Google Android vulnerabilities

CVE-2021-0669 [MEDIUM] CWE-416 CVE-2021-0669: In apusys, there is a possible memory corruption due to a use after free. This could lead to local e In apusys, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05681550; Issue ID: ALPS05681550.

CVE-2022-20039 [MEDIUM] CWE-190 CVE-2022-20039: In ccu driver, there is a possible memory corruption due to an integer overflow. This could lead to In ccu driver, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06183345; Issue ID: ALPS06183345.

CVE-2022-20038 [MEDIUM] CWE-787 CVE-2022-20038: In ccu driver, there is a possible memory corruption due to an incorrect bounds check. This could le In ccu driver, there is a possible memory corruption due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06183335; Issue ID: ALPS06183335.

CVE-2021-0407 [MEDIUM] CWE-787 CVE-2021-0407: In clk driver, there is a possible out of bounds write due to an incorrect bounds check. This could In clk driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05479659; Issue ID: ALPS05479659.

CVE-2021-0626 [MEDIUM] CWE-787 CVE-2021-0626: In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05687510; Issue ID: ALPS05687510.

CVE-2022-20062 [MEDIUM] CWE-416 CVE-2022-20062: In mdp, there is a possible memory corruption due to a use after free. This could lead to local esca In mdp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is no needed for exploitation. Patch ID: ALPS05836418; Issue ID: ALPS05836418.

CVE-2021-0544 [MEDIUM] CWE-787 CVE-2021-0544: In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169257710

CVE-2021-0546 [MEDIUM] CWE-787 CVE-2021-0546: In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a In phNxpNciHal_print_res_status of phNxpNciHal.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169258733

CVE-2021-0540 [MEDIUM] CWE-787 CVE-2021-0540: In halWrapperDataCallback of hal_wrapper.cc, there is a possible out of bounds write due to a missin In halWrapperDataCallback of hal_wrapper.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169328517

CVE-2021-0628 [MEDIUM] CWE-787 CVE-2021-0628: In OMA DRM, there is a possible memory corruption due to improper input validation. This could lead In OMA DRM, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722454; Issue ID: ALPS05722454.

CVE-2021-0627 [MEDIUM] CWE-190 CVE-2021-0627: In OMA DRM, there is a possible memory corruption due to an integer overflow. This could lead to loc In OMA DRM, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05722434; Issue ID: ALPS05722434.

CVE-2021-0903 [MEDIUM] CWE-787 CVE-2021-0903: In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05656488.

CVE-2021-0894 [MEDIUM] CWE-787 CVE-2021-0894: In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672038.

CVE-2021-0895 [MEDIUM] CWE-787 CVE-2021-0895: In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672003.

CVE-2021-0896 [MEDIUM] CWE-787 CVE-2021-0896: In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05671206.

CVE-2021-0678 [MEDIUM] CWE-787 CVE-2021-0678: In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05722511.

CVE-2021-0658 [MEDIUM] CWE-787 CVE-2021-0658: In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05672107.

CVE-2023-20774 [MEDIUM] CWE-125 CVE-2023-20774: In display, there is a possible out of bounds read due to a missing bounds check. This could lead to In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07292228; Issue ID: ALPS07292228.

CVE-2023-20768 [MEDIUM] CWE-843 CVE-2023-20768: In ion, there is a possible out of bounds read due to type confusion. This could lead to local escal In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560720; Issue ID: ALPS07559800.

CVE-2023-20761 [MEDIUM] CWE-787 CVE-2023-20761: In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628604; Issue ID: ALPS07628582.