cve.bz

google android vulnerabilities, newest first, page 23

Filter
  1. 7.5CVE-2024-47020EPSS 0.2%

    Android before 2024-10-05 on Google Pixel devices allows information disclosure in the ABL component, A-331966488.

  2. 5.5CVE-2024-47019EPSS 0.08%

    In ProtocolEmbmsSaiListAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Inte…

  3. 5.5CVE-2024-47018EPSS 0.08%

    In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible out of bounds read due to a buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not nee…

  4. 7.8CVE-2024-47017EPSS 0.08%

    In ufshc_scsi_cmd of ufs.c, there is a possible stack variable use after free due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for expl…

  5. 7.8CVE-2024-47016EPSS 0.07%

    there is a possible privilege escalation due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  6. 5.5CVE-2024-47015EPSS 0.08%

    In ProtocolMiscHwConfigChangeAdapter::GetData() of protocolmiscadapter.cpp, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. U…

  7. 8.8CVE-2024-47014EPSS 0.2%

    Android before 2024-10-05 on Google Pixel devices allows privilege escalation in the ABL component, A-330537292.

  8. 7.8CVE-2024-47013EPSS 0.07%

    In pmucal_rae_handle_seq_int of flexpmu_cal_rae.c, there is a possible arbitrary write due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need…

  9. 7.8CVE-2024-47012EPSS 0.08%

    In mm_GetMobileIdIndexForNsUpdate of mm_GmmPduCodec.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interact…

  10. 7.5CVE-2024-44101EPSS 0.4%

    there is a possible Null Pointer Dereference (modem crash) due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

  11. 7.5CVE-2024-44100EPSS 0.3%

    Android before 2024-10-05 on Google Pixel devices allows information disclosure in the modem component, A-299774545.

  12. 5.5CVE-2024-44099EPSS 0.08%

    There is a possible Local bypass of user interaction due to an insecure default value. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

  13. 7.4CVE-2024-44098EPSS 0.08%

    In lwis_device_event_states_clear_locked of lwis_event.c, there is a possible privilege escalation due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n…

  14. 4.4CVE-2024-39440EPSS 0.08%

    In DRM service, there is a possible system crash due to null pointer dereference. This could lead to local denial of service with System execution privileges needed.

  15. 4.4CVE-2024-39439EPSS 0.08%

    In DRM service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  16. 6.7CVE-2024-39438EPSS 0.3%

    In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed.

  17. 6.7CVE-2024-39437EPSS 0.3%

    In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed.

  18. 6.7CVE-2024-39436EPSS 0.3%

    In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed.

  19. 2.4CVE-2024-34664EPSS 0.1%

    Improper check for exception conditions in Knox Guard prior to SMR Oct-2024 Release 1 allows physical attackers to bypass Knox Guard in a multi-user environment.

  20. 5.5CVE-2024-34663EPSS 0.08%

    Integer overflow in libSEF.quram.so prior to SMR Oct-2024 Release 1 allows local attackers to write out-of-bounds memory.

  21. 9.8CVE-2024-20103EPSS 0.3%

    In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:…

  22. 4.9CVE-2024-20102EPSS 0.3%

    In wlan driver, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…

  23. 9.8CVE-2024-20101EPSS 0.3%

    In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…

  24. 9.8CVE-2024-20100EPSS 0.3%

    In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A…

  25. 6.7CVE-2024-20099EPSS 0.08%

    In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08997…

  26. 6.7CVE-2024-20098EPSS 0.08%

    In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996…

  27. 4.4CVE-2024-20097EPSS 0.10%

    In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313…

  28. 4.4CVE-2024-20096EPSS 0.10%

    In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996900;…

  29. 4.4CVE-2024-20095EPSS 0.10%

    In m4u, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08996894;…

  30. 4.4CVE-2024-20093EPSS 0.1%

    In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313…

  31. 7.8CVE-2024-20092EPSS 0.08%

    In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS090283…

  32. 4.4CVE-2024-20091EPSS 0.08%

    In vdec, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09028313…

  33. 6.7CVE-2024-20090EPSS 0.09%

    In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS090283…

  34. 7.8CVE-2024-39435EPSS 0.08%

    In Logmanager service, there is a possible missing verification incorrect input. This could lead to local escalation of privilege with no additional execution privileges needed.

  35. 4.4CVE-2024-39434EPSS 0.08%

    In drm service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  36. 4.4CVE-2024-39433EPSS 0.08%

    In drm service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.

  37. 4.5CVE-2024-39432EPSS 0.2%

    In UMTS RLC driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed.

  38. 4.5CVE-2024-39431EPSS 0.2%

    In UMTS RLC driver, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with System execution privileges needed.

  39. 4.4CVE-2024-44096EPSS 0.08%

    there is a possible arbitrary read due to an insecure default value. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.

  40. 7.8CVE-2024-44095EPSS 0.08%

    In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible corrupt memory due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede…

  41. 7.8CVE-2024-44094EPSS 0.08%

    In ppmp_protect_mfcfw_buf of code/drm_fw.c, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ne…

  42. 7.8CVE-2024-44093EPSS 0.08%

    In ppmp_unprotect_buf of drm/code/drm_fw.c, there is a possible memory corruption due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ne…

  43. 7.8CVE-2024-44092EPSS 0.08%

    There is a possible LCS signing enforcement missing due to test/debugging code left in a production build. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for…

  44. 7.8CVE-2024-29779EPSS 0.07%

    there is a possible escalation of privilege due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

  45. 7.8CVE-2024-40662EPSS 0.10%

    In scheme of Uri.java, there is a possible way to craft a malformed Uri object due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede…

  46. 5.5CVE-2024-40659EPSS 0.08%

    In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This c…

  47. 7.8CVE-2024-40658EPSS 0.1%

    In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is n…

  48. 7.8CVE-2024-40657EPSS 0.08%

    In addPreferencesForType of AccountTypePreferenceLoader.java, there is a possible way to disable apps for other users due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed…

  49. 5.5CVE-2024-40656EPSS 0.08%

    In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges nee…

  50. 7.8CVE-2024-40655EPSS 0.08%

    In bindAndGetCallIdentification of CallScreeningServiceHelper.java, there is a possible way to maintain a while-in-use permission in the background due to a permissions bypass. This could lead to local escalation of privilege with no addit…