Google Android vulnerabilities

CVE-2023-20806 [MEDIUM] CWE-787 CVE-2023-20806: In hcp, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In hcp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07340433; Issue ID: ALPS07537437.

CVE-2023-20805 [MEDIUM] CWE-787 CVE-2023-20805: In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07199773; Issue ID: ALPS07326411.

CVE-2023-32821 [MEDIUM] CWE-787 CVE-2023-32821: In video, there is a possible out of bounds write due to a permissions bypass. This could lead to lo In video, there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08013430; Issue ID: ALPS08013433.

CVE-2025-20661 [MEDIUM] CWE-125 CVE-2025-20661: In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could le In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3185.

CVE-2025-20662 [MEDIUM] CWE-125 CVE-2025-20662: In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could le In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04428276; Issue ID: MSV-3184.

CVE-2025-20660 [MEDIUM] CWE-125 CVE-2025-20660: In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could le In PlayReady TA, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: DTV04436357; Issue ID: MSV-3186.

CVE-2024-20031 [MEDIUM] CWE-787 CVE-2024-20031: In da, there is a possible out of bounds write due to lack of valudation. This could lead to local e In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS08541742.

CVE-2024-20010 [MEDIUM] CWE-843 CVE-2024-20010: In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to In keyInstall, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08358560; Issue ID: ALPS08358560.

CVE-2023-32838 [MEDIUM] CWE-787 CVE-2023-32838: In dpe, there is a possible out of bounds write due to a missing valid range checking. This could le In dpe, there is a possible out of bounds write due to a missing valid range checking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07310805; Issue ID: ALPS07310805.

CVE-2023-32822 [MEDIUM] CWE-787 CVE-2023-32822: In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07994229; Issue ID: ALPS07994229.

CVE-2023-20821 [MEDIUM] CWE-787 CVE-2023-20821: In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07937113; Issue ID: ALPS07937113.

CVE-2023-20832 [MEDIUM] CWE-787 CVE-2023-20832: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08013530.

CVE-2023-20828 [MEDIUM] CWE-787 CVE-2023-20828: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014144.

CVE-2023-20829 [MEDIUM] CWE-787 CVE-2023-20829: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014148.

CVE-2023-38553 [MEDIUM] CWE-787 CVE-2023-38553: In gnss service, there is a possible out of bounds write due to a missing bounds check. This could l In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed

CVE-2023-20831 [MEDIUM] CWE-787 CVE-2023-20831: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014162.

CVE-2023-20830 [MEDIUM] CWE-787 CVE-2023-20830: In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to lo In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08014144; Issue ID: ALPS08014156.

CVE-2023-20811 [MEDIUM] CWE-787 CVE-2023-20811: In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03692061; Issue ID: DTV03692061.

CVE-2024-20032 [MEDIUM] CWE-862 CVE-2024-20032: In aee, there is a possible permission bypass due to a missing permission check. This could lead to In aee, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08487630; Issue ID: MSV-1020.

CVE-2023-32824 [MEDIUM] CWE-415 CVE-2023-32824: In rpmb , there is a possible double free due to improper locking. This could lead to local escalati In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07912966; Issue ID: ALPS07912961.