_roam.c, there is a possible out of bounds write due to a missing bounds check. (no CVSS, Android)
- [CVE-2023-21071](https://cve.now/CVE-2023-21071.md): In dhd\_prot\_ioctcmplt\_process of dhd\_msgbuf.c, there is a possible out of bounds write due to improper input validation. (no CVSS, Android)
- [CVE-2023-21072](https://cve.now/CVE-2023-21072.md): In rtt\_unpack\_xtlv\_cbfn of dhd\_rtt.c, there is a possible out of bounds write due to a buffer overflow. (no CVSS, Android)
- [CVE-2023-21073](https://cve.now/CVE-2023-21073.md): In rtt\_unpack\_xtlv\_cbfn of dhd\_rtt.c, there is a possible out of bounds write due to a buffer overflow. (no CVSS, Android)
- [CVE-2023-21075](https://cve.now/CVE-2023-21075.md): In get\_svc\_hash of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2023-21076](https://cve.now/CVE-2023-21076.md): In createTransmitFollowupRequest of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. (no CVSS, Android)
- [CVE-2023-21077](https://cve.now/CVE-2023-21077.md): In rtt\_unpack\_xtlv\_cbfn of dhd\_rtt.c, there is a possible out of bounds write due to a buffer overflow. (no CVSS, Android)
- [CVE-2023-21078](https://cve.now/CVE-2023-21078.md): In rtt\_unpack\_xtlv\_cbfn of dhd\_rtt.c, there is a possible out of bounds write due to a buffer overflow. (no CVSS, Android)
- [CVE-2023-21079](https://cve.now/CVE-2023-21079.md): In rtt\_unpack\_xtlv\_cbfn of dhd\_rtt.c, there is a possible out of bounds write due to a heap buffer overflow. (CVSS 6.7, Android)
- [CVE-2023-22812](https://cve.now/CVE-2023-22812.md): SanDisk PrivateAccess Deprecated TLS protocol versions supported (CVSS 7.4, SanDisk PrivateAccess)
- [CVE-2023-23149](https://cve.now/CVE-2023-23149.md): DEK-1705 \<=Firmware:34.23.1 device was discovered to have a command execution vulnerability. (CVSS 9.8)
- [CVE-2023-24625](https://cve.now/CVE-2023-24625.md): Faveo 5.0.1 allows remote attackers to obtain sensitive information via a modified user ID in an Insecure Direct Object Reference (IDOR) att (CVSS 6.5)
- [CVE-2023-25350](https://cve.now/CVE-2023-25350.md): Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. (CVSS 8.8)
- [CVE-2023-26864](https://cve.now/CVE-2023-26864.md): SQL injection vulnerability found in PrestaShop smplredirectionsmanager v.1.1.19 and before allow a remote attacker to gain privileges via t (CVSS 9.8)
- [CVE-2023-27042](https://cve.now/CVE-2023-27042.md): Tenda AX3 V16.03.12.11 is vulnerable to Buffer Overflow via /goform/SetFirewallCfg. (CVSS 8.8)
- [CVE-2023-27055](https://cve.now/CVE-2023-27055.md): Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request. (CVSS 7.5)
- [CVE-2023-27242](https://cve.now/CVE-2023-27242.md): SourceCodester Loan Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Type parameter under (CVSS 5.4)
- [CVE-2023-28150](https://cve.now/CVE-2023-28150.md): An issue was discovered in Independentsoft JODF before 1.1.110. (CVSS 5.3)
- [CVE-2023-28151](https://cve.now/CVE-2023-28151.md): An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. (CVSS 5.3)
- [CVE-2023-28152](https://cve.now/CVE-2023-28152.md): An issue was discovered in Independentsoft JWord before 1.1.110. (CVSS 5.3)
- [CVE-2023-28686](https://cve.now/CVE-2023-28686.md): Dino before 0.2.3, 0.3.x before 0.3.2, and 0.4.x before 0.4.2 allows attackers to modify the personal bookmark store via a crafted message. (CVSS 5.3)
- [CVE-2023-28818](https://cve.now/CVE-2023-28818.md): An issue was discovered in Veritas NetBackup IT Analytics 11 before 11.2.0. (CVSS 5.3)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-03-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.