Fuchsia (Google) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 29 known versions, newest CVE from 2025-01-30. Vendor: Google.

CVEs of Fuchsia

• CVE-2024-10604 - CVSS 6.9 (medium), 2025-01-30: Vulnerabilities in the algorithms used by Fuchsia to populate network protocol header fields, specifically the TCP ISN, TCP timestamp, TCP and UDP source…
• CVE-2022-0882 - CVSS 5.5 (medium), 2022-05-03: A bug exists where an attacker can read the kernel log through exposed Zircon kernel addresses without the required capability ZX_RSRC_KIND_ROOT. It is…
• CVE-2021-22556 - CVSS 7.8 (high), 2022-05-03: The Security Team discovered an integer overflow bug that allows an attacker with code execution to issue memory cache invalidation operations on pages that…
• CVE-2022-0247 - CVSS 7.5 (high), 2022-02-25: An issue exists in Fuchsia where VMO data can be modified through access to copy-on-write snapshots. A local attacker could modify objects in the VMO that…
• CVE-2021-22566 - CVSS 9.8 (critical), 2022-01-18: An incorrect setting of UXN bits within mmu_flags_to_s1_pte_attr lead to privileged executable pages being mapped as executable from an unprivileged context.…