Google Android vulnerabilities

CVE-2021-0625 [MEDIUM] CWE-667 CVE-2021-0625: In ccu, there is a possible memory corruption due to improper locking. This could lead to local esca In ccu, there is a possible memory corruption due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594996; Issue ID: ALPS05594996.

CVE-2021-0634 [MEDIUM] CWE-908 CVE-2021-0634: In display driver, there is a possible memory corruption due to uninitialized data. This could lead In display driver, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05594994; Issue ID: ALPS05594994.

CVE-2021-0410 [MEDIUM] CWE-125 CVE-2021-0410: In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This coul In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561360; Issue ID: ALPS05561360.

CVE-2021-0414 [MEDIUM] CWE-125 CVE-2021-0414: In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could l In flv extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561384; Issue ID: ALPS05561384.

CVE-2021-0662 [MEDIUM] CWE-787 CVE-2021-0662: In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could l In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844434; Issue ID: ALPS05844434.

CVE-2021-0409 [MEDIUM] CWE-125 CVE-2021-0409: In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This coul In flv extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561359; Issue ID: ALPS05561359.

CVE-2021-0412 [MEDIUM] CWE-125 CVE-2021-0412: In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could l In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561366; Issue ID: ALPS05561366.

CVE-2021-0413 [MEDIUM] CWE-125 CVE-2021-0413: In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could l In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561379; Issue ID: ALPS05561379.

CVE-2021-0616 [MEDIUM] CWE-125 CVE-2021-0616: In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could l In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561389; Issue ID: ALPS05561389.

CVE-2021-0617 [MEDIUM] CWE-125 CVE-2021-0617: In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could l In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561391; Issue ID: ALPS05561391.

CVE-2021-0632 [MEDIUM] CWE-125 CVE-2021-0632: In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lea In wifi driver, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a proximal attacker under certain build conditions with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05560246; Issue ID: ALPS05551383.

CVE-2021-0618 [MEDIUM] CWE-125 CVE-2021-0618: In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could l In ape extractor, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561394; Issue ID: ALPS05561394.

CVE-2021-0661 [MEDIUM] CWE-787 CVE-2021-0661: In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could l In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844413; Issue ID: ALPS05844413.

CVE-2021-0615 [MEDIUM] CWE-125 CVE-2021-0615: In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561369; Issue ID: ALPS05561369.

CVE-2021-0411 [MEDIUM] CWE-125 CVE-2021-0411: In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead In flv extractor, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561362; Issue ID: ALPS05561362.

CVE-2021-0614 [MEDIUM] CWE-125 CVE-2021-0614: In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This coul In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05495528; Issue ID: ALPS05495528.

CVE-2021-0613 [MEDIUM] CWE-125 CVE-2021-0613: In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This coul In asf extractor, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05489178; Issue ID: ALPS05489178.

CVE-2021-0663 [MEDIUM] CWE-787 CVE-2021-0663: In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could l In audio DSP, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05844458; Issue ID: ALPS05844458.

CVE-2021-0705 [HIGH] CVE-2021-0705: In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running i In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permissions due to Bypass of Background Service Restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:

CVE-2021-0708 [HIGH] CWE-610 CVE-2021-0708: In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due In runDumpHeap of ActivityManagerShellCommand.java, there is a possible deletion of system files due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-1832