Google Android vulnerabilities

CVE-2021-39791 [MEDIUM] CWE-203 CVE-2021-39791: In WallpaperManagerService, there is a possible way to determine whether an app is installed, withou In WallpaperManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndro

CVE-2021-39766 [MEDIUM] CWE-203 CVE-2021-39766: In Settings, there is a possible way to determine whether an app is installed, without query permiss In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-198296

CVE-2021-39745 [MEDIUM] CWE-203 CVE-2021-39745: In DevicePolicyManager, there is a possible way to determine whether an app is installed, without qu In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid I

CVE-2021-39755 [MEDIUM] CWE-203 CVE-2021-39755: In DevicePolicyManager, there is a possible way to reveal the existence of an installed package with In DevicePolicyManager, there is a possible way to reveal the existence of an installed package without proper query permissions due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-

CVE-2021-39744 [MEDIUM] CWE-203 CVE-2021-39744: In DevicePolicyManager, there is a possible way to determine whether an app is installed, without qu In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid I

CVE-2021-39760 [MEDIUM] CWE-203 CVE-2021-39760: In AudioService, there is a possible way to determine whether an app is installed, without query per In AudioService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-19

CVE-2021-25357 [MEDIUM] CWE-200 CVE-2021-25357: A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O(8.x) and P(9.0), 3.4.81.1 in Android Q(10,0), and 3.6.80.7 in Android R(11.0) allows unprivileged applications to access contact information.

CVE-2021-30161 [MEDIUM] CVE-2021-30161: An issue was discovered on LG mobile devices with Android OS 11 software. Attackers can bypass the l An issue was discovered on LG mobile devices with Android OS 11 software. Attackers can bypass the lockscreen protection mechanism after an incoming call has been terminated. The LG ID is LVE-SMP-210002 (April 2021).

CVE-2021-25453 [MEDIUM] CWE-20 CVE-2021-25453: Some improper access control in Bluetooth APIs prior to SMR Sep-2021 Release 1 allows untrusted appl Some improper access control in Bluetooth APIs prior to SMR Sep-2021 Release 1 allows untrusted application to get Bluetooth information.

CVE-2024-0027 [MEDIUM] CWE-770 CVE-2024-0027: In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to reso In multiple functions of SnoozeHelper.java, there is a possible way to cause a boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE-2021-25392 [MEDIUM] CWE-200 CVE-2021-25392: Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allo Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path.

CVE-2021-39770 [MEDIUM] CWE-276 CVE-2021-39770: In Framework, there is a possible disclosure of the device owner package due to a missing permission In Framework, there is a possible disclosure of the device owner package due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID: A-193033501

CVE-2022-48464 [MEDIUM] CWE-787 CVE-2022-48464: In wifi service, there is a possible out of bounds write due to a missing bounds check. This could l In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

CVE-2022-48463 [MEDIUM] CWE-787 CVE-2022-48463: In wifi service, there is a possible out of bounds write due to a missing bounds check. This could l In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

CVE-2023-42719 [MEDIUM] CWE-125 CVE-2023-42719: In video service, there is a possible out of bounds read due to a incorrect bounds check. This could In video service, there is a possible out of bounds read due to a incorrect bounds check. This could lead to local denial of service with no additional execution privileges needed

CVE-2022-48462 [MEDIUM] CWE-787 CVE-2022-48462: In wifi service, there is a possible out of bounds write due to a missing bounds check. This could l In wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

CVE-2023-42720 [MEDIUM] CWE-125 CVE-2023-42720: In video service, there is a possible out of bounds read due to a missing bounds check. This could l In video service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

CVE-2023-42723 [MEDIUM] CWE-125 CVE-2023-42723: In camera service, there is a possible out of bounds read due to a missing bounds check. This could In camera service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed

CVE-2023-42721 [MEDIUM] CVE-2023-42721: In flv extractor, there is a possible missing verification incorrect input. This could lead to local In flv extractor, there is a possible missing verification incorrect input. This could lead to local denial of service with no additional execution privileges needed

CVE-2023-42728 [MEDIUM] CWE-125 CVE-2023-42728: In phasecheckserver, there is a possible out of bounds read due to a missing bounds check. This coul In phasecheckserver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed