Google Android vulnerabilities

CVE-2016-10044 [HIGH] CWE-264 CVE-2016-10044: The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execu The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call.

CVE-2021-0586 [HIGH] CWE-1021 CVE-2021-0586: In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unw In onCreate of DevicePickerFragment.java, there is a possible way to trick the user to select an unwanted bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Andro

CVE-2020-28343 [HIGH] CWE-787 CVE-2020-28343: An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 980, 9820, and 983 An issue was discovered on Samsung mobile devices with P(9.0) and Q(10.0) (Exynos 980, 9820, and 9830 chipsets) software. The NPU driver allows attackers to execute arbitrary code because of unintended write and read operations on memory. The Samsung ID is SVE-2020-18610 (November 2020).

CVE-2019-9400 [HIGH] CWE-476 CVE-2019-9400: In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could l In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-115509589

CVE-2019-9430 [HIGH] CWE-476 CVE-2019-9430: In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could l In Bluetooth, there is a possible null pointer dereference due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-109838296

CVE-2019-9279 [HIGH] CWE-476 CVE-2019-9279: In the wifi hotspot service, there is a possible denial of service due to a null pointer dereference In the wifi hotspot service, there is a possible denial of service due to a null pointer dereference. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-110476382

CVE-2018-9489 [HIGH] CWE-200 CVE-2018-9489: When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts When wifi is switched, function sendNetworkStateChangeBroadcast of WifiStateMachine.java broadcasts an intent including detailed wifi network information. This could lead to information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Androi

CVE-2019-19273 [HIGH] CWE-787 CVE-2019-19273: On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the S On Samsung mobile devices with O(8.0) and P(9.0) software and an Exynos 8895 chipset, RKP (aka the Samsung Hypervisor EL2 implementation) allows arbitrary memory write operations. The Samsung ID is SVE-2019-16265.

CVE-2018-9501 [HIGH] CVE-2018-9501: In the SetupWizard, there is a possible Factory Reset Protection bypass due to a permissions bypass. In the SetupWizard, there is a possible Factory Reset Protection bypass due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9.0 Android ID: A

CVE-2021-39696 [HIGH] CVE-2021-39696: In Task.java, there is a possible escalation of privilege due to a confused deputy. This could lead In Task.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-185810717

CVE-2022-20493 [HIGH] CWE-1284 CVE-2022-20493: In Condition of Condition.java, there is a possible way to grant notification access due to improper In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12L Android-13Android ID:

CVE-2018-9357 [HIGH] CWE-787 CVE-2018-9357: In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds che In BNEP_Write of bnep_api.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-6.0 Android-6.0.1 Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8

CVE-2017-13181 [HIGH] CWE-415 CVE-2017-13181: In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to no In the doGetThumb and getThumbnail functions of MtpServer, there is a possible double free due to not NULLing out a freed pointer. This could lead to an local elevation of privilege enabling code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions

CVE-2020-0033 [HIGH] CWE-119 CVE-2020-0033: In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale p In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds write due to stale pointer. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-144351324

CVE-2018-9523 [HIGH] CWE-20 CVE-2018-9523: In Parcel.writeMapInternal of Parcel.java, there is a possible parcel serialization/deserialization In Parcel.writeMapInternal of Parcel.java, there is a possible parcel serialization/deserialization mismatch due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2

CVE-2020-0027 [HIGH] CWE-787 CVE-2020-0027: In HidRawSensor::batch of HidRawSensor.cpp, there is a possible out of bounds write due to an unexpe In HidRawSensor::batch of HidRawSensor.cpp, there is a possible out of bounds write due to an unexpected switch fallthrough. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-1

CVE-2019-2207 [HIGH] CWE-787 CVE-2019-2207: In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc, there is a possible out of bound write due to mi In nfa_hci_handle_admin_gate_rsp of nfa_hci_act.cc, there is a possible out of bound write due to missing bounds checks. This could lead to local escalation of privilege with system execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-124524315

CVE-2019-2010 [HIGH] CWE-787 CVE-2019-2010: In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bound write due to In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out-of-bound write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8

CVE-2020-11875 [HIGH] CWE-755 CVE-2020-11875: An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10.0 (MTK chipsets) An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10.0 (MTK chipsets) software. The MTK kernel does not properly implement exception handling, allowing an attacker to gain privileges. The LG ID is LVE-SMP-200001 (February 2020).

CVE-2020-0097 [HIGH] CWE-863 CVE-2020-0097: In various methods of PackageManagerService.java, there is a possible permission bypass due to a mis In various methods of PackageManagerService.java, there is a possible permission bypass due to a missing condition for system apps. This could lead to local escalation of privilege with User privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10Android ID: A-145981139