Google Android vulnerabilities

CVE-2023-20645 [MEDIUM] CWE-20 CVE-2023-20645: In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628609; Issue ID: ALPS07628609.

CVE-2023-20647 [MEDIUM] CWE-20 CVE-2023-20647: In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628547; Issue ID: ALPS07628547.

CVE-2023-20650 [MEDIUM] CWE-20 CVE-2023-20650: In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629577; Issue ID: ALPS07629577.

CVE-2023-20626 [MEDIUM] CWE-20 CVE-2023-20626: In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead t In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07405223; Issue ID: ALPS07405223.

CVE-2023-20637 [MEDIUM] CWE-20 CVE-2023-20637: In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628588; Issue ID: ALPS07628588.

CVE-2023-20649 [MEDIUM] CWE-20 CVE-2023-20649: In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628607; Issue ID: ALPS07628607.

CVE-2023-20627 [MEDIUM] CWE-131 CVE-2023-20627: In pqframework, there is a possible out of bounds write due to a missing bounds check. This could le In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629585; Issue ID: ALPS07629585.

CVE-2023-20648 [MEDIUM] CWE-20 CVE-2023-20648: In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628612; Issue ID: ALPS07628612.

CVE-2023-20642 [MEDIUM] CWE-20 CVE-2023-20642: In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628586; Issue ID: ALPS07628586.

CVE-2023-20633 [MEDIUM] CWE-129 CVE-2023-20633: In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628508; Issue ID: ALPS07628508.

CVE-2023-20644 [MEDIUM] CWE-20 CVE-2023-20644: In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to loc In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628603; Issue ID: ALPS07628603.

CVE-2023-20639 [MEDIUM] CWE-20 CVE-2023-20639: In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628587; Issue ID: ALPS07628587.

CVE-2023-20624 [MEDIUM] CWE-120 CVE-2023-20624: In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628530; Issue ID: ALPS07628530.

CVE-2022-33213 [HIGH] CVE-2022-33213: Closed-source component Android Security Bulletin 2023-03-01 CVE: CVE-2022-33213 Severity: CRITICAL Component: Closed-source component References: A-238106224 *

CVE-2022-33256 [CRITICAL] CVE-2022-33256: Closed-source component Android Security Bulletin 2023-03-01 CVE: CVE-2022-33256 Severity: CRITICAL Component: Closed-source component References: A-245402790 *

CVE-2021-33655 [MEDIUM] CVE-2021-33655: Frame Buffer Android Security Bulletin 2023-03-01 CVE: CVE-2021-33655 Severity: HIGH Type: EoP Component: Frame Buffer References: A-240019719 Upstream kernel [2] [3]

CVE-2022-33250 [HIGH] CVE-2022-33250: Closed-source component Android Security Bulletin 2023-03-01 CVE: CVE-2022-33250 Severity: HIGH Component: Closed-source component References: A-245403450 *

CVE-2022-40537 [HIGH] CVE-2022-40537: Bluetooth Android Security Bulletin 2023-03-01 CVE: CVE-2022-40537 Severity: HIGH Component: Bluetooth References: A-261468700 QC-CR#3278869 [2] [3] [4]

CVE-2022-33244 [HIGH] CVE-2022-33244: Closed-source component Android Security Bulletin 2023-03-01 CVE: CVE-2022-33244 Severity: HIGH Component: Closed-source component References: A-245402728 *

CVE-2022-33278 [HIGH] CVE-2022-33278: Closed-source component Android Security Bulletin 2023-03-01 CVE: CVE-2022-33278 Severity: HIGH Component: Closed-source component References: A-245402730 *