Showing 2 vulnerabilities on this page for admob

Signals CISA KEV Ransomware Nuclei
Google vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CWE-787Nov 19, 2024
CVSS7.8v3.1EPSS0.08%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

In multiple locations, there is a possible code execution due to type confusion. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CWE-843Aug 14, 2023
CVSS9.8v3.1EPSS0.507%PoCs0SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX