← All credits
Alexandru Lazăr of Bitdefender Labs
4 vulnerability records and advisories credit this contributor.
CVE-2023-6317
PIN/prompt bypass on the secondscreen.gateway service allows access to the SSAP API without user interaction
CVE-2023-6318
Command injection in the processAnalyticsReport method from the com.webos.service.cloudupload service
CVE-2023-6319
Command injection in the getAudioMetadata method from the com.webos.service.attachedstoragemanager service
CVE-2023-6320
Command injection in the com.webos.service.connectionmanager/tv/setVlanStaticAddress endpoint