Google Android vulnerabilities

CVE-2023-20749 [MEDIUM] CWE-787 CVE-2023-20749: In swpm, there is a possible out of bounds write due to a missing bounds check. This could lead to l In swpm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07780926; Issue ID: ALPS07780926.

CVE-2023-20628 [MEDIUM] CWE-248 CVE-2023-20628: In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to l In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07494460; Issue ID: ALPS07494460.

CVE-2023-20626 [MEDIUM] CWE-20 CVE-2023-20626: In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead t In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07405223; Issue ID: ALPS07405223.

CVE-2025-20698 [MEDIUM] CWE-787 CVE-2025-20698: In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915400; Issue ID: MSV-3793.

CVE-2025-20697 [MEDIUM] CWE-787 CVE-2025-20697: In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead In Power HAL, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09915681; Issue ID: MSV-3795.

CVE-2024-20059 [MEDIUM] CWE-1332 CVE-2024-20059: In da, there is a possible escalation of privilege due to an incorrect status check. This could lead In da, there is a possible escalation of privilege due to an incorrect status check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541749; Issue ID: ALPS08541749.

CVE-2024-20056 [MEDIUM] CWE-20 CVE-2024-20056: In preloader, there is a possible escalation of privilege due to an insecure default value. This cou In preloader, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528185; Issue ID: ALPS08528185.

CVE-2024-20012 [MEDIUM] CWE-843 CVE-2024-20012: In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08358566; Issue ID: ALPS08358566.

CVE-2023-20837 [MEDIUM] CWE-787 CVE-2023-20837: In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to In seninf, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07992786; Issue ID: ALPS07992786.

CVE-2023-21116 [MEDIUM] CWE-863 CVE-2023-21116: In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade sys In verifyReplacingVersionCode of InstallPackageHelper.java, there is a possible way to downgrade system apps below system image version due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Androi

CVE-2021-0897 [MEDIUM] CWE-367 CVE-2021-0897: In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to In apusys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05672107; Issue ID: ALPS05670549.

CVE-2023-20724 [MEDIUM] CWE-125 CVE-2023-20724: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07843845; Issue ID: ALPS07843841.

CVE-2023-20723 [MEDIUM] CWE-125 CVE-2023-20723: In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07843845; Issue ID: ALPS07843845.

CVE-2023-20699 [MEDIUM] CWE-787 CVE-2023-20699: In adsp, there is a possible out of bounds write due to a missing bounds check. This could lead to l In adsp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07696073; Issue ID: ALPS07696073.

CVE-2023-32818 [MEDIUM] CWE-843 CVE-2023-32818: In vdec, there is a possible out of bounds write due to type confusion. This could lead to local esc In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08163896 & ALPS08013430; Issue ID: ALPS07867715.

CVE-2023-32830 [MEDIUM] CWE-787 CVE-2023-32830: In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03802522; Issue ID: DTV03802522.

CVE-2023-20804 [MEDIUM] CWE-787 CVE-2023-20804: In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07199773; Issue ID: ALPS07326384.

CVE-2023-20795 [MEDIUM] CWE-787 CVE-2023-20795: In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07864900; Issue ID: ALPS07864900.

CVE-2023-20807 [MEDIUM] CWE-787 CVE-2023-20807: In dpe, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In dpe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07608433; Issue ID: ALPS07608433.

CVE-2023-20786 [MEDIUM] CWE-787 CVE-2023-20786: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07767811; Issue ID: ALPS07767811.