Google Android vulnerabilities

CVE-2023-20809 [MEDIUM] CWE-787 CVE-2023-20809: In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to l In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03751198; Issue ID: DTV03751198.

CVE-2023-20808 [MEDIUM] CWE-787 CVE-2023-20808: In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: DTV03645895; Issue ID: DTV03645895.

CVE-2019-2168 [MEDIUM] CWE-908 CVE-2019-2168: In libxaac there is a possible information disclosure due to uninitialized data. This could lead to In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118492594

CVE-2019-2140 [MEDIUM] CWE-908 CVE-2019-2140: In libxaac, there is a possible information disclosure due to uninitialized data. This could lead to In libxaac, there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112705708

CVE-2019-2167 [MEDIUM] CWE-908 CVE-2019-2167: In libxaac there is a possible information disclosure due to uninitialized data. This could lead to In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118615501

CVE-2019-2166 [MEDIUM] CWE-908 CVE-2019-2166: In libxaac there is a possible information disclosure due to uninitialized data. This could lead to In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-117661478

CVE-2019-2169 [MEDIUM] CWE-908 CVE-2019-2169: In libxaac there is a possible information disclosure due to uninitialized data. This could lead to In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118492282

CVE-2019-2171 [MEDIUM] CWE-908 CVE-2019-2171: In libxaac there is a possible information disclosure due to uninitialized data. This could lead to In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113035086

CVE-2019-2172 [MEDIUM] CWE-908 CVE-2019-2172: In libxaac there is a possible information disclosure due to uninitialized data. This could lead to In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-113035224

CVE-2019-2170 [MEDIUM] CWE-908 CVE-2019-2170: In libxaac there is a possible information disclosure due to uninitialized data. This could lead to In libxaac there is a possible information disclosure due to uninitialized data. This could lead to information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-118615735

CVE-2024-20140 [MEDIUM] CWE-787 CVE-2024-20140: In power, there is a possible out of bounds write due to a missing bounds check. This could lead to In power, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09270402; Issue ID: MSV-2020.

CVE-2024-20125 [MEDIUM] CWE-787 CVE-2024-20125: In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to l In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained System privileges. User interaction is not needed for exploitation. Patch ID: ALPS09046782; Issue ID: MSV-1728.

CVE-2023-20619 [MEDIUM] CWE-667 CVE-2023-20619: In vcu, there is a possible memory corruption due to improper locking. This could lead to local esca In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519159; Issue ID: ALPS07519159.

CVE-2023-20618 [MEDIUM] CWE-667 CVE-2023-20618: In vcu, there is a possible memory corruption due to improper locking. This could lead to local esca In vcu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519184; Issue ID: ALPS07519184.

CVE-2023-20743 [MEDIUM] CWE-667 CVE-2023-20743: In vcu, there is a possible out of bounds write due to improper locking. This could lead to local es In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519142; Issue ID: ALPS07519142.

CVE-2023-20746 [MEDIUM] CWE-667 CVE-2023-20746: In vcu, there is a possible out of bounds write due to improper locking. This could lead to local es In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519142; Issue ID: ALPS07519217.

CVE-2023-20745 [MEDIUM] CWE-667 CVE-2023-20745: In vcu, there is a possible out of bounds write due to improper locking. This could lead to local es In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07519142; Issue ID: ALPS07560694.

CVE-2018-9588 [MEDIUM] CWE-125 CVE-2018-9588: In avdt_scb_hdl_report of avdt_scb_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, In avdt_scb_hdl_report of avdt_scb_act.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploita

CVE-2018-9594 [MEDIUM] CWE-125 CVE-2018-9594: In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, In llcp_link_proc_agf_pdu of llcp_link.cc in Android-7.0, Android-7.1.1, Android-7.1.2, Android-8.0, Android-8.1 and Android-9, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure over NFC with no additional execution privileges needed. User interaction is not needed for exploitation. Andr

CVE-2021-0632 [MEDIUM] CWE-125 CVE-2021-0632: In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lea In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker under certain build conditions with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05560246; Issue ID: ALPS05551383.