Google Android vulnerabilities

CVE-2021-0562 [MEDIUM] CWE-125 CVE-2021-0562: In RasterIntraUpdate of motion_est.cpp, there is a possible out of bounds read due to an incorrect b In RasterIntraUpdate of motion_est.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-176084648

CVE-2022-39905 [MEDIUM] CWE-285 CVE-2022-39905: Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allow Implicit intent hijacking vulnerability in Telecom application prior to SMR Dec-2022 Release 1 allows attacker to access sensitive information via implicit intent.

CVE-2021-0619 [MEDIUM] CWE-125 CVE-2021-0619: In ape extractor, there is a possible out of bounds read due to a missing bounds check. This could l In ape extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561395; Issue ID: ALPS05561395.

CVE-2021-0412 [MEDIUM] CWE-125 CVE-2021-0412: In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could l In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561366; Issue ID: ALPS05561366.

CVE-2021-0413 [MEDIUM] CWE-125 CVE-2021-0413: In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could l In flv extractor, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS05561379; Issue ID: ALPS05561379.

CVE-2020-27035 [MEDIUM] CWE-416 CVE-2020-27035: In priorLinearAllocation of C2AllocatorIon.cpp, there is a possible use-after-free due to improper l In priorLinearAllocation of C2AllocatorIon.cpp, there is a possible use-after-free due to improper locking. This could lead to local information disclosure in the media codec with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-152239213

CVE-2021-39666 [MEDIUM] CWE-125 CVE-2021-39666: In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input valid In extract of MediaMetricsItem.h, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12Android ID: A-204445255

CVE-2023-21283 [MEDIUM] CVE-2023-21283: In multiple functions of StatusHints.java, there is a possible way to reveal images across users due In multiple functions of StatusHints.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2021-39778 [MEDIUM] CWE-20 CVE-2021-39778: In Telecomm, there is a possible way to determine whether an app is installed, without query permiss In Telecomm, there is a possible way to determine whether an app is installed, without query permissions, due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-196406138

CVE-2021-39740 [MEDIUM] CWE-20 CVE-2021-39740: In Messaging, there is a possible way to bypass attachment restrictions due to improper input valida In Messaging, there is a possible way to bypass attachment restrictions due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-209965112

CVE-2021-0428 [MEDIUM] CWE-862 CVE-2021-0428: In getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable identifi In getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable identifier due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-173421434

CVE-2024-0017 [MEDIUM] CWE-863 CVE-2024-0017: In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permis In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.

CVE-2022-20264 [MEDIUM] CWE-203 CVE-2022-20264: In Usage Stats Service, there is a possible way to determine whether an app is installed, without qu In Usage Stats Service, there is a possible way to determine whether an app is installed, without query permissions due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21334 [MEDIUM] CVE-2023-21334: In App Ops Service, there is a possible disclosure of information about installed packages due to a In App Ops Service, there is a possible disclosure of information about installed packages due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2022-33685 [MEDIUM] CWE-561 CVE-2022-33685: Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows atta Unprotected dynamic receiver in Wearable Manager Service prior to SMR Jul-2022 Release 1 allows attacker to launch arbitray activity and access senstive information.

CVE-2022-20092 [MEDIUM] CWE-125 CVE-2022-20092: In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could le In alac decoder, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06366061; Issue ID: ALPS06366061.

CVE-2022-20104 [MEDIUM] CVE-2022-20104: In aee daemon, there is a possible information disclosure due to improper access control. This could In aee daemon, there is a possible information disclosure due to improper access control. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06419017; Issue ID: ALPS06284104.

CVE-2021-0979 [MEDIUM] CWE-276 CVE-2021-0979: In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of package In isRequestPinItemSupported of ShortcutService.java, there is a possible cross-user leak of packages in which the default launcher supports requests to create pinned shortcuts due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Pro

CVE-2023-21333 [MEDIUM] CWE-203 CVE-2023-21333: In Text Services, there is a possible way to determine whether an app is installed, without query pe In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2023-21332 [MEDIUM] CWE-203 CVE-2023-21332: In Text Services, there is a possible way to determine whether an app is installed, without query pe In Text Services, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.