Google Android vulnerabilities

CVE-2021-0346 [MEDIUM] CWE-787 CVE-2021-0346: In vpu, there is a possible out of bounds write due to an incorrect bounds check. This could lead to In vpu, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580.

CVE-2021-0348 [MEDIUM] CWE-787 CVE-2021-0348: In vpu, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In vpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11; Patch ID: ALPS05349201.

CVE-2021-0349 [MEDIUM] CWE-416 CVE-2021-0349: In display driver, there is a possible memory corruption due to a use after free. This could lead to In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11; Patch ID: ALPS05362646.

CVE-2020-0165 [MEDIUM] CWE-787 CVE-2020-0165: In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds writ In phNxpNciHal_NfcDep_cmd_ext of phNxpNciHal_NfcDepSWPrio.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege via compromised device firmware with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-

CVE-2020-0050 [MEDIUM] CWE-20 CVE-2020-0050: In nfa_hciu_send_msg of nfa_hci_utils.cc, there is a possible out of bounds write due to improper in In nfa_hciu_send_msg of nfa_hci_utils.cc, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-124521372

CVE-2021-0343 [MEDIUM] CWE-787 CVE-2021-0343: In kisd, there is a possible out of bounds write due to a missing bounds check. This could lead to l In kisd, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05449962.

CVE-2021-0353 [MEDIUM] CWE-787 CVE-2021-0353: In kisd, there is a possible memory corruption due to a heap buffer overflow. This could lead to loc In kisd, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05425247.

CVE-2020-0053 [MEDIUM] CWE-787 CVE-2020-0053: In convertHidlNanDataPathInitiatorRequestToLegacy, and convertHidlNanDataPathIndicationResponseToLeg In convertHidlNanDataPathInitiatorRequestToLegacy, and convertHidlNanDataPathIndicationResponseToLegacy of hidl_struct_util.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: Androi

CVE-2021-0360 [MEDIUM] CWE-787 CVE-2021-0360: In netdiag, there is a possible out of bounds write due to an incorrect bounds check. This could lea In netdiag, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442006.

CVE-2021-0354 [MEDIUM] CWE-190 CVE-2021-0354: In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05431161.

CVE-2021-0359 [MEDIUM] CWE-787 CVE-2021-0359: In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead t In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442011.

CVE-2021-0357 [MEDIUM] CWE-787 CVE-2021-0357: In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead t In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442002.

CVE-2020-0350 [MEDIUM] CWE-787 CVE-2020-0350: In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-139424089

CVE-2020-0334 [MEDIUM] CWE-787 CVE-2020-0334: In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-147995915

CVE-2020-0335 [MEDIUM] CWE-787 CVE-2020-0335: In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges and a Firmware compromise needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-122361504

CVE-2021-0365 [MEDIUM] CWE-416 CVE-2021-0365: In display driver, there is a possible memory corruption due to a use after free. This could lead to In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05454782.

CVE-2021-0355 [MEDIUM] CWE-190 CVE-2021-0355: In kisd, there is a possible out of bounds write due to an integer overflow. This could lead to loca In kisd, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05425581.

CVE-2020-0356 [MEDIUM] CWE-787 CVE-2020-0356: In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This cou In the Audio HAL, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-143787559

CVE-2020-0326 [MEDIUM] CWE-787 CVE-2020-0326: In NFC, there is a possible out of bounds write due to uninitialized data. This could lead to local In NFC, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-146453119

CVE-2020-0124 [MEDIUM] CWE-787 CVE-2020-0124: In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a m In markBootComplete of InstalldNativeService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-140237592