Google Android vulnerabilities

CVE-2023-21244 [MEDIUM] CWE-862 CVE-2023-21244: In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a mi In visitUris of Notification.java, there is a possible bypass of user profile boundaries due to a missing permission check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-20755 [MEDIUM] CWE-190 CVE-2023-20755: In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead t In keyinstall, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07510064; Issue ID: ALPS07509605.

CVE-2021-0657 [MEDIUM] CWE-787 CVE-2021-0657: In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could In apusys, there is a possible out of bounds write due to a stack-based buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672103; Issue ID: ALPS05672103.

CVE-2022-20539 [MEDIUM] CWE-787 CVE-2022-20539: In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds che In parameterToHal of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the audio server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-237291425

CVE-2021-0370 [MEDIUM] CWE-787 CVE-2021-0370: In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169259605

CVE-2022-20546 [MEDIUM] CWE-787 CVE-2022-20546: In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing boun In getCurrentConfigImpl of Effect.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-240266798

CVE-2022-42542 [MEDIUM] CWE-787 CVE-2022-42542: In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a In phNxpNciHal_core_initialized of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-231445184

CVE-2021-0671 [MEDIUM] CWE-787 CVE-2021-0671: In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to l In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05664273; Issue ID: ALPS05664273.

CVE-2023-35693 [MEDIUM] CWE-416 CVE-2023-35693: In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. T In incfs_kill_sb of fs/incfs/vfs.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CVE-2021-0543 [MEDIUM] CWE-190 CVE-2021-0543: In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to In phNxpNciHal_process_ext_rsp of phNxpNciHal_ext.cc, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169258743

CVE-2021-0545 [MEDIUM] CWE-787 CVE-2021-0545: In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169258884

CVE-2022-20049 [MEDIUM] CWE-862 CVE-2022-20049: In vpu, there is a possible escalation of privilege due to a missing permission check. This could le In vpu, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05954679; Issue ID: ALPS05954679.

CVE-2023-20634 [MEDIUM] CWE-20 CVE-2023-20634: In widevine, there is a possible out of bounds write due to improper input validation. This could le In widevine, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07635697; Issue ID: ALPS07635697.

CVE-2021-0679 [MEDIUM] CWE-787 CVE-2021-0679: In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to l In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05687781.

CVE-2021-0901 [MEDIUM] CWE-190 CVE-2021-0901: In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to l In apusys, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05664618.

CVE-2024-20013 [MEDIUM] CWE-787 CVE-2024-20013: In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lea In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08471742; Issue ID: ALPS08308608.

CVE-2024-20002 [MEDIUM] CWE-787 CVE-2024-20002: In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03961715; Issue ID: DTV03961715.

CVE-2021-25503 [MEDIUM] CWE-20 CVE-2021-25503: Improper input validation vulnerability in HDCP prior to SMR Nov-2021 Release 1 allows attackers to Improper input validation vulnerability in HDCP prior to SMR Nov-2021 Release 1 allows attackers to arbitrary code execution.

CVE-2023-32865 [MEDIUM] CWE-787 CVE-2023-32865: In display drm, there is a possible out of bounds write due to an incorrect bounds check. This could In display drm, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363456; Issue ID: ALPS07363456.

CVE-2023-32869 [MEDIUM] CWE-787 CVE-2023-32869: In display drm, there is a possible out of bounds write due to a missing bounds check. This could le In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363632; Issue ID: ALPS07363689.